Trojaner-Board - TR/BitCoinMiner.V

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - TR/BitCoinMiner.V (https://www.trojaner-board.de/148011-tr-bitcoinminer-v.html)

TR/BitCoinMiner.V

Hallo.

Ich habe ein kleines Problem.
Seit etwa 10 Tagen habe ich nach dem Systemstart das Problem das meine GPU direkt auf 75% Auslastung hoch fährt dies konnte ich nur unterbinden in dem ich im Taskmanager die GPUmonitor.exe beendete. Nun kam heute von Avira die Anzeige das TR/BitCoinMiner.V unter folgendem Pfad gefunden wurde:

C:\Programm Files (x86)\VLC Player GPU+\GPUMonitor.exe und
C:\Programm Files (x86)\VLC Player GPU+\UsageMonitor.exe

Ich habe alle Dateien im Ordner VLC Player GPU+ gelöscht. Das Problem selbst tritt seit dem nicht mehr direkt auf, sondern äusert sich nur noch darin das der PC sehr instabil läuft.

Ich hoffe ihr könnt mir helfen.

Vielen Dank.

Liebe Grüße Tobi

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 03

Ran by Tobi (administrator) on TOBI-PC on 16-01-2014 15:15:03

Running from C:\Users\Tobi\Downloads

Windows 8 Pro (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc2.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe

(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files\EslWire\service\WireHelperSvc.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe

(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeTray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(Turtle Entertainment GmbH) C:\Program Files\EslWire\wire.exe

(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe

(Overwolf) C:\Program Files (x86)\Overwolf\Overwolf.exe

(Local Weather LLC) C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe

(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)

HKLM-x32\...\Run: [EKStatusMonitor] - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-01-15] (Eastman Kodak Company)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [UsageTemp] - C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe [1274592 2014-01-15] ()

HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)

HKCU\...\Run: [ESL Wire] - C:\Program Files\EslWire\wire.exe [4253696 2013-12-09] (Turtle Entertainment GmbH)

HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-07-12] (SteelSeries ApS)

HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35768 2013-12-09] (Overwolf)

HKCU\...\Run: [NextLive] - C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe)

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

Startup: C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DesktopWeatherAlerts.lnk

ShortcutTarget: DesktopWeatherAlerts.lnk -> C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp.exe ()

Startup: C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Weather Alerts.lnk

ShortcutTarget: Weather Alerts.lnk -> C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe (Local Weather LLC)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4B2FBEA62A6CCE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 

BHO: Plus-HD-5.0 - {11111111-1111-1111-1111-110411771118} - C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho64.dll (Plus HD)

BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)

BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

BHO-x32: Plus-HD-5.0 - {11111111-1111-1111-1111-110411771118} - C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho.dll (Plus HD)

BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

BHO-x32: Re-Markable - {f5ce6d93-1111-4c9f-899d-01d1c6a8f798} - C:\Program Files (x86)\Re-Markable\150.dll ()

BHO-x32: Shopping Suggestion - {F6C07882-D703-4DD5-905A-2C4E815A5066} - C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll (WW3, LLC)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 217.68.161.141 217.68.161.171
 

Chrome: 

=======

CHR Extension: (Lightning Newtab) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.7.9_0 [2014-01-16]

CHR Extension: (Google Wallet) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 [2014-01-16]

CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-12-29]
 

==================== Services (Whitelisted) =================
 

U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

U4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)

U2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2013-06-11] ()

U2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [468648 2014-01-09] (Elex do Brasil Participações Ltda)

U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

U3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)

U2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-25] ()

U2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)

U2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)

U2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)

U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

U2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2013-12-29] (Cherished Technololgy LIMITED)
 

==================== Drivers (Whitelisted) ====================
 

U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)

U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)

U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)

U3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()

U2 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

U0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2013-12-02] (<Turtle Entertainment>)

U3 iSafeKrnl; C:\Program Files (x86)\iSafe\iSafeKrnl.sys [219648 2014-01-09] (Elex do Brasil Participações Ltda)

U1 iSafeNetFilter; C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [44032 2014-01-09] (Elex do Brasil Participações Ltda)

U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

U3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()

U3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2013-11-15] (Razer Inc)

U3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)

U3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [38016 2013-06-25] (SteelSeries Corporation)

U3 WinRing0_1_2_0; E:\Program Files (x86)\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)

U3 cpuz136; \??\C:\Users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-01-16 15:15 - 2014-01-16 15:15 - 00014678 _____ C:\Users\Tobi\Downloads\FRST.txt

2014-01-16 15:14 - 2014-01-16 15:14 - 00000000 ____D C:\FRST

2014-01-16 15:12 - 2014-01-16 15:14 - 02076160 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe

2014-01-15 20:53 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll

2014-01-15 20:53 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll

2014-01-15 20:53 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll

2014-01-15 20:53 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys

2014-01-15 20:53 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll

2014-01-15 20:53 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll

2014-01-15 20:53 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys

2014-01-15 20:53 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-01-15 20:53 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2014-01-15 20:53 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-01-15 20:53 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat

2014-01-15 20:41 - 2014-01-15 20:41 - 00003320 _____ C:\Windows\System32\Tasks\SpyHunter4Startup

2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Windows\CD09642E061D4844BA37ED1480916404.TMP

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group

2014-01-15 20:41 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys

2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe

2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe

2014-01-15 20:30 - 2014-01-15 20:30 - 00669160 _____ (                                                            ) C:\Users\Tobi\Downloads\ZipOpenerSetup.exe

2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk

2014-01-15 18:52 - 2014-01-16 15:10 - 00000000 ____D C:\Program Files (x86)\iSafe

2014-01-15 18:52 - 2014-01-16 08:46 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\iSafe

2014-01-15 18:52 - 2014-01-15 18:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber

2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk

2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log

2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe

2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp

2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe

2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar

2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM

2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip

2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe

2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar

2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641

2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar

2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp

2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip

2014-01-03 17:23 - 2014-01-15 22:26 - 00000000 ____D C:\Windows\Minidump

2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp

2014-01-03 16:07 - 2014-01-03 18:50 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter

2014-01-03 15:04 - 2014-01-03 15:16 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung

2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk

2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA

2014-01-02 18:36 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-01-02 18:36 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies

2014-01-02 18:32 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-01-02 18:32 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-01-02 18:31 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-01-02 18:31 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-01-02 18:31 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-01-02 18:18 - 2014-01-02 18:30 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe

2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA

2014-01-02 18:07 - 2013-11-14 12:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-01-02 18:07 - 2013-11-14 12:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-01-02 18:07 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-01-02 18:07 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 03467927 _____ C:\Windows\system32\nvcoproc.bin

2014-01-02 18:07 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-01-02 18:07 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-01-02 17:35 - 2014-01-02 18:37 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation

2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe

2013-12-30 20:57 - 2013-12-30 20:57 - 00860160 _____ C:\Users\Tobi\Downloads\NFBBMHSWQHY.exe

2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt

2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar

2013-12-30 16:12 - 2014-01-15 22:51 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+

2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk

2013-12-30 16:08 - 2014-01-02 15:24 - 00000000 ____D C:\Program Files (x86)\MyPC Backup

2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip

2013-12-30 16:02 - 2013-12-30 18:21 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Systweak

2013-12-30 16:02 - 2012-01-20 14:14 - 00018816 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe

2013-12-30 16:00 - 2014-01-16 15:06 - 00001342 _____ C:\Windows\Tasks\Plus-HD-5.0-updater.job

2013-12-30 16:00 - 2014-01-16 15:06 - 00001244 _____ C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job

2013-12-30 16:00 - 2014-01-16 15:06 - 00001144 _____ C:\Windows\Tasks\Plus-HD-5.0-enabler.job

2013-12-30 16:00 - 2013-12-30 16:00 - 00004346 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-updater

2013-12-30 16:00 - 2013-12-30 16:00 - 00004248 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-codedownloader

2013-12-30 16:00 - 2013-12-30 16:00 - 00004148 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-enabler

2013-12-30 15:58 - 2014-01-16 15:06 - 00002118 _____ C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job

2013-12-30 15:58 - 2014-01-16 15:06 - 00001986 _____ C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job

2013-12-30 15:58 - 2014-01-16 08:46 - 00000300 _____ C:\Windows\Tasks\FoxTab.job

2013-12-30 15:58 - 2013-12-30 16:00 - 00000000 ____D C:\Program Files (x86)\Plus-HD-5.0

2013-12-30 15:58 - 2013-12-30 15:58 - 00002638 _____ C:\Windows\System32\Tasks\FoxTab

2013-12-30 15:52 - 2013-12-30 15:52 - 00576544 _____ C:\Users\Tobi\Downloads\Setup.exe

2013-12-30 15:46 - 2013-12-30 15:47 - 01297728 _____ (Bandoo Media Inc) C:\Users\Tobi\Downloads\jZipSetup-r136-n-bc.exe

2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar

2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar

2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar

2013-12-29 20:33 - 2013-12-29 20:39 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip

2013-12-29 19:30 - 2014-01-16 15:08 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\newnext.me

2013-12-29 19:30 - 2014-01-15 18:55 - 00000000 ____D C:\Users\Tobi\AppData\Local\WeatherAlerts

2013-12-29 19:30 - 2013-12-31 15:45 - 00000000 ____D C:\Users\Tobi\AppData\Local\Mobogenie

2013-12-29 19:30 - 2013-12-30 16:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache

2013-12-29 19:30 - 2013-12-30 16:07 - 00000000 ____D C:\Users\Tobi\AppData\Local\genienext

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\Documents\Mobogenie

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\Local_Weather_LLC

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt

2013-12-29 19:28 - 2013-12-29 19:28 - 00000006 _____ C:\Users\Tobi\Downloads\password CSGO hack v2.0.txt

2013-12-29 19:25 - 2014-01-16 15:09 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job

2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update

2013-12-29 19:25 - 2013-12-29 19:25 - 00000000 ____D C:\ProgramData\WPM

2013-12-29 19:25 - 2013-12-29 19:25 - 00000000 ____D C:\Program Files (x86)\Re-Markable

2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar

2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-29 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-12-29 19:10 - 2013-12-29 19:11 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar

2013-12-29 18:48 - 2013-12-29 19:09 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe

2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag

2013-12-25 05:19 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2013-12-25 05:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2013-12-25 05:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2013-12-25 05:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2013-12-25 05:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2013-12-25 05:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2013-12-25 05:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2013-12-25 05:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2013-12-25 05:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2013-12-25 05:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2013-12-25 05:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2013-12-25 05:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2013-12-25 05:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2013-12-25 05:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2013-12-25 05:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2013-12-25 05:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2013-12-25 05:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2013-12-25 05:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2013-12-25 05:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2013-12-25 05:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2013-12-25 05:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2013-12-25 05:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2013-12-25 05:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2013-12-25 05:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2013-12-25 05:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2013-12-25 05:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2013-12-25 05:18 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2013-12-25 05:18 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2013-12-25 05:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2013-12-25 05:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2013-12-25 05:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2013-12-25 05:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2013-12-25 05:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2013-12-25 05:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2013-12-25 05:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2013-12-25 05:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2013-12-25 05:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2013-12-25 05:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2013-12-25 05:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2013-12-25 05:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2013-12-25 05:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2013-12-25 05:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2013-12-25 05:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2013-12-25 05:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2013-12-25 05:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2013-12-25 05:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2013-12-25 05:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2013-12-25 05:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2013-12-25 05:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2013-12-25 05:18 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2013-12-25 05:18 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2013-12-25 05:18 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2013-12-25 05:18 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2013-12-25 05:18 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2013-12-25 05:18 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2013-12-25 05:18 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2013-12-25 05:18 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2013-12-25 05:18 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2013-12-25 05:18 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2013-12-25 05:17 - 2013-12-25 16:57 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher

2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-25 05:17 - 2012-06-19 13:02 - 03123272 ____R C:\Windows\SysWOW64\pbsvc.exe

2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url
 

==================== One Month Modified Files and Folders =======
 

2014-01-16 15:15 - 2014-01-16 15:15 - 00014678 _____ C:\Users\Tobi\Downloads\FRST.txt

2014-01-16 15:14 - 2014-01-16 15:14 - 00000000 ____D C:\FRST

2014-01-16 15:14 - 2014-01-16 15:12 - 02076160 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe

