Trojaner-Board - Google Chrome öffnet ungefragt Seiten/Werbung

Heya, danke für die schnelle Antwort =)

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014

Ran by Dennis (administrator) on MISTERDEAD on 03-08-2014 20:45:53

Running from C:\Users\Dennis\Downloads

Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 8

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Probit Software LTD) C:\Program Files (x86)\Easy Speed Check\easyspeedcheck.exe

(Probit Software LTD) C:\Program Files (x86)\Probit Software\Easy Speed PC\ESPCSmartScan.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)

HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [229824 2013-10-09] (Trend Micro Inc.)

HKLM\...\RunOnce: [DCERegBootClean64] => C:\Windows\RegBootClean64.exe [231960 2014-08-03] ()

HKU\S-1-5-21-1264720282-1073957529-2307054086-1000\...\Run: [Easy Speed PC] => C:\Program Files (x86)\Probit Software\Easy Speed PC\ESPCLauncher.exe [148272 2013-03-18] (Probit Software LTD)

HKU\S-1-5-21-1264720282-1073957529-2307054086-1000\...\Run: [EasySpeedCheck] => C:\Program Files (x86)\Easy Speed Check\easyspeedcheck.exe [194200 2014-05-12] (Probit Software LTD)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

ProxyServer: http=127.0.0.1:13869;https=127.0.0.1:13869

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB205AD382AAFCF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

BHO: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files\Trend Micro\AMSP\module\20004\3.0.1313\6.8.1120\TmIEPlg.dll (Trend Micro Inc.)

BHO: TmBpIeBHO Class -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe64.dll (Trend Micro Inc.)

BHO-x32: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files\Trend Micro\AMSP\module\20004\3.0.1313\6.8.1120\TmIEPlg32.dll (Trend Micro Inc.)

BHO-x32: TSToolbarBHO -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)

BHO-x32: TmBpIeBHO Class -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe32.dll (Trend Micro Inc.)

Toolbar: HKLM-x32 - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe64.dll (Trend Micro Inc.)

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\3.0.1313\6.8.1120\TmIEPlg.dll (Trend Micro Inc.)

Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} -  No File

Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  No File

Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe32.dll (Trend Micro Inc.)

Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\3.0.1313\6.8.1120\TmIEPlg32.dll (Trend Micro Inc.)

Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)

Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF HKLM\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension

FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension [2014-08-03]

FF HKLM-x32\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension

FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension

FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2014-08-03]

FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension

FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension [2014-08-03]

FF HKCU\...\Firefox\Extensions: [{A84272D6-9EF3-8B41-2944-3A5650C079A8}] - C:\Program Files (x86)\ver7Re-Markable\176.xpi
 

Chrome: 

=======

CHR HomePage: 

CHR Extension: (Google Docs) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-03]

CHR Extension: (Google Drive) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-03]

CHR Extension: (YouTube) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-03]

CHR Extension: (Google-Suche) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-03]

CHR Extension: (AdBlock) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-03]

CHR Extension: (Google Wallet) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-03]

CHR Extension: (Google Mail) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-03]

CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1095\8.0.1095\chrome_tmbep.crx [2014-08-03]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)

R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [117312 2013-12-03] (Trend Micro Inc.)

R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [283160 2013-12-03] (Trend Micro Inc.)

R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [50976 2013-07-01] (Trend Micro Inc.)

R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [100640 2013-06-13] (Trend Micro Inc.)

R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [85936 2013-12-03] (Trend Micro Inc.)

R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [303392 2013-05-15] (Trend Micro Inc.)

R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105744 2011-08-22] (Trend Micro Inc.)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-03 20:45 - 2014-08-03 20:46 - 00012348 _____ () C:\Users\Dennis\Downloads\FRST.txt

2014-08-03 20:45 - 2014-08-03 20:45 - 02094080 _____ (Farbar) C:\Users\Dennis\Downloads\FRST64.exe

2014-08-03 20:45 - 2014-08-03 20:45 - 00000000 ____D () C:\FRST

2014-08-03 20:44 - 2014-08-03 20:45 - 00231960 _____ () C:\Windows\RegBootClean64.exe

2014-08-03 20:44 - 2014-08-03 20:45 - 00006290 _____ () C:\Windows\RegBootClean64.CFG

2014-08-03 19:28 - 2014-08-03 19:28 - 00000222 _____ () C:\Users\Dennis\Desktop\Age of Empires II HD Edition.url

2014-08-03 19:21 - 2014-08-03 19:44 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-08-03 19:21 - 2014-08-03 19:21 - 01141680 _____ () C:\Users\Dennis\Downloads\SteamSetup.exe