2014-01-16 15:12 - 2012-07-26 11:27 - 00751892 _____ C:\Windows\system32\perfh007.dat

2014-01-16 15:12 - 2012-07-26 11:27 - 00155620 _____ C:\Windows\system32\perfc007.dat

2014-01-16 15:12 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI

2014-01-16 15:10 - 2014-01-15 18:52 - 00000000 ____D C:\Program Files (x86)\iSafe

2014-01-16 15:09 - 2013-12-29 19:25 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job

2014-01-16 15:08 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\newnext.me

2014-01-16 15:07 - 2013-10-09 15:19 - 00000000 ____D C:\Users\Tobi\AppData\Local\Overwolf

2014-01-16 15:07 - 2013-06-18 15:05 - 00000000 ____D C:\Program Files (x86)\Steam

2014-01-16 15:06 - 2013-12-30 16:00 - 00001342 _____ C:\Windows\Tasks\Plus-HD-5.0-updater.job

2014-01-16 15:06 - 2013-12-30 16:00 - 00001244 _____ C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job

2014-01-16 15:06 - 2013-12-30 16:00 - 00001144 _____ C:\Windows\Tasks\Plus-HD-5.0-enabler.job

2014-01-16 15:06 - 2013-12-30 15:58 - 00002118 _____ C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job

2014-01-16 15:06 - 2013-12-30 15:58 - 00001986 _____ C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job

2014-01-16 15:06 - 2013-10-15 16:44 - 00000000 ____D C:\ProgramData\Kodak

2014-01-16 15:06 - 2013-09-02 14:21 - 00010161 _____ C:\autoupdate.log

2014-01-16 15:06 - 2013-06-18 21:31 - 00000000 ____D C:\Users\Tobi\AppData\Local\ESL Wire Game Client

2014-01-16 15:06 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA

2014-01-16 15:06 - 2013-06-18 14:50 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-01-16 15:06 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2014-01-16 15:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru

2014-01-16 08:46 - 2014-01-15 18:52 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\iSafe

2014-01-16 08:46 - 2013-12-30 15:58 - 00000300 _____ C:\Windows\Tasks\FoxTab.job

2014-01-16 08:46 - 2013-06-18 14:50 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-01-16 08:46 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache

2014-01-16 00:24 - 2013-07-01 18:09 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client

2014-01-15 23:36 - 2013-06-18 14:48 - 01387019 _____ C:\Windows\WindowsUpdate.log

2014-01-15 22:51 - 2013-12-30 16:12 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+

2014-01-15 22:26 - 2014-01-03 17:23 - 00000000 ____D C:\Windows\Minidump

2014-01-15 21:33 - 2013-08-16 00:36 - 00000000 ____D C:\Windows\system32\MRT

2014-01-15 21:33 - 2013-06-19 19:42 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-15 20:50 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent

2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat

2014-01-15 20:41 - 2014-01-15 20:41 - 00003320 _____ C:\Windows\System32\Tasks\SpyHunter4Startup

2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Windows\CD09642E061D4844BA37ED1480916404.TMP

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group

2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe

2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe

2014-01-15 20:30 - 2014-01-15 20:30 - 00669160 _____ (                                                            ) C:\Users\Tobi\Downloads\ZipOpenerSetup.exe

2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk

2014-01-15 19:34 - 2013-06-18 14:44 - 00117970 _____ C:\Windows\PFRO.log

2014-01-15 18:55 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\WeatherAlerts

2014-01-15 18:53 - 2014-01-15 18:52 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber

2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk

2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log

2014-01-15 18:52 - 2013-06-18 14:53 - 00002367 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2014-01-15 18:52 - 2013-06-18 14:48 - 00001646 _____ C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe

2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp

2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe

2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar

2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM

2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip

2014-01-09 09:02 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-01-09 09:02 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-01-08 16:08 - 2013-06-18 14:54 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3804308072-1049083099-4122200610-1001

2014-01-05 22:11 - 2013-12-03 15:01 - 00000000 ____D C:\Users\Tobi\Desktop\Tattoo

2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe

2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar

2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641

2014-01-04 17:32 - 2012-07-26 08:21 - 00111528 _____ C:\Windows\setupact.log

2014-01-04 17:31 - 2013-09-01 16:53 - 00131312 _____ C:\Windows\DPINST.LOG

2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar

2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp

2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip

2014-01-03 18:50 - 2014-01-03 16:07 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter

2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp

2014-01-03 15:16 - 2014-01-03 15:04 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung

2014-01-02 19:22 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI

2014-01-02 18:37 - 2014-01-02 17:35 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation

2014-01-02 18:37 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk

2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA

2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies

2014-01-02 18:30 - 2014-01-02 18:18 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe

2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA

2014-01-02 18:07 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help

2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT

2014-01-02 15:24 - 2013-12-30 16:08 - 00000000 ____D C:\Program Files (x86)\MyPC Backup

2014-01-02 15:24 - 2013-06-18 14:48 - 00000000 ___RD C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-02 15:12 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi\AppData\Local\VirtualStore

2014-01-01 18:24 - 2013-07-02 22:03 - 00000779 _____ C:\Users\Public\Desktop\ESL Wire.lnk

2014-01-01 18:24 - 2013-07-02 22:03 - 00000000 ____D C:\Program Files\EslWire

2013-12-31 15:45 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\Mobogenie

2013-12-31 02:58 - 2013-12-03 14:28 - 00032256 ___SH C:\Users\Tobi\Downloads\Thumbs.db

2013-12-31 02:58 - 2013-10-09 19:03 - 00043520 ___SH C:\Users\Tobi\Desktop\Thumbs.db

2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe

2013-12-30 20:57 - 2013-12-30 20:57 - 00860160 _____ C:\Users\Tobi\Downloads\NFBBMHSWQHY.exe

2013-12-30 18:21 - 2013-12-30 16:02 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Systweak

2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt

2013-12-30 16:27 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache

2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar

2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk

2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip

2013-12-30 16:07 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\genienext

2013-12-30 16:00 - 2013-12-30 16:00 - 00004346 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-updater

2013-12-30 16:00 - 2013-12-30 16:00 - 00004248 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-codedownloader

2013-12-30 16:00 - 2013-12-30 16:00 - 00004148 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-enabler

2013-12-30 16:00 - 2013-12-30 15:58 - 00000000 ____D C:\Program Files (x86)\Plus-HD-5.0

2013-12-30 15:58 - 2013-12-30 15:58 - 00002638 _____ C:\Windows\System32\Tasks\FoxTab

2013-12-30 15:52 - 2013-12-30 15:52 - 00576544 _____ C:\Users\Tobi\Downloads\Setup.exe

2013-12-30 15:47 - 2013-12-30 15:46 - 01297728 _____ (Bandoo Media Inc) C:\Users\Tobi\Downloads\jZipSetup-r136-n-bc.exe

2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar

2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar

2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar

2013-12-29 20:39 - 2013-12-29 20:33 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\Documents\Mobogenie

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\Local_Weather_LLC

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt

2013-12-29 19:30 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi

2013-12-29 19:28 - 2013-12-29 19:28 - 00000006 _____ C:\Users\Tobi\Downloads\password CSGO hack v2.0.txt

2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update

2013-12-29 19:25 - 2013-12-29 19:25 - 00000000 ____D C:\ProgramData\WPM

2013-12-29 19:25 - 2013-12-29 19:25 - 00000000 ____D C:\Program Files (x86)\Re-Markable

2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar

2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-29 19:11 - 2013-12-29 19:10 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar

2013-12-29 19:09 - 2013-12-29 18:48 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe

2013-12-25 16:57 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher

2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag

2013-12-25 05:18 - 2013-06-19 09:24 - 00026816 _____ C:\Windows\DirectX.log

2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url
 

Some content of TEMP:

====================

C:\Users\Tobi\AppData\Local\Temp\5844uninstall.exe

C:\Users\Tobi\AppData\Local\Temp\APNSetup.exe

C:\Users\Tobi\AppData\Local\Temp\avgnt.exe

C:\Users\Tobi\AppData\Local\Temp\BackupSetup.exe

C:\Users\Tobi\AppData\Local\Temp\EslWireSetup-1.17.1.7657-x64.exe

C:\Users\Tobi\AppData\Local\Temp\EslWireSetup-1.17.2.7687-x64.exe

C:\Users\Tobi\AppData\Local\Temp\EslWireSetup-1.17.3.7769-x64.exe

C:\Users\Tobi\AppData\Local\Temp\geek_x64.exe

C:\Users\Tobi\AppData\Local\Temp\GPUTemp.exe

C:\Users\Tobi\AppData\Local\Temp\ICReinstall_nsp5242.tmp.exe

C:\Users\Tobi\AppData\Local\Temp\ICReinstall_Setup.exe

C:\Users\Tobi\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe

C:\Users\Tobi\AppData\Local\Temp\nsc6BE3.exe

C:\Users\Tobi\AppData\Local\Temp\nsh6AC9.exe

C:\Users\Tobi\AppData\Local\Temp\nsk79B0.exe

C:\Users\Tobi\AppData\Local\Temp\nsoFE71.exe

C:\Users\Tobi\AppData\Local\Temp\nstFD57.exe

C:\Users\Tobi\AppData\Local\Temp\nvSCPAPI.dll

C:\Users\Tobi\AppData\Local\Temp\nvSCPAPI64.dll

C:\Users\Tobi\AppData\Local\Temp\nvStInst.exe

C:\Users\Tobi\AppData\Local\Temp\OpenCL.dll

C:\Users\Tobi\AppData\Local\Temp\prefetch.exe

C:\Users\Tobi\AppData\Local\Temp\presetup.exe

C:\Users\Tobi\AppData\Local\Temp\SearchProtectINT.exe

C:\Users\Tobi\AppData\Local\Temp\Setup1.exe

C:\Users\Tobi\AppData\Local\Temp\setup__1567.exe

C:\Users\Tobi\AppData\Local\Temp\SHSetup.exe

C:\Users\Tobi\AppData\Local\Temp\Sqlite3.dll

C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe

C:\Users\Tobi\AppData\Local\Temp\vcredist_x64.exe

C:\Users\Tobi\AppData\Local\Temp\wupdater.exe

C:\Users\Tobi\AppData\Local\Temp\x2blapi.dll
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-01-08 03:00
 

==================== End Of Log ============================

--- --- ---
--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2014 03

Ran by Tobi at 2014-01-16 15:15:32

Running from C:\Users\Tobi\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

aioprnt (Version: 5.3.1.0 - Eastman Kodak Company) Hidden

aioscnnr (x32 Version: 5.8.10.0 - Your Company Name) Hidden

aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden

Assassin's Creed IV Black Flag (x32 Version:  - Ubisoft)

Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)

center (x32 Version: 7.7.2.0 - Eastman Kodak Company) Hidden

Classic Shell (Version: 3.6.7 - IvoSoft)

Counter-Strike: Global Offensive (x32 Version:  - Valve)

Creative Sound Blaster Properties x64 Edition (x32 Version:  - )

DesktopWeatherAlerts (HKCU Version: 1.0.13.0 - Local Weather LLC)

ESL Wire 1.17.3 (Version:  - Turtle Entertainment GmbH)

essentials (x32 Version: 7.7.2.0 - Eastman Kodak Company) Hidden

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

Google Chrome (x32 Version: 32.0.1700.72 - Google Inc.)

Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden

GPU Monitor (x32 Version: 11.041.44 - GPU Usage) <==== ATTENTION

Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Kodak AIO Printer (Version: 7.7.2.0 - Eastman Kodak Company) Hidden

KODAK All-in-One Software (x32 Version: 7.7.6.0 - Eastman Kodak Company)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)

MSI Afterburner 2.3.1 (x32 Version: 2.3.1 - MSI Co., LTD)

NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)

NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)

NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden

NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation)

ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden

Overwolf (x32 Version: 0.47.284 - Overwolf)

Overwolf.Setup.VC100CRTx64.Dist (Version: 1.0.0 - Overwolf)

Plus-HD-5.0 (x32 Version: 1.31.153.3 - Plus HD) <==== ATTENTION

PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden

PrintProjects (x32 Version: 1.0.0.9282 - RocketLife Inc.)

PunkBuster Services (x32 Version: 0.991 - Even Balance, Inc.)

Razer Game Booster (x32 Version: 3.7 - Razer USA Ltd)

Razer Surround (x32 Version: 1.05.00 - Razer Inc.)