2014-08-03 19:21 - 2014-08-03 19:21 - 00000967 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-08-03 19:21 - 2014-08-03 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-08-03 19:19 - 2014-08-03 19:19 - 00000000 ____D () C:\temp

2014-08-03 19:18 - 2014-08-03 19:45 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\TS3Client

2014-08-03 19:18 - 2014-08-03 19:18 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2014-08-03 19:18 - 2014-08-03 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-08-03 19:18 - 2014-08-03 19:18 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client

2014-08-03 19:17 - 2014-08-03 19:17 - 29254784 _____ (TeamSpeak Systems GmbH) C:\Users\Dennis\Downloads\TeamSpeak3-Client-win64-3.0.15.1 (1).exe

2014-08-03 19:16 - 2014-08-03 19:17 - 29254784 _____ (TeamSpeak Systems GmbH) C:\Users\Dennis\Downloads\TeamSpeak3-Client-win64-3.0.15.1.exe

2014-08-03 19:05 - 2014-08-03 19:08 - 00000000 ____D () C:\AdwCleaner

2014-08-03 19:05 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-08-03 19:04 - 2014-08-03 19:08 - 00000000 ____D () C:\Users\Dennis\Desktop\Viren Power Scan Ordner =3

2014-08-03 19:04 - 2014-08-03 19:04 - 01361309 _____ () C:\Users\Dennis\Downloads\adwcleaner_3.302 (1).exe

2014-08-03 18:42 - 2014-08-03 18:42 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-08-03 18:42 - 2014-08-03 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-08-03 18:42 - 2014-08-03 18:42 - 00000000 ____D () C:\Program Files\CCleaner

2014-08-03 18:41 - 2014-08-03 18:42 - 03738080 _____ (Piriform Ltd) C:\Users\Dennis\Downloads\ccsetup416_slim.exe

2014-08-03 18:39 - 2014-08-03 18:49 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-03 18:39 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-03 18:39 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-08-03 18:39 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-08-03 18:38 - 2014-08-03 18:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-03 18:23 - 2014-08-03 18:23 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Probit Software

2014-08-03 18:23 - 2014-08-03 18:23 - 00000000 ____D () C:\ProgramData\TEMP

2014-08-03 18:17 - 2014-08-03 18:17 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dennis\Downloads\SpyHunter-installer.exe

2014-08-03 18:08 - 2014-08-03 18:08 - 00000000 ___HD () C:\TMRescueDisk

2014-08-03 18:04 - 2014-08-03 18:04 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Titanium Internet Security

2014-08-03 18:04 - 2014-08-03 18:04 - 00000000 ____D () C:\Users\Dennis\AppData\Local\Trend Micro

2014-08-03 18:03 - 2014-08-03 18:03 - 00003274 _____ () C:\Windows\System32\Tasks\Titanium BTC

2014-08-03 18:03 - 2013-12-03 10:57 - 00283160 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmcomm.sys

2014-08-03 18:03 - 2013-12-03 10:57 - 00117312 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmactmon.sys

2014-08-03 18:03 - 2013-12-03 10:57 - 00085936 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmevtmgr.sys

2014-08-03 18:03 - 2013-07-01 15:08 - 00050976 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\TMEBC64.sys

2014-08-03 18:03 - 2013-06-13 08:35 - 00100640 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmeevw.sys

2014-08-03 18:03 - 2013-05-15 12:23 - 00303392 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmnciesc.sys

2014-08-03 18:03 - 2011-08-22 17:33 - 00105744 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmtdi.sys

2014-08-03 18:02 - 2014-08-03 18:02 - 00000059 _____ () C:\Windows\system32\SupportTool.exe.bat

2014-08-03 18:02 - 2014-08-03 18:02 - 00000000 ____D () C:\Program Files\Trend Micro

2014-08-03 18:01 - 2014-08-03 20:44 - 00000000 ____D () C:\ProgramData\Trend Micro

2014-08-03 17:57 - 2014-08-03 17:57 - 00000036 _____ () C:\Users\Dennis\AppData\Local\housecall.guid.cache

2014-08-03 17:56 - 2014-08-03 17:56 - 06631800 _____ (Trend Micro Inc.) C:\Users\Dennis\Downloads\Titanium_Internet_Security_2014.exe

2014-08-03 17:43 - 2014-08-03 19:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-03 17:43 - 2014-08-03 19:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-03 17:43 - 2014-08-03 19:06 - 00000851 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-08-03 17:43 - 2014-08-03 18:02 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-08-03 17:43 - 2014-08-03 17:48 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-08-03 17:43 - 2014-08-03 17:48 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-08-03 17:43 - 2014-08-03 17:44 - 00000000 ____D () C:\Users\Dennis\AppData\Local\Google

2014-08-03 17:43 - 2014-08-03 17:43 - 00057560 _____ () C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT

2014-08-03 17:43 - 2014-08-03 17:43 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00001305 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hilfe.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00001305 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Speed PC.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00001295 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00001290 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Speed PC on the Web.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Probit Software

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Google

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Easy Speed Check

2014-08-03 17:41 - 2014-08-03 19:34 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-03 17:41 - 2014-08-03 19:34 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Windows\SysWOW64\Macromed

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Windows\system32\Macromed

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Macromedia

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Adobe

2014-08-03 17:34 - 2014-08-03 17:34 - 00000000 ____D () C:\Users\Dennis\AppData\Local\NVIDIA

2014-08-03 17:34 - 2014-08-03 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-08-03 17:32 - 2014-08-03 17:32 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-08-03 17:31 - 2014-08-03 19:07 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-08-03 17:31 - 2014-08-03 17:32 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-08-03 17:31 - 2014-08-03 17:32 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-08-03 17:31 - 2014-07-02 22:48 - 00075040 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-08-03 17:31 - 2014-07-02 22:48 - 00061912 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 06783776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 03522392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 02559960 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 00935368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-08-03 17:31 - 2014-07-02 20:55 - 00386520 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-08-03 17:31 - 2014-07-02 19:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-08-03 17:31 - 2014-07-02 12:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin

2014-08-03 17:30 - 2014-08-03 17:30 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-08-03 17:28 - 2009-11-25 12:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe

2014-08-03 17:28 - 2009-11-25 12:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe

2014-08-03 17:28 - 2009-11-25 12:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll

2014-08-03 17:27 - 2014-07-02 23:29 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2014-08-03 17:27 - 2014-07-02 23:29 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2014-08-03 17:27 - 2014-07-02 23:29 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 14498552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-08-03 17:27 - 2014-07-02 22:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 03196816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 02814656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00965312 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00026353 _____ () C:\Windows\system32\nvinfo.pb

2014-08-03 17:27 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-08-03 17:27 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-08-03 17:27 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-08-03 17:25 - 2014-08-03 17:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-08-03 17:11 - 2014-08-03 18:43 - 00000000 ____D () C:\Windows\Panther

2014-08-03 17:10 - 2014-08-03 17:10 - 00008192 __RSH () C:\BOOTSECT.BAK

2014-08-03 17:10 - 2014-07-23 10:52 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-08-03 17:10 - 2009-07-14 03:38 - 00383562 __RSH () C:\bootmgr

2014-08-03 16:53 - 2012-02-15 08:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2014-08-03 16:53 - 2012-02-15 07:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll

2014-08-03 16:53 - 2012-02-15 06:47 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2014-08-03 16:53 - 2012-02-15 06:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2014-08-03 16:53 - 2010-01-09 09:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll

2014-08-03 16:53 - 2010-01-09 08:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll

2014-08-03 16:50 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-03 16:50 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-03 16:50 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-03 16:50 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-03 16:50 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-03 16:50 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-03 16:50 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-03 16:50 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-03 16:50 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-08-03 16:49 - 2013-10-28 10:44 - 00884952 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys

2014-08-03 16:49 - 2013-10-28 10:44 - 00108760 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll

2014-08-03 16:49 - 2013-10-28 10:44 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-08-03 16:43 - 2014-08-03 16:43 - 00159200 _____ () C:\Users\Dennis\AppData\Roaming\CrashRpt1402.dll

2014-08-03 16:43 - 2014-08-03 16:43 - 00000000 ____D () C:\Users\Dennis\AppData\Local\CrashRpt

2014-08-03 16:20 - 2014-08-03 16:20 - 00001443 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-08-03 16:20 - 2014-08-03 16:20 - 00001409 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk

2014-08-03 16:19 - 2014-08-03 16:20 - 00000000 ____D () C:\Users\Dennis

2014-08-03 16:19 - 2014-08-03 16:19 - 00000020 ___SH () C:\Users\Dennis\ntuser.ini

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Netzwerkumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Lokale Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Eigene Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Druckumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Favoriten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 __SHD () C:\Recovery

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 ____D () C:\Users\Dennis\AppData\Local\VirtualStore

2014-08-03 16:19 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-08-03 16:19 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-08-03 16:16 - 2014-08-03 19:10 - 00612861 ____N () C:\Windows\WindowsUpdate.log

2014-08-03 16:16 - 2014-08-03 16:16 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

2014-08-03 16:16 - 2014-08-03 16:16 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

2014-08-03 16:14 - 2014-08-03 16:14 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-03 20:46 - 2014-08-03 20:45 - 00012348 _____ () C:\Users\Dennis\Downloads\FRST.txt