Razer Synapse 2.0 (x32 Version: 1.16.6 - Razer Inc.)

Re-Markable (x32 Version:  - Re-Markable Software)

SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden

SpyHunter (Version: 4.16.5.4290 - Enigma Software Group USA, LLC)

Stardock Start8 (x32 Version: 1.16 - Stardock Software, Inc.)

Steam (x32 Version: 1.0.0.0 - Valve Corporation)

SteelSeries Engine (Version: 2.8.59.30483 - SteelSeries)

TeamSpeak 3 Client (Version: 3.0.13.1 - TeamSpeak Systems GmbH)

Uplay (x32 Version: 4.0 - Ubisoft)

VLC media player 2.0.1 (x32 Version: 2.0.1 - VideoLAN)

WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)

WPM17.8.0.3159 (x32 Version: 17.8.0.3159 - Cherished Technololgy LIMITED) <==== ATTENTION

YAC (x32 Version:  - ELEX DO BRASIL PARTICIPAÇÕES LTDA)
 

==================== Restore Points  =========================
 

15-01-2014 20:32:52 Windows Update
 

==================== Hosts content: ==========================
 

2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0431213B-035A-4952-BE14-0FC8135EA52C} - System32\Tasks\Plus-HD-5.0-updater => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe [2013-12-30] (Plus HD) <==== ATTENTION

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {2EF75021-6B4A-49DA-8685-E5AF6D4C1FB7} - System32\Tasks\Plus-HD-5.0-enabler => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe [2013-12-30] (Plus HD) <==== ATTENTION

Task: {523095BE-013D-4432-98C3-DDAAA102549C} - System32\Tasks\Plus-HD-5.0-chromeinstaller => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe [2013-12-30] (Plus HD) <==== ATTENTION

Task: {6474088C-3800-4F7E-A975-3DEFA1849154} - System32\Tasks\Plus-HD-5.0-firefoxinstaller => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe [2013-12-30] (Plus HD) <==== ATTENTION

Task: {81FB4BA7-D1F2-408A-A611-9FD5B475FB8B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-18] (Google Inc.)

Task: {9029507F-2921-4CB6-B860-712113CE3446} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)

Task: {9DEAA037-9FD2-4C66-A1DB-CB1E015A88F1} - System32\Tasks\Razer_Game_Booster_AutoUpdate => E:\Program Files (x86)\Razer Game Booster\AutoUpdate.exe [2013-06-05] ()

Task: {A242208A-D2A8-4DE1-88D0-0B8BE5248330} - System32\Tasks\Re-Markable Update => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe [2013-12-29] ()

Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {A7BC554B-B7CF-4C27-AD05-FC728FC17814} - System32\Tasks\Plus-HD-5.0-codedownloader => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe [2013-12-30] (Plus HD) <==== ATTENTION

Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {DD9888C9-CF48-4A6F-BAA0-EBA7AB404E41} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-18] (Google Inc.)

Task: {DF2640C1-EBF2-4851-96C1-1D0B85379C69} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2013-10-18] (Enigma Software Group USA, LLC.)

Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {F169BD48-A55D-493F-87AA-B3D621904A7D} - System32\Tasks\FoxTab => C:\Users\Tobi\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: {F858D828-BA57-4634-B676-FB6F02CBB286} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION

Task: C:\Windows\Tasks\FoxTab.job => C:\Users\Tobi\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe <==== ATTENTION

Task: C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\Plus-HD-5.0-enabler.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe <==== ATTENTION

Task: C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe <==== ATTENTION

Task: C:\Windows\Tasks\Plus-HD-5.0-updater.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe <==== ATTENTION

Task: C:\Windows\Tasks\Re-Markable Update.job => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-12-09 12:08 - 2013-12-09 12:08 - 00045608 _____ () C:\Program Files (x86)\Overwolf\x64\OWExplorer-20125.dll

2013-09-01 18:44 - 2012-08-01 14:44 - 00139024 _____ () E:\Program Files (x86)\Razer Game Booster\GBV3ContextMenu.dll

2013-07-02 22:03 - 2013-06-11 10:52 - 02868736 _____ () C:\Program Files\EslWire\QtCore4.dll

2013-07-02 22:03 - 2013-06-11 10:52 - 10445824 _____ () C:\Program Files\EslWire\QtGui4.dll

2013-07-02 22:03 - 2013-06-11 10:52 - 14672896 _____ () C:\Program Files\EslWire\QtWebKit4.dll

2013-07-02 22:03 - 2013-12-09 11:42 - 08660992 _____ () C:\Program Files\EslWire\WireCore.dll

2013-07-02 22:03 - 2013-06-11 10:52 - 00348160 _____ () C:\Program Files\EslWire\phonon4.dll

2013-07-02 22:03 - 2013-06-11 10:52 - 01277440 _____ () C:\Program Files\EslWire\QtNetwork4.dll

2013-07-02 22:03 - 2013-06-11 10:52 - 00503296 _____ () C:\Program Files\EslWire\QtDBus4.dll

2013-07-02 22:03 - 2013-06-11 10:51 - 00799744 _____ () C:\Program Files\EslWire\QtSql4.dll

2013-07-02 22:03 - 2013-07-09 12:12 - 00214016 _____ () C:\Program Files\EslWire\NocIPC64.dll

2013-07-02 22:03 - 2013-12-09 11:40 - 00606208 _____ () C:\Program Files\EslWire\Linesman.dll

2013-07-02 22:03 - 2013-06-11 10:52 - 00454656 _____ () C:\Program Files\EslWire\QtXml4.dll

2013-07-02 22:03 - 2013-06-11 10:51 - 00032768 _____ () C:\Program Files\EslWire\imageformats\qgif4.dll

2013-07-02 22:03 - 2013-06-11 10:51 - 00237056 _____ () C:\Program Files\EslWire\imageformats\qjpeg4.dll

2013-07-02 22:03 - 2013-06-11 10:51 - 00278528 _____ () C:\Program Files\EslWire\imageformats\qmng4.dll

2013-07-02 22:03 - 2013-07-09 12:12 - 00310272 _____ () C:\Program Files\EslWire\laginspect\laginspect.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00665088 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineLib.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00175104 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DBUtils.dll

2013-08-29 21:58 - 2013-08-29 21:58 - 00089915 _____ () C:\Users\Tobi\AppData\Local\Temp\70aeaca4-098f-4bcc-b0fa-e2544fb40678\CliSecureRT64.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00278528 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DriverCommunication.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00139776 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\ISSPlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00148480 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Localization.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00145408 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Utilities.dll

2013-01-10 06:46 - 2013-01-10 06:46 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\x2api.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 09519104 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineWinGui.dll

2013-01-10 06:46 - 2013-01-10 06:46 - 01102336 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\System.Data.SQLite.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00209408 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CustomWPFColorPicker.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00349696 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MousePlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00171008 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\D3MousePlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00173568 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\KKMousePlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00171008 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SRawPlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00307200 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MLGSenseiPlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00154624 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWGoldPlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\GW2MousePlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00169472 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CSGOMousePlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DOTA2MousePlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00157184 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWWirelessPlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CODMousePlugin.dll

2013-07-12 15:57 - 2013-07-12 15:57 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoTMousePlugin.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00039464 _____ () C:\Program Files (x86)\Overwolf\x64\OWLog.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00721960 _____ () C:\Program Files (x86)\Overwolf\x64\OWExplorerLauncher.dll

2014-01-15 18:52 - 2013-12-02 07:56 - 00176976 _____ () C:\Program Files (x86)\iSafe\tws\unrar.dll

2014-01-15 18:52 - 2013-12-02 07:56 - 00068432 _____ () C:\Program Files (x86)\iSafe\tws\zlib1.dll

2014-01-15 18:52 - 2013-12-12 03:28 - 00087744 _____ () C:\Program Files (x86)\iSafe\tws\unacev2.dll

2013-12-29 19:11 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2014-01-15 18:52 - 2014-01-09 10:43 - 00185000 _____ () C:\Program Files (x86)\iSafe\libpng.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00079400 _____ () C:\Program Files (x86)\Overwolf\OWExplorer-20125.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00015288 _____ () C:\Program Files (x86)\Overwolf\ODK.AddIns.V2.HostView.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00134696 _____ () C:\Program Files (x86)\Overwolf\OWService.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00970792 _____ () C:\Program Files (x86)\Overwolf\OWServer.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00038440 _____ () C:\Program Files (x86)\Overwolf\OWLog.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00839720 _____ () C:\Program Files (x86)\Overwolf\OWAgent.dll

2013-12-09 12:08 - 2013-12-09 12:08 - 00029224 _____ () C:\Program Files (x86)\Overwolf\OWExplorerLauncher.dll

2014-01-08 07:16 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll

2014-01-08 07:16 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files (x86)\Steam\libavutil-52.dll

2013-05-06 16:05 - 2013-12-12 23:04 - 00716800 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2013-06-06 13:06 - 2014-01-07 22:00 - 01138088 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2013-03-26 15:16 - 2013-12-12 23:04 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2012-12-11 08:51 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll

2012-12-11 08:51 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll

2012-12-11 08:51 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll

2014-01-08 01:25 - 2014-01-07 05:04 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\libglesv2.dll

2014-01-08 01:25 - 2014-01-07 05:04 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\libegl.dll

2014-01-08 01:25 - 2014-01-07 05:05 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\pdf.dll

2014-01-08 01:25 - 2014-01-07 05:05 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll

2014-01-08 01:25 - 2014-01-07 05:04 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\ffmpegsumo.dll

2014-01-08 01:25 - 2014-01-07 05:05 - 13615896 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : Windows has stopped this device because it has reported problems. (Code 43)

Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 
 
 

==================== Event log errors: =========================
 

Could not start eventlog service, could not read events.
 

Der angeforderte Dienst wurde bereits gestartet.
 

Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 19%

Total physical RAM: 16346.33 MB

Available physical RAM: 13238.96 MB

Total Pagefile: 32730.33 MB

Available Pagefile: 29118.67 MB

Total Virtual: 8192 MB

Available Virtual: 8191.77 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:55.38 GB) (Free:5.46 GB) NTFS

Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive e: () (Fixed) (Total:931.41 GB) (Free:266.29 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 629ACFEB)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (Size: 56 GB) (Disk ID: 324C9AF7)
 

Partition: GPT Partition Type

==================== End Of Log ============================

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Sorry das ich mich erst jetzt melde war übers Wochenende nicht Zuhause.

Also Hier der Scan.
Der Rechner hängt sich im Moment bei allen möglichen Anwendungen auf.

Code:

ComboFix 14-01-16.03 - Tobi 19.01.2014  18:06:08.1.4 - x64

Microsoft Windows 8 Pro  6.2.9200.0.1252.49.1031.18.16346.13673 [GMT 1:00]

ausgeführt von:: c:\users\Tobi\Downloads\ComboFix.exe

AV: Avira Desktop *Disabled/Outdated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Avira Desktop *Disabled/Outdated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\Re-Markable\150.dll

c:\users\Tobi\AppData\Local\Temp\70aeaca4-098f-4bcc-b0fa-e2544fb40678\CliSecureRT64.dll

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-12-19 bis 2014-01-19  ))))))))))))))))))))))))))))))

.

.