2014-08-03 20:45 - 2014-08-03 20:45 - 02094080 _____ (Farbar) C:\Users\Dennis\Downloads\FRST64.exe

2014-08-03 20:45 - 2014-08-03 20:45 - 00000000 ____D () C:\FRST

2014-08-03 20:45 - 2014-08-03 20:44 - 00231960 _____ () C:\Windows\RegBootClean64.exe

2014-08-03 20:45 - 2014-08-03 20:44 - 00006290 _____ () C:\Windows\RegBootClean64.CFG

2014-08-03 20:44 - 2014-08-03 18:01 - 00000000 ____D () C:\ProgramData\Trend Micro

2014-08-03 20:39 - 2009-07-14 06:45 - 00013600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-08-03 20:39 - 2009-07-14 06:45 - 00013600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-08-03 19:53 - 2014-08-03 17:43 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-03 19:45 - 2014-08-03 19:18 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\TS3Client

2014-08-03 19:44 - 2014-08-03 19:21 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-08-03 19:34 - 2014-08-03 17:41 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-03 19:34 - 2014-08-03 17:41 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-08-03 19:28 - 2014-08-03 19:28 - 00000222 _____ () C:\Users\Dennis\Desktop\Age of Empires II HD Edition.url

2014-08-03 19:21 - 2014-08-03 19:21 - 01141680 _____ () C:\Users\Dennis\Downloads\SteamSetup.exe

2014-08-03 19:21 - 2014-08-03 19:21 - 00000967 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-08-03 19:21 - 2014-08-03 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-08-03 19:19 - 2014-08-03 19:19 - 00000000 ____D () C:\temp

2014-08-03 19:18 - 2014-08-03 19:18 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2014-08-03 19:18 - 2014-08-03 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-08-03 19:18 - 2014-08-03 19:18 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client

2014-08-03 19:17 - 2014-08-03 19:17 - 29254784 _____ (TeamSpeak Systems GmbH) C:\Users\Dennis\Downloads\TeamSpeak3-Client-win64-3.0.15.1 (1).exe

2014-08-03 19:17 - 2014-08-03 19:16 - 29254784 _____ (TeamSpeak Systems GmbH) C:\Users\Dennis\Downloads\TeamSpeak3-Client-win64-3.0.15.1.exe

2014-08-03 19:12 - 2009-07-14 19:58 - 00696132 _____ () C:\Windows\system32\perfh007.dat

2014-08-03 19:12 - 2009-07-14 19:58 - 00147428 _____ () C:\Windows\system32\perfc007.dat

2014-08-03 19:12 - 2009-07-14 07:13 - 01611160 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-08-03 19:10 - 2014-08-03 16:16 - 00612861 ____N () C:\Windows\WindowsUpdate.log

2014-08-03 19:08 - 2014-08-03 19:05 - 00000000 ____D () C:\AdwCleaner

2014-08-03 19:08 - 2014-08-03 19:04 - 00000000 ____D () C:\Users\Dennis\Desktop\Viren Power Scan Ordner =3

2014-08-03 19:07 - 2014-08-03 17:43 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-03 19:07 - 2014-08-03 17:31 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-08-03 19:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-03 19:06 - 2014-08-03 17:43 - 00000851 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-08-03 19:04 - 2014-08-03 19:04 - 01361309 _____ () C:\Users\Dennis\Downloads\adwcleaner_3.302 (1).exe

2014-08-03 18:49 - 2014-08-03 18:39 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-03 18:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2014-08-03 18:43 - 2014-08-03 17:11 - 00000000 ____D () C:\Windows\Panther

2014-08-03 18:42 - 2014-08-03 18:42 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-08-03 18:42 - 2014-08-03 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-08-03 18:42 - 2014-08-03 18:42 - 00000000 ____D () C:\Program Files\CCleaner

2014-08-03 18:42 - 2014-08-03 18:41 - 03738080 _____ (Piriform Ltd) C:\Users\Dennis\Downloads\ccsetup416_slim.exe

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-03 18:38 - 2014-08-03 18:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-03 18:23 - 2014-08-03 18:23 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Probit Software

2014-08-03 18:23 - 2014-08-03 18:23 - 00000000 ____D () C:\ProgramData\TEMP

2014-08-03 18:17 - 2014-08-03 18:17 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dennis\Downloads\SpyHunter-installer.exe

2014-08-03 18:08 - 2014-08-03 18:08 - 00000000 ___HD () C:\TMRescueDisk

2014-08-03 18:04 - 2014-08-03 18:04 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Titanium Internet Security