2014-01-19 17:15 . 2014-01-19 17:15        --------        d-----w-        c:\users\Default\AppData\Local\temp

2014-01-16 14:14 . 2014-01-16 14:14        --------        d-----w-        C:\FRST

2014-01-15 19:53 . 2013-10-31 05:56        915968        ----a-w-        c:\windows\system32\MPSSVC.dll

2014-01-15 19:53 . 2013-10-31 05:56        758784        ----a-w-        c:\windows\system32\FirewallAPI.dll

2014-01-15 19:53 . 2013-10-31 04:01        550400        ----a-w-        c:\windows\SysWow64\FirewallAPI.dll

2014-01-15 19:53 . 2013-10-31 03:42        74752        ----a-w-        c:\windows\system32\drivers\mpsdrv.sys

2014-01-15 19:53 . 2013-10-28 05:50        588288        ----a-w-        c:\windows\system32\SHCore.dll

2014-01-15 19:53 . 2013-10-28 04:05        452608        ----a-w-        c:\windows\SysWow64\SHCore.dll

2014-01-15 19:53 . 2013-10-13 20:49        100696        ----a-w-        c:\windows\system32\drivers\disk.sys

2014-01-15 19:53 . 2013-08-27 05:21        227840        ----a-w-        c:\windows\system32\WebClnt.dll

2014-01-15 19:53 . 2013-08-27 05:19        104448        ----a-w-        c:\windows\system32\davclnt.dll

2014-01-15 19:53 . 2013-08-26 22:29        199168        ----a-w-        c:\windows\SysWow64\WebClnt.dll

2014-01-15 19:53 . 2013-08-26 22:28        86016        ----a-w-        c:\windows\SysWow64\davclnt.dll

2014-01-15 19:41 . 2012-06-22 10:01        22704        ----a-w-        c:\windows\system32\drivers\EsgScanner.sys

2014-01-15 19:41 . 2014-01-15 19:41        110080        ----a-r-        c:\users\Tobi\AppData\Roaming\Microsoft\Installer\{CD09642E-061D-4844-BA37-ED1480916404}\IconF7A21AF7.exe

2014-01-15 19:41 . 2014-01-15 19:41        110080        ----a-r-        c:\users\Tobi\AppData\Roaming\Microsoft\Installer\{CD09642E-061D-4844-BA37-ED1480916404}\IconD7F16134.exe

2014-01-15 19:41 . 2014-01-15 19:41        110080        ----a-r-        c:\users\Tobi\AppData\Roaming\Microsoft\Installer\{CD09642E-061D-4844-BA37-ED1480916404}\Icon1226A4C5.exe

2014-01-15 19:41 . 2014-01-15 19:41        --------        d-----w-        C:\sh4ldr

2014-01-15 19:41 . 2014-01-15 19:41        --------        d-----w-        c:\program files\Enigma Software Group

2014-01-15 19:41 . 2014-01-15 19:41        --------        d-----w-        c:\program files (x86)\Common Files\Wise Installation Wizard

2014-01-15 19:32 . 2014-01-15 19:33        --------        d-----w-        c:\users\Tobi\AppData\Roaming\Geek Uninstaller

2014-01-15 17:52 . 2014-01-15 17:53        --------        d-----w-        c:\users\Tobi\AppData\Roaming\eCyber

2014-01-15 17:52 . 2014-01-15 17:52        --------        d-----w-        c:\windows\system32\log

2014-01-15 17:52 . 2014-01-19 17:03        --------        d-----w-        c:\program files (x86)\iSafe

2014-01-15 17:52 . 2014-01-16 07:46        --------        d-----w-        c:\users\Tobi\AppData\Roaming\iSafe

2014-01-15 17:32 . 2014-01-15 17:32        --------        d-----w-        c:\users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

2014-01-13 16:11 . 2014-01-13 16:11        --------        d-----w-        c:\users\Tobi\AppData\Local\DM

2014-01-04 16:32 . 2014-01-04 16:32        --------        d-----w-        c:\programdata\RzMaelstromVAD_1.1.49.1641

2014-01-02 17:36 . 2013-12-05 08:42        39200        ----a-w-        c:\windows\system32\drivers\nvvad64v.sys

2014-01-02 17:36 . 2013-12-05 08:42        32544        ----a-w-        c:\windows\SysWow64\nvaudcap32v.dll

2014-01-02 17:36 . 2014-01-02 17:36        --------        d-----w-        c:\users\Tobi\AppData\Local\NVIDIA

2014-01-02 17:32 . 2013-12-10 02:13        982232        ----a-w-        c:\windows\SysWow64\nvspcap.dll

2014-01-02 17:32 . 2013-12-10 02:13        1100248        ----a-w-        c:\windows\system32\nvspcap64.dll

2014-01-02 17:32 . 2014-01-02 17:32        --------        d-----w-        c:\program files (x86)\AGEIA Technologies

2014-01-02 17:10 . 2014-01-02 17:10        --------        d-----w-        c:\users\Tobi\AppData\Roaming\NVIDIA

2014-01-02 17:07 . 2013-11-11 15:02        6674208        ----a-w-        c:\windows\system32\nvcpl.dll

2014-01-02 17:07 . 2013-11-11 15:02        3490080        ----a-w-        c:\windows\system32\nvsvc64.dll

2014-01-02 17:07 . 2013-11-11 15:01        922912        ----a-w-        c:\windows\system32\nvvsvc.exe

2014-01-02 17:07 . 2013-11-11 15:01        63776        ----a-w-        c:\windows\system32\nvshext.dll

2014-01-02 17:07 . 2013-11-11 15:01        2559776        ----a-w-        c:\windows\system32\nvsvcr.dll

2014-01-02 17:07 . 2013-11-11 15:01        219424        ----a-w-        c:\windows\system32\nvmctray.dll

2014-01-02 17:07 . 2013-11-11 15:01        3467927        ----a-w-        c:\windows\system32\nvcoproc.bin

2014-01-02 17:07 . 2013-11-14 11:56        61216        ----a-w-        c:\windows\system32\OpenCL.dll

2014-01-02 17:07 . 2013-11-14 11:56        53024        ----a-w-        c:\windows\SysWow64\OpenCL.dll

2014-01-02 16:35 . 2014-01-02 17:37        --------        d-----w-        c:\users\Tobi\AppData\Local\NVIDIA Corporation

2013-12-30 17:20 . 2013-12-30 17:20        --------        d-----w-        c:\windows\system32\appmgmt

2013-12-30 15:12 . 2014-01-15 21:51        --------        d-----w-        c:\program files (x86)\VLC Player GPU+

2013-12-30 15:08 . 2014-01-02 14:24        --------        d-----w-        c:\program files (x86)\MyPC Backup

2013-12-30 15:02 . 2013-12-30 17:21        --------        d-----w-        c:\users\Tobi\AppData\Roaming\Systweak

2013-12-30 15:02 . 2012-01-20 13:14        18816        ----a-w-        c:\windows\system32\roboot64.exe

2013-12-30 14:58 . 2013-12-30 15:00        --------        d-----w-        c:\program files (x86)\Plus-HD-5.0

2013-12-29 18:30 . 2013-12-29 18:30        --------        d-----w-        c:\users\Tobi\AppData\Local\Local_Weather_LLC

2013-12-29 18:30 . 2014-01-15 17:55        --------        d-----w-        c:\users\Tobi\AppData\Local\WeatherAlerts

2013-12-29 18:30 . 2013-12-29 18:30        --------        d-----w-        c:\users\Tobi\.android

2013-12-29 18:30 . 2014-01-19 17:04        --------        d-----w-        c:\users\Tobi\AppData\Roaming\newnext.me

2013-12-29 18:30 . 2013-12-31 14:45        --------        d-----w-        c:\users\Tobi\AppData\Local\Mobogenie

2013-12-29 18:30 . 2013-12-30 15:27        --------        d-----w-        c:\users\Tobi\AppData\Local\cache

2013-12-29 18:30 . 2013-12-30 15:07        --------        d-----w-        c:\users\Tobi\AppData\Local\genienext

2013-12-29 18:25 . 2014-01-19 17:15        --------        d-----w-        c:\program files (x86)\Re-Markable

2013-12-29 18:25 . 2013-12-29 18:25        --------        d-----w-        c:\programdata\WPM

2013-12-29 18:11 . 2013-12-29 18:11        --------        d-----w-        c:\users\Tobi\AppData\Roaming\Avira

2013-12-29 18:11 . 2013-12-09 10:37        84720        ----a-w-        c:\windows\system32\drivers\avnetflt.sys

2013-12-29 18:11 . 2013-12-09 10:37        28600        ----a-w-        c:\windows\system32\drivers\avkmgr.sys

2013-12-29 18:11 . 2013-12-09 10:37        131576        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2013-12-29 18:11 . 2013-12-09 10:37        108440        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2013-12-29 18:11 . 2013-12-29 18:11        --------        d-----w-        c:\programdata\Avira

2013-12-29 18:11 . 2013-12-29 18:11        --------        d-----w-        c:\program files (x86)\Avira

2013-12-29 11:08 . 2013-12-04 03:28        10315576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{68A36410-2469-40C4-8BCB-C199CCF1CE32}\mpengine.dll

2013-12-25 04:18 . 2008-10-15 05:22        5631312        ----a-w-        c:\windows\system32\D3DX9_40.dll

2013-12-25 04:17 . 2013-12-25 04:17        75136        ----a-w-        c:\windows\SysWow64\PnkBstrA.exe

2013-12-25 04:17 . 2013-12-25 04:17        189248        ----a-w-        c:\windows\SysWow64\PnkBstrB.exe

2013-12-25 04:17 . 2012-06-19 12:02        3123272        ----a-r-        c:\windows\SysWow64\pbsvc.exe

2013-12-25 04:17 . 2013-12-25 15:57        --------        d-----w-        c:\users\Tobi\AppData\Local\Ubisoft Game Launcher

2013-12-25 04:17 . 2013-12-25 04:17        --------        d-----w-        c:\program files (x86)\Ubisoft

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-01-15 20:33 . 2013-06-19 18:42        86054176        ----a-w-        c:\windows\system32\MRT.exe

2014-01-09 08:02 . 2012-07-26 08:14        78296        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-01-09 08:02 . 2012-07-26 08:14        694240        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-12-02 17:08 . 2013-07-02 21:24        184968        ----a-w-        c:\windows\system32\drivers\ESLWireACD.sys

2013-11-27 21:51 . 2013-11-27 21:51        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-11-21 09:59 . 2013-11-21 09:59        40696        ----a-w-        c:\windows\system32\drivers\RzMaelstromVAD.sys

2013-11-21 09:56 . 2013-11-21 09:56        245760        ----a-w-        c:\windows\system32\DriverInstallCACMD.exe

2013-11-21 09:56 . 2013-11-21 09:56        69632        ----a-w-        c:\windows\system32\DriverInstallCA.dll

2013-11-19 10:21 . 2013-06-19 18:49        267936        ------w-        c:\windows\system32\MpSigStub.exe

2013-11-15 06:37 . 2013-11-15 06:37        39080        ----a-w-        c:\windows\system32\drivers\rzendpt.sys

2013-11-15 06:37 . 2013-11-15 06:37        149160        ----a-w-        c:\windows\system32\drivers\rzudd.sys

2013-11-15 06:32 . 2013-11-15 06:32        57344        ----a-w-        c:\windows\SysWow64\rzdevinfo.dll

2013-11-15 06:32 . 2013-11-15 06:32        154112        ----a-w-        c:\windows\SysWow64\rztouchdll.dll

2013-11-15 06:31 . 2013-11-15 06:31        834560        ----a-w-        c:\windows\SysWow64\rzdevicedll.dll

2013-11-15 06:31 . 2013-11-15 06:31        296448        ----a-w-        c:\windows\SysWow64\rzaudiodll.dll

2013-11-15 06:31 . 2013-11-15 06:31        117248        ----a-w-        c:\windows\SysWow64\rzdisplaydll.dll

2013-11-14 11:56 . 2013-09-24 16:30        18293608        ----a-w-        c:\windows\system32\nvwgf2umx.dll

2013-11-14 11:56 . 2013-09-24 16:30        1436528        ----a-w-        c:\windows\system32\nvumdshimx.dll

2013-11-14 11:56 . 2013-09-24 16:30        18208624        ----a-w-        c:\windows\system32\nvd3dumx.dll

2013-11-14 11:56 . 2013-09-24 16:30        15218504        ----a-w-        c:\windows\SysWow64\nvd3dum.dll

2013-11-14 11:56 . 2013-09-24 16:30        3069608        ----a-w-        c:\windows\system32\nvapi64.dll

2013-11-14 11:56 . 2013-09-24 16:30        2697248        ----a-w-        c:\windows\SysWow64\nvapi.dll

2013-11-11 07:59 . 2013-11-11 07:59        590112        ----a-w-        c:\windows\SysWow64\nvStreaming.exe

2013-11-06 23:18 . 2013-12-11 09:43        4036608        ----a-w-        c:\windows\system32\win32k.sys

2013-10-28 00:12 . 2013-10-28 00:12        204568        ----a-w-        c:\windows\system32\drivers\ssudmdm.sys

2013-10-28 00:12 . 2013-10-28 00:12        107288        ----a-w-        c:\windows\system32\drivers\ssudbus.sys

2013-10-25 06:19 . 2013-12-11 09:50        51712        ----a-w-        c:\windows\system32\ie4uinit.exe

2013-10-25 06:19 . 2013-12-11 09:50        2241536        ----a-w-        c:\windows\system32\wininet.dll