2014-08-03 18:04 - 2014-08-03 18:04 - 00000000 ____D () C:\Users\Dennis\AppData\Local\Trend Micro

2014-08-03 18:03 - 2014-08-03 18:03 - 00003274 _____ () C:\Windows\System32\Tasks\Titanium BTC

2014-08-03 18:02 - 2014-08-03 18:02 - 00000059 _____ () C:\Windows\system32\SupportTool.exe.bat

2014-08-03 18:02 - 2014-08-03 18:02 - 00000000 ____D () C:\Program Files\Trend Micro

2014-08-03 18:02 - 2014-08-03 17:43 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-08-03 17:57 - 2014-08-03 17:57 - 00000036 _____ () C:\Users\Dennis\AppData\Local\housecall.guid.cache

2014-08-03 17:56 - 2014-08-03 17:56 - 06631800 _____ (Trend Micro Inc.) C:\Users\Dennis\Downloads\Titanium_Internet_Security_2014.exe

2014-08-03 17:48 - 2014-08-03 17:43 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-08-03 17:48 - 2014-08-03 17:43 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-08-03 17:44 - 2014-08-03 17:43 - 00000000 ____D () C:\Users\Dennis\AppData\Local\Google

2014-08-03 17:43 - 2014-08-03 17:43 - 00057560 _____ () C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT

2014-08-03 17:43 - 2014-08-03 17:43 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00001305 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hilfe.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00001305 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Speed PC.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00001295 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00001290 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Speed PC on the Web.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Probit Software

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Google

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Easy Speed Check

2014-08-03 17:43 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-08-03 17:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Windows\SysWOW64\Macromed

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Windows\system32\Macromed

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Macromedia

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Adobe

2014-08-03 17:34 - 2014-08-03 17:34 - 00000000 ____D () C:\Users\Dennis\AppData\Local\NVIDIA

2014-08-03 17:34 - 2014-08-03 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-08-03 17:32 - 2014-08-03 17:32 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-08-03 17:32 - 2014-08-03 17:31 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-08-03 17:32 - 2014-08-03 17:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-08-03 17:32 - 2014-08-03 17:25 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-08-03 17:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help

2014-08-03 17:30 - 2014-08-03 17:30 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-08-03 17:10 - 2014-08-03 17:10 - 00008192 __RSH () C:\BOOTSECT.BAK

2014-08-03 17:10 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG

2014-08-03 17:10 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-08-03 16:48 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore

2014-08-03 16:43 - 2014-08-03 16:43 - 00159200 _____ () C:\Users\Dennis\AppData\Roaming\CrashRpt1402.dll

2014-08-03 16:43 - 2014-08-03 16:43 - 00000000 ____D () C:\Users\Dennis\AppData\Local\CrashRpt

2014-08-03 16:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-08-03 16:20 - 2014-08-03 16:20 - 00001443 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-08-03 16:20 - 2014-08-03 16:20 - 00001409 _____ () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk

2014-08-03 16:20 - 2014-08-03 16:19 - 00000000 ____D () C:\Users\Dennis

2014-08-03 16:19 - 2014-08-03 16:19 - 00000020 ___SH () C:\Users\Dennis\ntuser.ini

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Netzwerkumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Lokale Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Eigene Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Druckumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Favoriten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 __SHD () C:\Recovery

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 ____D () C:\Users\Dennis\AppData\Local\VirtualStore

2014-08-03 16:19 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-08-03 16:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT

2014-08-03 16:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-08-03 16:17 - 2009-07-14 06:45 - 00274464 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-03 16:16 - 2014-08-03 16:16 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

2014-08-03 16:16 - 2014-08-03 16:16 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

2014-08-03 16:16 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-08-03 16:16 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-08-03 16:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep

2014-08-03 16:14 - 2014-08-03 16:14 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

2014-07-23 10:52 - 2014-08-03 17:10 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 

Some content of TEMP:

====================

C:\Users\Dennis\AppData\Local\Temp\CrashRpt1402.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-08-03 16:11
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Und dann noch die Addition :D

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-08-2014

Ran by Dennis at 2014-08-03 20:46:59

Running from C:\Users\Dennis\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Trend Micro Titanium Internet Security (Enabled - Up to date) {5D349EF8-873B-C657-917F-F1D93E101A7C}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Trend Micro Titanium Internet Security (Enabled - Up to date) {E6557F1C-A101-C9D9-ABCF-CAAB459750C1}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)

CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)

Easy Speed Check (HKLM-x32\...\Easy Speed Check) (Version: 1.1.2 - Probit Software LTD)

Easy Speed PC (HKLM-x32\...\Easy Speed PC) (Version: 7.0.2 - Probit Software LTD)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden

NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)

NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden

NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.76.1028.2013 - Realtek)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)

Trend Micro Titanium (Version: 7.0 - Trend Micro Inc.) Hidden

Trend Micro Titanium Internet Security (HKLM\...\{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}) (Version: 7.0 - Trend Micro Inc.)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

03-08-2014 14:48:53 Installiert Realtek Ethernet Controller Driver

03-08-2014 14:50:09 Windows Update

03-08-2014 14:53:46 Windows Update

03-08-2014 15:28:41 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {4C516B22-5E5E-4F2C-AA5C-5952CBCF9FBE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)

Task: {B92E5CC6-68E2-46FC-B23D-AF2D01D9BF2F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-03] (Google Inc.)