2013-10-25 06:19 . 2013-12-11 09:50        915968        ----a-w-        c:\windows\system32\uxtheme.dll

2013-10-25 06:19 . 2013-12-11 09:50        1365504        ----a-w-        c:\windows\system32\urlmon.dll

2013-10-25 06:18 . 2013-12-11 09:50        19271168        ----a-w-        c:\windows\system32\mshtml.dll

2013-10-25 06:18 . 2013-12-11 09:50        603136        ----a-w-        c:\windows\system32\msfeeds.dll

2013-10-25 06:17 . 2013-12-11 09:50        855552        ----a-w-        c:\windows\system32\jscript.dll

2013-10-25 06:17 . 2013-12-11 09:50        3959808        ----a-w-        c:\windows\system32\jscript9.dll

2013-10-25 06:17 . 2013-12-11 09:50        2648576        ----a-w-        c:\windows\system32\iertutil.dll

2013-10-25 06:17 . 2013-12-11 09:50        15404032        ----a-w-        c:\windows\system32\ieframe.dll

2013-10-25 04:45 . 2013-12-11 09:50        1767936        ----a-w-        c:\windows\SysWow64\wininet.dll

2013-10-25 04:43 . 2013-12-11 09:50        2877952        ----a-w-        c:\windows\SysWow64\jscript9.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110411771118}]

2013-12-30 15:00        644968        ----a-w-        c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{F6C07882-D703-4DD5-905A-2C4E815A5066}]

2014-01-15 17:32        115712        ----a-w-        c:\users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]

@="{594D4122-1F87-41E2-96C7-825FB4796516}"

[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]

2013-04-12 21:28        611840        ----a-w-        c:\program files\Classic Shell\ClassicExplorer32.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="c:\program files (x86)\Steam\steam.exe" [2014-01-07 1815464]

"ESL Wire"="c:\program files\EslWire\wire.exe" [2013-12-09 4253696]

"SteelSeries Engine"="c:\program files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe" [2013-07-12 242688]

"Overwolf"="c:\program files (x86)\Overwolf\Overwolf.exe" [2013-12-09 35768]

"NextLive"="c:\users\Tobi\AppData\Roaming\newnext.me\nengine.dll" [2013-11-14 1283584]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2013-11-17 442712]

"EKStatusMonitor"="c:\program files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe" [2013-01-15 2750840]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-09 684600]

.

c:\users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

DesktopWeatherAlerts.lnk - c:\users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp.exe [2013-11-13 546304]

Weather Alerts.lnk - c:\users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe /restart [2013-11-13 166072]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableCursorSuppression"= 1 (0x1)

"ConsentPromptBehaviorUser"= 3 (0x3)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="userinit.exe"

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

R2 EsgScanner;EsgScanner;c:\windows\system32\DRIVERS\EsgScanner.sys;c:\windows\SYSNATIVE\DRIVERS\EsgScanner.sys [x]

R2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x]

R3 cpuz136;cpuz136;c:\users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys;c:\users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]

R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]

R3 danewFltr;NewDeathAdder Mouse;c:\windows\system32\drivers\danew.sys;c:\windows\SYSNATIVE\drivers\danew.sys [x]

R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]

R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]

R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]

R3 SAlphamHid;SteelHIDSvc;c:\windows\System32\drivers\SAlpham64.sys;c:\windows\SYSNATIVE\drivers\SAlpham64.sys [x]

R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]

R3 VKbms;Razer Gaming Device;c:\windows\System32\drivers\VKbms.sys;c:\windows\SYSNATIVE\drivers\VKbms.sys [x]

R3 WinRing0_1_2_0;WinRing0_1_2_0;e:\program files (x86)\Razer Game Booster\Driver\WinRing0x64.sys;e:\program files (x86)\Razer Game Booster\Driver\WinRing0x64.sys [x]

R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]

R4 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]

S0 ESLWireAC;ESLWireAC;c:\windows\system32\drivers\ESLWireACD.sys;c:\windows\SYSNATIVE\drivers\ESLWireACD.sys [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

S1 iSafeNetFilter;iSafeNetFilter;c:\program files (x86)\iSafe\iSafeNetFilter.sys;c:\program files (x86)\iSafe\iSafeNetFilter.sys [x]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]

S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]

S2 EslWireHelper;ESL Wire Helper Service;c:\program files\EslWire\service\WireHelperSvc.exe;c:\program files\EslWire\service\WireHelperSvc.exe [x]

S2 iSafeService;iSafeService;c:\program files (x86)\iSafe\iSafeSvc.exe;c:\program files (x86)\iSafe\iSafeSvc.exe [x]

S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe [x]

S2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [x]

S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]

S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]

S2 RzMaelstromVADStreamingService;Razer Surround Audio Service;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [x]

S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]

S2 Start8;Stardock Start8;c:\program files (x86)\Stardock\Start8\Start8Srv.exe;c:\program files (x86)\Stardock\Start8\Start8Srv.exe [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S3 busenum;SteelBusSvc;c:\windows\System32\drivers\SteelBus64.sys;c:\windows\SYSNATIVE\drivers\SteelBus64.sys [x]

S3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

S3 iSafeKrnl;iSafeKrnl;c:\program files (x86)\iSafe\iSafeKrnl.sys;c:\program files (x86)\iSafe\iSafeKrnl.sys [x]

S3 L1C;NDIS-Miniporttreiber für den PCI-E-Ethernetcontroller Qualcomm Atheros AR813x/AR815x;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x]

S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]

S3 rzendpt;rzendpt;c:\windows\System32\drivers\rzendpt.sys;c:\windows\SYSNATIVE\drivers\rzendpt.sys [x]

S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE\drivers\RzMaelstromVAD.sys [x]

S3 rzudd;Razer Mouse Driver;c:\windows\System32\drivers\rzudd.sys;c:\windows\SYSNATIVE\drivers\rzudd.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2014-01-16 14:25        1211672        ----a-w-        c:\program files (x86)\Google\Chrome\Application\32.0.1700.76\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2014-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-18 13:50]

.

2014-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-18 13:50]

.

2014-01-19 c:\windows\Tasks\Plus-HD-5.0-chromeinstaller.job

- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe [2013-12-30 14:58]

.

2014-01-19 c:\windows\Tasks\Plus-HD-5.0-codedownloader.job

- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe [2013-12-30 14:58]

.

2014-01-19 c:\windows\Tasks\Plus-HD-5.0-enabler.job

- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe [2013-12-30 15:00]

.

2014-01-19 c:\windows\Tasks\Plus-HD-5.0-firefoxinstaller.job

- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe [2013-12-30 14:58]

.

2014-01-19 c:\windows\Tasks\Plus-HD-5.0-updater.job

- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe [2013-12-30 15:00]

.

2014-01-19 c:\windows\Tasks\Re-Markable Update.job

- c:\program files (x86)\Re-Markable\ReMarkableup.exe [2013-12-29 18:25]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]

@="{594D4122-1F87-41E2-96C7-825FB4796516}"

[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]

2013-04-12 21:28        742400        ----a-w-        c:\program files\Classic Shell\ClassicExplorer64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe" [2012-10-08 3182080]

"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-14 1028384]

"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 2279712]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = about:blank

mDefault_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

mDefault_Page_URL = about:blank

mStart Page = about:blank

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

TCP: DhcpNameServer = 217.68.161.141 217.68.161.171

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

BHO-{f5ce6d93-1111-4c9f-899d-01d1c6a8f798} - c:\program files (x86)\Re-Markable\150.dll

Wow6432Node-HKLM-Run-<NO NAME> - (no file)

Wow6432Node-HKLM-Run-UsageTemp - c:\users\Tobi\AppData\Local\Temp\UsageTemp.exe

AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe

AddRemove-VLC Player GPU+11.041.44 - c:\program files (x86)\VLC Player GPU+\uninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

@SACL=(02 0000)

.

Zeit der Fertigstellung: 2014-01-19  18:22:37

ComboFix-quarantined-files.txt  2014-01-19 17:22

.

Vor Suchlauf: 6.983.307.264 Bytes frei

Nach Suchlauf: 6.999.625.728 Bytes frei

.

- - End Of File - - A661F3937FCFB4D4BA114E93FAF5A6E8

A36C5E4F47E84449FF07ED3517B43A31

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.01.20.08
 

Windows 8 x64 NTFS

Internet Explorer 10.0.9200.16750

Tobi :: TOBI-PC [Administrator]
 

Schutz: Aktiviert
 

20.01.2014 23:13:05

mbam-log-2014-01-20 (23-13-05).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 208032

Laufzeit: 2 Minute(n), 4 Sekunde(n)
 

Infizierte Speicherprozesse: 2

C:\ProgramData\WPM\wprotectmanager.exe (PUP.Optional.WpManager.A) -> 1480 -> Löschen bei Neustart.

C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe (PUP.Optional.WeatherAlerts) -> 528 -> Löschen bei Neustart.
 

Infizierte Speichermodule: 1

C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart.
 

Infizierte Registrierungsschlüssel: 19

HKLM\SYSTEM\CurrentControlSet\Services\Wpm (PUP.Optional.WpManager.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WPM (PUP.Optional.WpManager.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CLSID\{11111111-1111-1111-1111-110411771118} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411771118} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CrossriderApp0047718.BHO (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CrossriderApp0047718.Sandbox (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CrossriderApp0047718.Sandbox.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\InstalledBrowserExtensions\Plus HD (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\SOFTWARE\SEARCHPROTECTINT (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\nationzoomSoftware (PUP.Optional.NationZoom.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopWeatherAlerts (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Registrierungswerte: 4

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Daten: C:\Windows\SysWOW64\rundll32.exe "C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\SearchProtectINT|Install (PUP.Optional.SearchProtect.A) -> Daten: 1 -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SYSTEM\CurrentControlSet\Services\Wpm|ImagePath (PUP.Optional.WpManager.A) -> Daten: C:\ProgramData\WPM\wprotectmanager.exe -service -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateiobjekte der Registrierung: 3

HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.NationZoom.A) -> Bösartig: (hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope (PUP.Optional.Qone8) -> Bösartig: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}) Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}) -> Erfolgreich ersetzt und in Quarantäne gestellt.

HKLM\Software\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.NationZoom) -> Bösartig: (hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
 

Infizierte Verzeichnisse: 7

C:\Program Files (x86)\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Löschen bei Neustart.

C:\Users\Tobi\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\Local_Weather_LLC (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\Local_Weather_LLC\WeatherAlerts.exe_Url_suyzcwh53c5qdzcanwcjknlxfywsncoq (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\Local_Weather_LLC\WeatherAlerts.exe_Url_suyzcwh53c5qdzcanwcjknlxfywsncoq\1.4.0.0 (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts (PUP.Optional.WeatherAlerts) -> Löschen bei Neustart.
 

Infizierte Dateien: 47

C:\ProgramData\WPM\wprotectmanager.exe (PUP.Optional.WpManager.A) -> Löschen bei Neustart.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\Downloads\jZipSetup-r136-n-bc.exe (PUP.Optional.Bandoo.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\Downloads\Setup.exe (PUP.Optional.InstallCore) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\Downloads\ZipOpenerSetup.exe (PUP.Optional.JumpyApps.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DesktopWeatherAlerts.lnk (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Weather Alerts.lnk (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Windows\Tasks\Plus-HD-5.0-enabler.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Windows\Tasks\Plus-HD-5.0-updater.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart.

C:\Program Files (x86)\Plus-HD-5.0\47718.crx (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\47718.xpi (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\background.html (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Installer.log (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bg.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho64.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil64.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil64.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-helper.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0.ico (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\Uninstall.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\Plus-HD-5.0\utils.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\Local_Weather_LLC\WeatherAlerts.exe_Url_suyzcwh53c5qdzcanwcjknlxfywsncoq\1.4.0.0\user.config (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp0.dat (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsBrowser.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsK.dat (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsU.dat (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsuninstall.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\ICSharpCode.SharpZipLib.dll (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\mod.DesktopWeatherAlertsApp0.dat (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\uninstall.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\WAUpdater.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe (PUP.Optional.WeatherAlerts) -> Löschen bei Neustart.

C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe.config (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Code:

# AdwCleaner v3.017 - Bericht erstellt am 20/01/2014 um 23:21:28

# Aktualisiert 12/01/2014 von Xplode

# Betriebssystem : Windows 8 Pro  (64 bits)

# Benutzername : Tobi - TOBI-PC

# Gestartet von : C:\Users\Tobi\Desktop\adwcleaner.exe

# Option : Suchen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gefunden : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx

Datei Gefunden : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage

Datei Gefunden : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage-journal

Datei Gefunden : C:\Windows\System32\roboot64.exe

Datei Gefunden : C:\Windows\System32\Tasks\Desk 365 RunAsStdUser

Datei Gefunden : C:\Windows\System32\Tasks\SpyHunter4Startup

Ordner Gefunden C:\Program Files (x86)\iSafe

Ordner Gefunden C:\Program Files (x86)\MyPC Backup

Ordner Gefunden C:\ProgramData\WPM

Ordner Gefunden C:\Users\Tobi\AppData\Local\genienext

Ordner Gefunden C:\Users\Tobi\AppData\Local\Mobogenie

Ordner Gefunden C:\Users\Tobi\AppData\Roaming\iSafe

Ordner Gefunden C:\Users\Tobi\AppData\Roaming\Systweak

Ordner Gefunden C:\Users\Tobi\Documents\Mobogenie
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gefunden : HKCU\Software\installedbrowserextensions

Schlüssel Gefunden : HKCU\Software\powerpack

Schlüssel Gefunden : HKCU\Software\systweak

Schlüssel Gefunden : [x64] HKCU\Software\installedbrowserextensions

Schlüssel Gefunden : [x64] HKCU\Software\powerpack

Schlüssel Gefunden : [x64] HKCU\Software\systweak

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422772218}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455775518}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466776618}

Schlüssel Gefunden : HKLM\Software\Desksvc

Schlüssel Gefunden : HKLM\Software\hdcode

Schlüssel Gefunden : HKLM\Software\supWPM

Schlüssel Gefunden : HKLM\Software\systweak

Schlüssel Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422772218}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455775518}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466776618}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16537
 
 

-\\ Google Chrome v32.0.1700.76
 

[ Datei : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [2915 octets] - [20/01/2014 23:21:28]
 

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2975 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.0 (01.07.2014:1)

OS: Windows 8 Pro x64

Ran by Tobi on 20.01.2014 at 23:33:55,92

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 

Successfully stopped: [Service] isafekrnl 

Failed to delete: [Service] isafekrnl 

Successfully stopped: [Service] isafeservice 

Failed to delete: [Service] isafeservice 
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Failed to delete: [Folder] "C:\ProgramData\apn"

Successfully deleted: [Folder] "C:\Users\Tobi\AppData\Roaming\isafe"
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 20.01.2014 at 23:40:44,34

Computer was rebooted

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014 04

Ran by Tobi (administrator) on TOBI-PC on 20-01-2014 23:46:27

Running from C:\Users\Tobi\Downloads

Windows 8 Pro (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files\EslWire\service\WireHelperSvc.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe

(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Turtle Entertainment GmbH) C:\Program Files\EslWire\wire.exe

(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe

(Overwolf) C:\Program Files (x86)\Overwolf\Overwolf.exe

(Microsoft Corporation) C:\Windows\System32\cmd.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe

(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)

HKLM-x32\...\Run: [EKStatusMonitor] - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-01-15] (Eastman Kodak Company)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [UsageTemp] - "C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe"

HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)

HKCU\...\Run: [ESL Wire] - C:\Program Files\EslWire\wire.exe [4253696 2013-12-09] (Turtle Entertainment GmbH)

HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-07-12] (SteelSeries ApS)

HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35768 2013-12-09] (Overwolf)

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4B2FBEA62A6CCE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)

BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

BHO-x32: Re-Markable - {f5ce6d93-1111-4c9f-899d-01d1c6a8f798} - C:\Program Files (x86)\Re-Markable\150.dll No File

BHO-x32: Shopping Suggestion - {F6C07882-D703-4DD5-905A-2C4E815A5066} - C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll (WW3, LLC)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 217.68.161.141 217.68.161.171
 

Chrome: 

=======

CHR Extension: (Google Wallet) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]
 

==================== Services (Whitelisted) =================
 

U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

U4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)

U2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2013-06-11] ()

U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

U3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)

U2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-25] ()

U2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)

U2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)

U2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)

U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

U2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [x]
 

==================== Drivers (Whitelisted) ====================
 

U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)

U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)

U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)

U3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()

U2 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

U0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2013-12-02] (<Turtle Entertainment>)

U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

U3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()

U3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2013-11-15] (Razer Inc)

U3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)

U3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [38016 2013-06-25] (SteelSeries Corporation)

U3 WinRing0_1_2_0; E:\Program Files (x86)\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)

U3 catchme; \??\C:\ComboFix\catchme.sys [x]

U3 cpuz136; \??\C:\Users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]

U3 iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys [x]

U1 iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-01-20 23:46 - 2014-01-20 23:46 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion

2014-01-20 23:40 - 2014-01-20 23:40 - 00000935 _____ C:\Users\Tobi\Desktop\JRT.txt

2014-01-20 23:27 - 2014-01-20 23:27 - 00000000 ____D C:\Windows\ERUNT

2014-01-20 23:21 - 2014-01-20 23:22 - 00000000 ____D C:\AdwCleaner

2014-01-20 23:11 - 2014-01-20 23:11 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Malwarebytes

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-20 23:11 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-01-20 23:10 - 2014-01-20 23:10 - 01236282 _____ C:\Users\Tobi\Desktop\adwcleaner.exe

2014-01-20 23:10 - 2014-01-20 23:10 - 01037068 _____ (Thisisu) C:\Users\Tobi\Downloads\JRT.exe

2014-01-20 23:09 - 2014-01-20 23:10 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tobi\Downloads\mbam-setup-1.75.0.1300.exe

2014-01-19 19:50 - 2014-01-19 19:50 - 00001457 _____ C:\Users\Tobi\Desktop\ComboFix - Verknüpfung.lnk

2014-01-19 19:50 - 2014-01-19 19:50 - 00000000 ___SD C:\ComboFix

2014-01-19 18:05 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2014-01-19 18:05 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2014-01-19 18:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2014-01-19 18:04 - 2014-01-19 19:50 - 00000000 ____D C:\Qoobox

2014-01-19 18:04 - 2014-01-19 18:21 - 00000000 ____D C:\Windows\erdnt

2014-01-19 17:46 - 2014-01-19 17:50 - 05167985 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe

2014-01-16 20:23 - 2014-01-16 20:24 - 00000000 ____D C:\Users\Tobi\Desktop\Cleaner spyware usw

2014-01-16 20:22 - 2014-01-16 20:22 - 00448512 _____ (OldTimer Tools) C:\Users\Tobi\Downloads\TFC.exe

2014-01-16 15:15 - 2014-01-20 23:46 - 00012444 _____ C:\Users\Tobi\Downloads\FRST.txt

2014-01-16 15:15 - 2014-01-16 15:15 - 00019258 _____ C:\Users\Tobi\Downloads\Addition.txt

2014-01-16 15:14 - 2014-01-20 23:46 - 00000000 ____D C:\FRST

2014-01-16 15:12 - 2014-01-20 23:46 - 02076672 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe

2014-01-15 20:53 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll

2014-01-15 20:53 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll

2014-01-15 20:53 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll

2014-01-15 20:53 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys

2014-01-15 20:53 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll

2014-01-15 20:53 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll

2014-01-15 20:53 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys

2014-01-15 20:53 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-01-15 20:53 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2014-01-15 20:53 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-01-15 20:53 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat

2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group

2014-01-15 20:41 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys

2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe

2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe

2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk

2014-01-15 18:52 - 2014-01-15 18:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber

2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk

2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log

2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe

2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp

2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe

2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar

2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM

2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip

2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe

2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar

2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641

2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar

2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp

2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip

2014-01-03 17:23 - 2014-01-15 22:26 - 00000000 ____D C:\Windows\Minidump

2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp

2014-01-03 16:07 - 2014-01-03 18:50 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter

2014-01-03 15:04 - 2014-01-03 15:16 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung

2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk

2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA

2014-01-02 18:36 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-01-02 18:36 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies

2014-01-02 18:32 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-01-02 18:32 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-01-02 18:31 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-01-02 18:31 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-01-02 18:31 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-01-02 18:18 - 2014-01-02 18:30 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe

2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA

2014-01-02 18:07 - 2013-11-14 12:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-01-02 18:07 - 2013-11-14 12:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-01-02 18:07 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-01-02 18:07 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 03467927 _____ C:\Windows\system32\nvcoproc.bin

2014-01-02 18:07 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-01-02 18:07 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-01-02 17:35 - 2014-01-02 18:37 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation

2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe

2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt

2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar

2013-12-30 16:12 - 2014-01-15 22:51 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+

2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk

2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip

2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar

2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar

2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar

2013-12-29 20:33 - 2013-12-29 20:39 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip

2013-12-29 19:30 - 2013-12-30 16:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt

2013-12-29 19:25 - 2014-01-20 23:33 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job

2013-12-29 19:25 - 2014-01-19 18:15 - 00000000 ____D C:\Program Files (x86)\Re-Markable

2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update

2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar

2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-29 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-12-29 19:10 - 2013-12-29 19:11 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar

2013-12-29 18:48 - 2013-12-29 19:09 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe

2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag

2013-12-25 05:19 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2013-12-25 05:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2013-12-25 05:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2013-12-25 05:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2013-12-25 05:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2013-12-25 05:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2013-12-25 05:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2013-12-25 05:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2013-12-25 05:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2013-12-25 05:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2013-12-25 05:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2013-12-25 05:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2013-12-25 05:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2013-12-25 05:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2013-12-25 05:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2013-12-25 05:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2013-12-25 05:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2013-12-25 05:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2013-12-25 05:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2013-12-25 05:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2013-12-25 05:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2013-12-25 05:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2013-12-25 05:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2013-12-25 05:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2013-12-25 05:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2013-12-25 05:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2013-12-25 05:18 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2013-12-25 05:18 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2013-12-25 05:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2013-12-25 05:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2013-12-25 05:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2013-12-25 05:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2013-12-25 05:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2013-12-25 05:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2013-12-25 05:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2013-12-25 05:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2013-12-25 05:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2013-12-25 05:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2013-12-25 05:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2013-12-25 05:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2013-12-25 05:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2013-12-25 05:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2013-12-25 05:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2013-12-25 05:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2013-12-25 05:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2013-12-25 05:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2013-12-25 05:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2013-12-25 05:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2013-12-25 05:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2013-12-25 05:18 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2013-12-25 05:18 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2013-12-25 05:18 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2013-12-25 05:18 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2013-12-25 05:18 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2013-12-25 05:18 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2013-12-25 05:18 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2013-12-25 05:18 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2013-12-25 05:18 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2013-12-25 05:18 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2013-12-25 05:17 - 2013-12-25 16:57 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher

2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-25 05:17 - 2012-06-19 13:02 - 03123272 ____R C:\Windows\SysWOW64\pbsvc.exe

2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url
 

==================== One Month Modified Files and Folders =======
 

2014-01-20 23:46 - 2014-01-20 23:46 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion

2014-01-20 23:46 - 2014-01-16 15:15 - 00012444 _____ C:\Users\Tobi\Downloads\FRST.txt

2014-01-20 23:46 - 2014-01-16 15:14 - 00000000 ____D C:\FRST

2014-01-20 23:46 - 2014-01-16 15:12 - 02076672 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe

2014-01-20 23:40 - 2014-01-20 23:40 - 00000935 _____ C:\Users\Tobi\Desktop\JRT.txt

2014-01-20 23:39 - 2012-07-26 11:27 - 00751892 _____ C:\Windows\system32\perfh007.dat

2014-01-20 23:39 - 2012-07-26 11:27 - 00155620 _____ C:\Windows\system32\perfc007.dat

2014-01-20 23:39 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI

2014-01-20 23:34 - 2013-10-09 15:19 - 00000000 ____D C:\Users\Tobi\AppData\Local\Overwolf

2014-01-20 23:33 - 2013-12-29 19:25 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job

2014-01-20 23:33 - 2013-10-15 16:44 - 00000000 ____D C:\ProgramData\Kodak

2014-01-20 23:33 - 2013-09-02 14:21 - 00015108 _____ C:\autoupdate.log

2014-01-20 23:33 - 2013-06-18 21:31 - 00000000 ____D C:\Users\Tobi\AppData\Local\ESL Wire Game Client