Task: {BBF346AF-8DEC-41F7-946E-2593C9AB74E4} - System32\Tasks\Titanium BTC => C:\Program Files\Trend Micro\Titanium\plugin\TMDC\TMDC.exe [2014-05-09] (Trend Micro Inc.)

Task: {ED17634D-6C4E-4D16-A4C6-662F3CAFFDC3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-03] (Google Inc.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-08-03 17:31 - 2014-07-02 20:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-02-28 11:14 - 2014-02-28 11:14 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll

2014-02-27 16:51 - 2014-02-27 16:51 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll

2014-02-27 16:51 - 2014-02-27 16:51 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll

2014-06-20 09:48 - 2014-06-20 09:48 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll

2014-06-20 09:49 - 2014-06-20 09:49 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll

2014-02-27 16:51 - 2014-02-27 16:51 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll

2014-02-27 16:51 - 2014-02-27 16:51 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll

2014-06-26 08:38 - 2014-06-26 08:38 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll

2014-07-14 10:22 - 2014-07-14 10:22 - 00579016 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll

2014-02-27 16:51 - 2014-02-27 16:51 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll

2014-08-03 18:02 - 2013-01-16 04:19 - 00048128 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc110-mt-1_49.dll

2014-08-03 18:02 - 2013-04-02 06:25 - 00675840 _____ () C:\Program Files\Trend Micro\AMSP\sqlite3.dll

2014-08-03 18:02 - 2013-01-16 04:23 - 00058368 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc110-mt-1_49.dll

2014-08-03 18:02 - 2012-12-18 22:06 - 01300480 _____ () C:\Program Files\Trend Micro\AMSP\libprotobuf.dll

2014-08-03 18:02 - 2013-01-16 04:19 - 00018944 _____ () C:\Program Files\Trend Micro\AMSP\boost_system-vc110-mt-1_49.dll

2014-08-03 17:57 - 2013-07-23 17:28 - 00247352 _____ () C:\Program Files\Trend Micro\UniClient\plugins\LUADLL.dll

2014-08-03 19:19 - 2013-12-18 15:33 - 00057584 _____ () C:\Program Files\Trend Micro\Titanium\plugin\fcMsgDispatcher.dll

2014-08-03 17:43 - 2014-01-28 12:04 - 00279955 _____ () C:\Program Files (x86)\Easy Speed Check\libidn-11.dll

2014-08-03 17:43 - 2013-08-26 02:02 - 00131598 _____ () C:\Program Files (x86)\Easy Speed Check\zlib1.dll

2014-08-03 17:43 - 2014-01-28 12:04 - 00112142 _____ () C:\Program Files (x86)\Easy Speed Check\libgcc_s_dw2-1.dll

2014-08-03 17:43 - 2014-01-28 12:04 - 01000974 _____ () C:\Program Files (x86)\Easy Speed Check\libstdc++-6.dll

2014-08-03 17:43 - 2014-01-28 12:04 - 00020480 _____ () C:\Program Files (x86)\Easy Speed Check\cwebpage.dll

2014-08-03 19:23 - 2014-07-12 02:53 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll

2014-08-03 19:23 - 2014-07-12 02:53 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll

2014-08-03 19:23 - 2014-07-12 02:53 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll

2014-08-03 19:23 - 2014-07-12 02:53 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll

2014-08-03 19:23 - 2014-06-27 00:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2014-08-03 19:23 - 2014-07-16 04:28 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll

2014-08-03 19:23 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll

2014-08-03 19:23 - 2014-07-16 04:28 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2014-08-03 19:23 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2014-08-03 19:34 - 2014-08-03 19:34 - 17029808 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

2014-08-03 17:43 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll

2014-08-03 17:43 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll

2014-08-03 17:43 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll

2014-08-03 17:43 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll

2014-08-03 17:43 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

2014-08-03 17:43 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (08/03/2014 06:40:08 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm mbam.exe, Version 1.0.0.532 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 154c
 

Startzeit: 01cfaf3980f786d7
 

Endzeit: 0
 

Anwendungspfad: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
 

Berichts-ID: d266b29e-1b2c-11e4-aa9b-c860007090b7
 

Error: (08/03/2014 06:34:14 PM) (Source: MsiInstaller) (EventID: 11719) (User: Misterdead)

Description: Product: Community Smartbar -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.
 