2014-01-20 23:33 - 2013-06-18 15:05 - 00000000 ____D C:\Program Files (x86)\Steam

2014-01-20 23:33 - 2013-06-18 14:50 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-01-20 23:33 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2014-01-20 23:32 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA

2014-01-20 23:27 - 2014-01-20 23:27 - 00000000 ____D C:\Windows\ERUNT

2014-01-20 23:22 - 2014-01-20 23:21 - 00000000 ____D C:\AdwCleaner

2014-01-20 23:20 - 2013-06-18 14:50 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-01-20 23:19 - 2013-06-18 14:44 - 00132642 _____ C:\Windows\PFRO.log

2014-01-20 23:16 - 2013-06-18 14:48 - 00000000 ___RD C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-20 23:11 - 2014-01-20 23:11 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Malwarebytes

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-20 23:10 - 2014-01-20 23:10 - 01236282 _____ C:\Users\Tobi\Desktop\adwcleaner.exe

2014-01-20 23:10 - 2014-01-20 23:10 - 01037068 _____ (Thisisu) C:\Users\Tobi\Downloads\JRT.exe

2014-01-20 23:10 - 2014-01-20 23:09 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tobi\Downloads\mbam-setup-1.75.0.1300.exe

2014-01-20 23:09 - 2013-07-01 18:09 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client

2014-01-20 23:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru

2014-01-20 22:26 - 2013-09-12 20:03 - 00000000 ____D C:\Users\Tobi\Documents\ESL Match Media

2014-01-20 15:17 - 2013-06-18 14:48 - 01499987 _____ C:\Windows\WindowsUpdate.log

2014-01-19 19:50 - 2014-01-19 19:50 - 00001457 _____ C:\Users\Tobi\Desktop\ComboFix - Verknüpfung.lnk

2014-01-19 19:50 - 2014-01-19 19:50 - 00000000 ___SD C:\ComboFix

2014-01-19 19:50 - 2014-01-19 18:04 - 00000000 ____D C:\Qoobox

2014-01-19 18:21 - 2014-01-19 18:04 - 00000000 ____D C:\Windows\erdnt

2014-01-19 18:15 - 2013-12-29 19:25 - 00000000 ____D C:\Program Files (x86)\Re-Markable

2014-01-19 18:15 - 2012-07-26 06:26 - 00000215 _____ C:\Windows\system.ini

2014-01-19 17:50 - 2014-01-19 17:46 - 05167985 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe

2014-01-16 20:24 - 2014-01-16 20:23 - 00000000 ____D C:\Users\Tobi\Desktop\Cleaner spyware usw

2014-01-16 20:22 - 2014-01-16 20:22 - 00448512 _____ (OldTimer Tools) C:\Users\Tobi\Downloads\TFC.exe

2014-01-16 16:58 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache

2014-01-16 15:25 - 2013-06-18 14:53 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2014-01-16 15:15 - 2014-01-16 15:15 - 00019258 _____ C:\Users\Tobi\Downloads\Addition.txt

2014-01-15 22:51 - 2013-12-30 16:12 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+

2014-01-15 22:26 - 2014-01-03 17:23 - 00000000 ____D C:\Windows\Minidump

2014-01-15 21:33 - 2013-08-16 00:36 - 00000000 ____D C:\Windows\system32\MRT

2014-01-15 21:33 - 2013-06-19 19:42 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-15 20:50 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent

2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat

2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group

2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe

2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe

2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk

2014-01-15 18:53 - 2014-01-15 18:52 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber

2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk

2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log

2014-01-15 18:52 - 2013-06-18 14:48 - 00001646 _____ C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe

2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp

2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe

2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar

2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM

2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip

2014-01-09 09:02 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-01-09 09:02 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-01-08 16:08 - 2013-06-18 14:54 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3804308072-1049083099-4122200610-1001

2014-01-05 22:11 - 2013-12-03 15:01 - 00000000 ____D C:\Users\Tobi\Desktop\Tattoo

2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe

2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar

2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641

2014-01-04 17:32 - 2012-07-26 08:21 - 00111528 _____ C:\Windows\setupact.log

2014-01-04 17:31 - 2013-09-01 16:53 - 00131312 _____ C:\Windows\DPINST.LOG

2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar

2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp

2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip

2014-01-03 18:50 - 2014-01-03 16:07 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter

2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp

2014-01-03 15:16 - 2014-01-03 15:04 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung

2014-01-02 19:22 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI

2014-01-02 18:37 - 2014-01-02 17:35 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation

2014-01-02 18:37 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk

2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA

2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies

2014-01-02 18:30 - 2014-01-02 18:18 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe

2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA

2014-01-02 18:07 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help

2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT

2014-01-02 15:12 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi\AppData\Local\VirtualStore

2014-01-01 18:24 - 2013-07-02 22:03 - 00000779 _____ C:\Users\Public\Desktop\ESL Wire.lnk

2014-01-01 18:24 - 2013-07-02 22:03 - 00000000 ____D C:\Program Files\EslWire

2013-12-31 02:58 - 2013-12-03 14:28 - 00032256 ___SH C:\Users\Tobi\Downloads\Thumbs.db

2013-12-31 02:58 - 2013-10-09 19:03 - 00043520 ___SH C:\Users\Tobi\Desktop\Thumbs.db

2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe

2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt

2013-12-30 16:27 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache

2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar

2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk

2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip

2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar

2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar

2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar

2013-12-29 20:39 - 2013-12-29 20:33 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt

2013-12-29 19:30 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi

2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update

2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar

2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-29 19:11 - 2013-12-29 19:10 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar

2013-12-29 19:09 - 2013-12-29 18:48 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe

2013-12-25 16:57 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher

2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag

2013-12-25 05:18 - 2013-06-19 09:24 - 00026816 _____ C:\Windows\DirectX.log

2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url
 

Some content of TEMP:

====================

C:\Users\Tobi\AppData\Local\Temp\avgnt.exe

C:\Users\Tobi\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-01-19 17:53
 

==================== End Of Log ============================

--- --- ---

Vielen Dank für die schnelle Antwort.

Liebe Grüße Tobi

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=c9f7ea24c0d0474dab1a0497abb077c0

# engine=16736

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-01-21 07:56:26

# local_time=2014-01-21 08:56:26 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.2.9200 NT 

# compatibility_mode=1799 16775165 100 94 23913 3752348 38303 0

# compatibility_mode=5893 16776574 100 94 2022493 17617661 0 0

# scanned=400622

# found=1

# cleaned=0

# scan_time=6400

sh=6691CE7F4CB2119170E25894A026EB1E51B580C5 ft=0 fh=0000000000000000 vn="JS/Adware.ShoppingSuggestion.A application" ac=I fn="C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\ejbpjlaagejfakeobljhgplbgklgemll.crx"

Code:

 Results of screen317's Security Check version 0.99.79  

   x64 (UAC is enabled)  

 Internet Explorer 10 Out of date! 
 ``````````````Antivirus/Firewall Check:`````````````` 

Windows Defender   

Avira Desktop      

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 Java 7 Update 45  

 Java version out of Date! 

 Google Chrome 32.0.1700.72  

 Google Chrome 32.0.1700.76  
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbamgui.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes' Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-01-2014

Ran by Tobi (administrator) on TOBI-PC on 21-01-2014 21:01:46

Running from C:\Users\Tobi\Desktop\Cleaner spyware usw

Windows 8 Pro (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files\EslWire\service\WireHelperSvc.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe

(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(Turtle Entertainment GmbH) C:\Program Files\EslWire\wire.exe

(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe

(Overwolf) C:\Program Files (x86)\Overwolf\Overwolf.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe

(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)

HKLM-x32\...\Run: [EKStatusMonitor] - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-01-15] (Eastman Kodak Company)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [UsageTemp] - "C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe"

HKLM-x32\...\Run: [Conime] - %windir%\system32\conime.exe

HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)

HKCU\...\Run: [ESL Wire] - C:\Program Files\EslWire\wire.exe [4253696 2013-12-09] (Turtle Entertainment GmbH)

HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-07-12] (SteelSeries ApS)

HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35768 2013-12-09] (Overwolf)

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4B2FBEA62A6CCE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}

BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)

BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

BHO-x32: Re-Markable - {f5ce6d93-1111-4c9f-899d-01d1c6a8f798} - C:\Program Files (x86)\Re-Markable\150.dll No File

BHO-x32: Shopping Suggestion - {F6C07882-D703-4DD5-905A-2C4E815A5066} - C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll (WW3, LLC)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 217.68.161.141 217.68.161.171
 

Chrome: 

=======

CHR Extension: (Google Wallet) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]
 

==================== Services (Whitelisted) =================
 

U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

U4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)

U2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2013-06-11] ()

U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

U3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)

U2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-25] ()

U2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)

U2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)

U2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)

U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

U2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [x]
 

==================== Drivers (Whitelisted) ====================
 

U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)

U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)

U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)

U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)

U3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()

U2 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

U0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2013-12-02] (<Turtle Entertainment>)

U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

U3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()

U3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2013-11-15] (Razer Inc)

U3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)

U3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [38016 2013-06-25] (SteelSeries Corporation)

U3 WinRing0_1_2_0; E:\Program Files (x86)\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)

U3 catchme; \??\C:\ComboFix\catchme.sys [x]

U3 cpuz136; \??\C:\Users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]

U3 iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys [x]

U1 iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-01-21 20:59 - 2014-01-21 20:59 - 00987425 _____ C:\Users\Tobi\Desktop\SecurityCheck.exe

2014-01-21 19:05 - 2014-01-21 19:05 - 00000000 ____D C:\Program Files (x86)\ESET

2014-01-21 19:04 - 2014-01-21 19:04 - 02347384 _____ (ESET) C:\Users\Tobi\Downloads\esetsmartinstaller_enu.exe

2014-01-20 23:46 - 2014-01-20 23:46 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion

2014-01-20 23:40 - 2014-01-20 23:40 - 00000935 _____ C:\Users\Tobi\Desktop\JRT.txt

2014-01-20 23:27 - 2014-01-20 23:27 - 00000000 ____D C:\Windows\ERUNT

2014-01-20 23:21 - 2014-01-20 23:22 - 00000000 ____D C:\AdwCleaner

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Malwarebytes

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-20 23:11 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-01-20 23:10 - 2014-01-20 23:10 - 01037068 _____ (Thisisu) C:\Users\Tobi\Downloads\JRT.exe

2014-01-20 23:09 - 2014-01-20 23:10 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tobi\Downloads\mbam-setup-1.75.0.1300.exe

2014-01-19 19:50 - 2014-01-19 19:50 - 00000000 ___SD C:\ComboFix

2014-01-19 18:05 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2014-01-19 18:05 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2014-01-19 18:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2014-01-19 18:05 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2014-01-19 18:04 - 2014-01-19 19:50 - 00000000 ____D C:\Qoobox

2014-01-19 18:04 - 2014-01-19 18:21 - 00000000 ____D C:\Windows\erdnt

2014-01-19 17:46 - 2014-01-19 17:50 - 05167985 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe

2014-01-16 20:23 - 2014-01-21 21:01 - 00000000 ____D C:\Users\Tobi\Desktop\Cleaner spyware usw

2014-01-16 20:22 - 2014-01-16 20:22 - 00448512 _____ (OldTimer Tools) C:\Users\Tobi\Downloads\TFC.exe

2014-01-16 15:15 - 2014-01-20 23:46 - 00062829 _____ C:\Users\Tobi\Downloads\FRST.txt

2014-01-16 15:15 - 2014-01-16 15:15 - 00019258 _____ C:\Users\Tobi\Downloads\Addition.txt

2014-01-16 15:14 - 2014-01-21 21:01 - 00000000 ____D C:\FRST

2014-01-16 15:12 - 2014-01-20 23:46 - 02076672 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe

2014-01-15 20:53 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll

2014-01-15 20:53 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll

2014-01-15 20:53 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll

2014-01-15 20:53 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys

2014-01-15 20:53 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll

2014-01-15 20:53 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll

2014-01-15 20:53 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys

2014-01-15 20:53 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-01-15 20:53 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2014-01-15 20:53 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-01-15 20:53 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat

2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group

2014-01-15 20:41 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys

2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe

2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe

2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk

2014-01-15 18:52 - 2014-01-15 18:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber

2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk

2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log

2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe

2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp

2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe

2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar

2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM

2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip

2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe

2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar

2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641

2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar

2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp

2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip

2014-01-03 17:23 - 2014-01-15 22:26 - 00000000 ____D C:\Windows\Minidump

2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp

2014-01-03 16:07 - 2014-01-03 18:50 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter

2014-01-03 15:04 - 2014-01-03 15:16 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung

2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk

2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA

2014-01-02 18:36 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-01-02 18:36 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies

2014-01-02 18:32 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-01-02 18:32 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-01-02 18:31 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-01-02 18:31 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-01-02 18:31 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-01-02 18:31 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-01-02 18:18 - 2014-01-02 18:30 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe

2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA

2014-01-02 18:07 - 2013-11-14 12:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-01-02 18:07 - 2013-11-14 12:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-01-02 18:07 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-01-02 18:07 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 03467927 _____ C:\Windows\system32\nvcoproc.bin

2014-01-02 18:07 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-01-02 18:07 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-01-02 18:07 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-01-02 17:35 - 2014-01-02 18:37 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation

2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe

2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt

2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar

2013-12-30 16:12 - 2014-01-15 22:51 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+

2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk

2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip

2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar

2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar

2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar

2013-12-29 20:33 - 2013-12-29 20:39 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip

2013-12-29 19:30 - 2013-12-30 16:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt

2013-12-29 19:25 - 2014-01-21 19:15 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job

2013-12-29 19:25 - 2014-01-19 18:15 - 00000000 ____D C:\Program Files (x86)\Re-Markable

2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update

2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar

2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-29 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-29 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-12-29 19:10 - 2013-12-29 19:11 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar

2013-12-29 18:48 - 2013-12-29 19:09 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe

2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag

2013-12-25 05:19 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll

2013-12-25 05:19 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2013-12-25 05:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll

2013-12-25 05:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2013-12-25 05:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2013-12-25 05:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2013-12-25 05:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2013-12-25 05:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2013-12-25 05:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2013-12-25 05:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2013-12-25 05:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2013-12-25 05:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2013-12-25 05:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2013-12-25 05:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2013-12-25 05:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2013-12-25 05:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2013-12-25 05:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2013-12-25 05:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2013-12-25 05:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2013-12-25 05:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2013-12-25 05:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2013-12-25 05:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2013-12-25 05:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2013-12-25 05:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2013-12-25 05:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2013-12-25 05:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2013-12-25 05:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2013-12-25 05:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2013-12-25 05:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2013-12-25 05:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2013-12-25 05:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2013-12-25 05:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2013-12-25 05:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2013-12-25 05:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2013-12-25 05:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2013-12-25 05:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2013-12-25 05:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2013-12-25 05:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2013-12-25 05:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2013-12-25 05:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2013-12-25 05:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2013-12-25 05:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2013-12-25 05:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2013-12-25 05:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2013-12-25 05:18 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2013-12-25 05:18 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2013-12-25 05:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2013-12-25 05:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2013-12-25 05:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2013-12-25 05:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2013-12-25 05:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2013-12-25 05:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2013-12-25 05:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2013-12-25 05:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2013-12-25 05:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2013-12-25 05:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2013-12-25 05:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2013-12-25 05:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2013-12-25 05:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2013-12-25 05:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2013-12-25 05:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2013-12-25 05:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2013-12-25 05:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2013-12-25 05:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2013-12-25 05:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2013-12-25 05:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2013-12-25 05:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2013-12-25 05:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2013-12-25 05:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2013-12-25 05:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2013-12-25 05:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2013-12-25 05:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2013-12-25 05:18 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2013-12-25 05:18 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2013-12-25 05:18 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2013-12-25 05:18 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2013-12-25 05:18 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2013-12-25 05:18 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2013-12-25 05:18 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2013-12-25 05:18 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2013-12-25 05:18 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2013-12-25 05:18 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2013-12-25 05:17 - 2013-12-25 16:57 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher

2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-25 05:17 - 2012-06-19 13:02 - 03123272 ____R C:\Windows\SysWOW64\pbsvc.exe

2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url
 

==================== One Month Modified Files and Folders =======
 

2014-01-21 21:01 - 2014-01-16 20:23 - 00000000 ____D C:\Users\Tobi\Desktop\Cleaner spyware usw

2014-01-21 21:01 - 2014-01-16 15:14 - 00000000 ____D C:\FRST

2014-01-21 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru

2014-01-21 20:59 - 2014-01-21 20:59 - 00987425 _____ C:\Users\Tobi\Desktop\SecurityCheck.exe

2014-01-21 20:20 - 2013-06-18 14:50 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-01-21 19:25 - 2013-06-18 15:05 - 00000000 ____D C:\Program Files (x86)\Steam

2014-01-21 19:15 - 2013-12-29 19:25 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job

2014-01-21 19:05 - 2014-01-21 19:05 - 00000000 ____D C:\Program Files (x86)\ESET

2014-01-21 19:04 - 2014-01-21 19:04 - 02347384 _____ (ESET) C:\Users\Tobi\Downloads\esetsmartinstaller_enu.exe

2014-01-21 19:04 - 2013-10-15 16:44 - 00000000 ____D C:\ProgramData\Kodak

2014-01-21 16:51 - 2013-07-01 18:09 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client

2014-01-21 15:24 - 2012-07-26 11:27 - 00751892 _____ C:\Windows\system32\perfh007.dat

2014-01-21 15:24 - 2012-07-26 11:27 - 00155620 _____ C:\Windows\system32\perfc007.dat

2014-01-21 15:24 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI

2014-01-21 15:20 - 2013-06-18 14:50 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-01-21 15:19 - 2013-10-09 15:19 - 00000000 ____D C:\Users\Tobi\AppData\Local\Overwolf

2014-01-21 15:18 - 2013-09-02 14:21 - 00015258 _____ C:\autoupdate.log

2014-01-21 15:18 - 2013-06-18 21:31 - 00000000 ____D C:\Users\Tobi\AppData\Local\ESL Wire Game Client

2014-01-21 15:18 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA

2014-01-21 15:18 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2014-01-20 23:46 - 2014-01-20 23:46 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion

2014-01-20 23:46 - 2014-01-16 15:15 - 00062829 _____ C:\Users\Tobi\Downloads\FRST.txt

2014-01-20 23:46 - 2014-01-16 15:12 - 02076672 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe

2014-01-20 23:40 - 2014-01-20 23:40 - 00000935 _____ C:\Users\Tobi\Desktop\JRT.txt

2014-01-20 23:27 - 2014-01-20 23:27 - 00000000 ____D C:\Windows\ERUNT

2014-01-20 23:22 - 2014-01-20 23:21 - 00000000 ____D C:\AdwCleaner

2014-01-20 23:19 - 2013-06-18 14:44 - 00132642 _____ C:\Windows\PFRO.log

2014-01-20 23:16 - 2013-06-18 14:48 - 00000000 ___RD C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Malwarebytes

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes

2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-20 23:10 - 2014-01-20 23:10 - 01037068 _____ (Thisisu) C:\Users\Tobi\Downloads\JRT.exe

2014-01-20 23:10 - 2014-01-20 23:09 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tobi\Downloads\mbam-setup-1.75.0.1300.exe

2014-01-20 22:26 - 2013-09-12 20:03 - 00000000 ____D C:\Users\Tobi\Documents\ESL Match Media

2014-01-20 15:17 - 2013-06-18 14:48 - 01499987 _____ C:\Windows\WindowsUpdate.log

2014-01-19 19:50 - 2014-01-19 19:50 - 00000000 ___SD C:\ComboFix

2014-01-19 19:50 - 2014-01-19 18:04 - 00000000 ____D C:\Qoobox

2014-01-19 18:21 - 2014-01-19 18:04 - 00000000 ____D C:\Windows\erdnt

2014-01-19 18:15 - 2013-12-29 19:25 - 00000000 ____D C:\Program Files (x86)\Re-Markable

2014-01-19 18:15 - 2012-07-26 06:26 - 00000215 _____ C:\Windows\system.ini

2014-01-19 17:50 - 2014-01-19 17:46 - 05167985 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe

2014-01-16 20:22 - 2014-01-16 20:22 - 00448512 _____ (OldTimer Tools) C:\Users\Tobi\Downloads\TFC.exe

2014-01-16 16:58 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache

2014-01-16 15:25 - 2013-06-18 14:53 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2014-01-16 15:15 - 2014-01-16 15:15 - 00019258 _____ C:\Users\Tobi\Downloads\Addition.txt

2014-01-15 22:51 - 2013-12-30 16:12 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+

2014-01-15 22:26 - 2014-01-03 17:23 - 00000000 ____D C:\Windows\Minidump

2014-01-15 21:33 - 2013-08-16 00:36 - 00000000 ____D C:\Windows\system32\MRT

2014-01-15 21:33 - 2013-06-19 19:42 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-15 20:50 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent

2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat

2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr

2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group

2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe

2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe

2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk

2014-01-15 18:53 - 2014-01-15 18:52 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber

2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk

2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log

2014-01-15 18:52 - 2013-06-18 14:48 - 00001646 _____ C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe

2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp

2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe

2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar

2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM

2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip

2014-01-09 09:02 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-01-09 09:02 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-01-08 16:08 - 2013-06-18 14:54 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3804308072-1049083099-4122200610-1001

2014-01-05 22:11 - 2013-12-03 15:01 - 00000000 ____D C:\Users\Tobi\Desktop\Tattoo

2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe

2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar

2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641

2014-01-04 17:32 - 2012-07-26 08:21 - 00111528 _____ C:\Windows\setupact.log

2014-01-04 17:31 - 2013-09-01 16:53 - 00131312 _____ C:\Windows\DPINST.LOG

2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar

2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp

2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip

2014-01-03 18:50 - 2014-01-03 16:07 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter

2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp

2014-01-03 15:16 - 2014-01-03 15:04 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung

2014-01-02 19:22 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI

2014-01-02 18:37 - 2014-01-02 17:35 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation

2014-01-02 18:37 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk

2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA

2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies

2014-01-02 18:30 - 2014-01-02 18:18 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe

2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA

2014-01-02 18:07 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help

2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT

2014-01-02 15:12 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi\AppData\Local\VirtualStore

2014-01-01 18:24 - 2013-07-02 22:03 - 00000779 _____ C:\Users\Public\Desktop\ESL Wire.lnk

2014-01-01 18:24 - 2013-07-02 22:03 - 00000000 ____D C:\Program Files\EslWire

2013-12-31 02:58 - 2013-12-03 14:28 - 00032256 ___SH C:\Users\Tobi\Downloads\Thumbs.db

2013-12-31 02:58 - 2013-10-09 19:03 - 00043520 ___SH C:\Users\Tobi\Desktop\Thumbs.db

2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe

2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt

2013-12-30 16:27 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache

2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar

2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk

2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip

2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar

2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar

2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar

2013-12-29 20:39 - 2013-12-29 20:33 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android

2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt

2013-12-29 19:30 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi

2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update

2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar

2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira

2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-29 19:11 - 2013-12-29 19:10 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar

2013-12-29 19:09 - 2013-12-29 18:48 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe

2013-12-25 16:57 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher

2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag

2013-12-25 05:18 - 2013-06-19 09:24 - 00026816 _____ C:\Windows\DirectX.log

2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe

2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url
 

Some content of TEMP:

====================

C:\Users\Tobi\AppData\Local\Temp\avgnt.exe

C:\Users\Tobi\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-01-19 17:53
 

==================== End Of Log ============================

--- --- ---

Also der PC läuft nach dem Boot wieder stabil, jedoch bootet er im Vergleich zu vorher noch relativ langsam.
Schonmal ein riesen Danke an dich!:dankeschoen:

LG

Java updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

HKLM-x32\...\Run: [UsageTemp] - "C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe"

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Fertig :)

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Beim Boot ist er immer noch relativ langsam. Ansonsten sind meine Probleme gelöst.
Vielen lieben Dank!

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-01-2014

Ran by Tobi at 2014-01-22 15:28:23 Run:1

Running from C:\Users\Tobi\Desktop\Cleaner spyware usw

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4

HKLM-x32\...\Run: [UsageTemp] - "C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe"

*****************
 

C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4 => Moved successfully.

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UsageTemp => Value deleted successfully.
 

==== End of Fixlog ====

Deinstallier mal aus Spass dein AV Programm und teste den Speed beim Booten nochmal.