Error: (08/03/2014 06:34:14 PM) (Source: MsiInstaller) (EventID: 11719) (User: Misterdead)

Description: Product: Community Smartbar -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.
 

Error: (08/03/2014 06:21:58 PM) (Source: MsiInstaller) (EventID: 11719) (User: Misterdead)

Description: Product: Yahoo Community Smartbar (by Linkury) -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.
 

Error: (08/03/2014 06:21:58 PM) (Source: MsiInstaller) (EventID: 11719) (User: Misterdead)

Description: Product: Yahoo Community Smartbar (by Linkury) -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.
 

Error: (08/03/2014 06:18:03 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Misterdead)

Description: Die Anwendung oder der Dienst "linmsl" konnte nicht heruntergefahren werden.
 

Error: (08/03/2014 04:12:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. "ESENT"-Fehler: -546.
 

Error: (08/03/2014 04:12:32 PM) (Source: ESENT) (EventID: 412) (User: )

Description: Catalog Database (312)Catalog Database: Die Kopfzeile der Protokolldatei C:\Windows\system32\CatRoot2\edb.log konnte nicht gelesen werden. Fehler -546.
 

Error: (08/03/2014 04:12:32 PM) (Source: ESENT) (EventID: 412) (User: )

Description: Catalog Database (312)Catalog Database: Die Kopfzeile der Protokolldatei C:\Windows\system32\CatRoot2\edb.log konnte nicht gelesen werden. Fehler -546.
 
 

System errors:

=============

Error: (08/03/2014 08:45:33 PM) (Source: NetBT) (EventID: 4321) (User: )

Description: Der Name "MISTERDEAD     :0" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.28

registriert werden. Der Computer mit IP-Adresse 192.168.178.23 hat nicht

zugelassen, dass dieser Computer diesen Namen verwendet.
 

Error: (08/03/2014 08:44:34 PM) (Source: NetBT) (EventID: 4321) (User: )

Description: Der Name "MISTERDEAD     :0" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.28

registriert werden. Der Computer mit IP-Adresse 192.168.178.23 hat nicht

zugelassen, dass dieser Computer diesen Namen verwendet.
 

Error: (08/03/2014 08:16:34 PM) (Source: NetBT) (EventID: 4321) (User: )

Description: Der Name "MISTERDEAD     :0" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.28

registriert werden. Der Computer mit IP-Adresse 192.168.178.23 hat nicht

zugelassen, dass dieser Computer diesen Namen verwendet.
 

Error: (08/03/2014 07:23:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (08/03/2014 07:23:37 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
 

Error: (08/03/2014 07:07:26 PM) (Source: NetBT) (EventID: 4321) (User: )

Description: Der Name "MISTERDEAD     :20" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.28

registriert werden. Der Computer mit IP-Adresse 192.168.178.23 hat nicht

zugelassen, dass dieser Computer diesen Namen verwendet.
 

Error: (08/03/2014 07:07:26 PM) (Source: Server) (EventID: 2505) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{72892493-30AB-4EB9-A692-C97F5D8A4097} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (08/03/2014 07:07:25 PM) (Source: NetBT) (EventID: 4321) (User: )

Description: Der Name "MISTERDEAD     :0" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.28

registriert werden. Der Computer mit IP-Adresse 192.168.178.23 hat nicht

zugelassen, dass dieser Computer diesen Namen verwendet.
 

Error: (08/03/2014 07:01:21 PM) (Source: NetBT) (EventID: 4321) (User: )

Description: Der Name "MISTERDEAD     :20" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.28

registriert werden. Der Computer mit IP-Adresse 192.168.178.23 hat nicht

zugelassen, dass dieser Computer diesen Namen verwendet.
 

Error: (08/03/2014 07:01:21 PM) (Source: NetBT) (EventID: 4321) (User: )

Description: Der Name "MISTERDEAD     :0" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.28

registriert werden. Der Computer mit IP-Adresse 192.168.178.23 hat nicht

zugelassen, dass dieser Computer diesen Namen verwendet.
 
 

Microsoft Office Sessions:

=========================

Error: (08/03/2014 06:40:08 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: mbam.exe1.0.0.532154c01cfaf3980f786d70C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exed266b29e-1b2c-11e4-aa9b-c860007090b7
 

Error: (08/03/2014 06:34:14 PM) (Source: MsiInstaller) (EventID: 11719) (User: Misterdead)

Description: Product: Community Smartbar -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (08/03/2014 06:34:14 PM) (Source: MsiInstaller) (EventID: 11719) (User: Misterdead)

Description: Product: Community Smartbar -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (08/03/2014 06:21:58 PM) (Source: MsiInstaller) (EventID: 11719) (User: Misterdead)

Description: Product: Yahoo Community Smartbar (by Linkury) -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (08/03/2014 06:21:58 PM) (Source: MsiInstaller) (EventID: 11719) (User: Misterdead)

Description: Product: Yahoo Community Smartbar (by Linkury) -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (08/03/2014 06:18:03 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Misterdead)

Description: 1C:\Program Files (x86)\LPT\linmsl.exelinmsl05117200800
 

Error: (08/03/2014 04:12:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )

Description: -546
 

Error: (08/03/2014 04:12:32 PM) (Source: ESENT) (EventID: 412) (User: )

Description: Catalog Database312Catalog Database: C:\Windows\system32\CatRoot2\edb.log-546
 

Error: (08/03/2014 04:12:32 PM) (Source: ESENT) (EventID: 412) (User: )

Description: Catalog Database312Catalog Database: C:\Windows\system32\CatRoot2\edb.log-546
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 37%

Total physical RAM: 8138.42 MB

Available physical RAM: 5120.23 MB

Total Pagefile: 16274.99 MB

Available Pagefile: 12369.48 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:200 GB) (Free:170.45 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: () (Fixed) (Total:1663.01 GB) (Free:1662.87 GB) NTFS

Drive e: (GRMCHPXFRER_DE_DVD) (CDROM) (Total:2.97 GB) (Free:0 GB) UDF

Drive f: (EASYSTICK) (Removable) (Total:1.86 GB) (Free:1.6 GB) FAT
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 9D38A7A2)

Partition 1: (Active) - (Size=200 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=1663 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows XP) (Size: 2 GB) (Disk ID: C3072E18)

Partition 1: (Not Active) - (Size=2 GB) - (Type=06)
 

==================== End Of Log ============================

Lg Misterdead =)

So =) Danke nochmal für die Hilfe
Los gehts

Fixog

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-08-2014

Ran by Dennis at 2014-08-03 21:28:04 Run:1

Running from C:\Users\Dennis\Downloads

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

FF HKCU\...\Firefox\Extensions: [{A84272D6-9EF3-8B41-2944-3A5650C079A8}] - C:\Program Files (x86)\ver7Re-Markable\176.xpi

*****************
 

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.

HKCU\Software\Mozilla\Firefox\Extensions\\{A84272D6-9EF3-8B41-2944-3A5650C079A8} => value deleted successfully.
 
 

The system needed a reboot. 
 

==== End of Fixlog ====

Adware

Code:

# AdwCleaner v3.302 - Bericht erstellt am 03/08/2014 um 21:33:02

# Aktualisiert 30/07/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium  (64 bits)

# Benutzername : Dennis - MISTERDEAD

# Gestartet von : C:\Users\Dennis\Desktop\Viren Power Scan Ordner =3\adwcleaner_3.302.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
 

***** [ Browser ] *****
 

-\\ Internet Explorer v8.0.7600.16385
 
 

-\\ Google Chrome v36.0.1985.125
 

[ Datei : C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [8069 octets] - [03/08/2014 19:05:17]

AdwCleaner[R1].txt - [941 octets] - [03/08/2014 19:08:09]

AdwCleaner[R2].txt - [1160 octets] - [03/08/2014 21:32:00]

AdwCleaner[S0].txt - [7824 octets] - [03/08/2014 19:06:04]

AdwCleaner[S1].txt - [1082 octets] - [03/08/2014 21:33:02]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1142 octets] ##########

Malwarebytes

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 03.08.2014

Suchlauf-Zeit: 21:44:54

Logdatei: mbam.txt

Administrator: Ja
 

Version: 2.00.2.1012

Malware Datenbank: v2014.08.03.05

Rootkit Datenbank: v2014.08.01.01

Lizenz: Kostenlos

Malware Schutz: Deaktiviert

Bösartiger Webseiten Schutz: Deaktiviert

Self-protection: Deaktiviert
 

Betriebssystem: Windows 7

CPU: x64

Dateisystem: NTFS

Benutzer: Dennis
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 270723

Verstrichene Zeit: 6 Min, 5 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristics: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 0

(No malicious items detected)
 

Registrierungswerte: 0

(No malicious items detected)
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 0

(No malicious items detected)
 

Dateien: 0

(No malicious items detected)
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

Und die FRST

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014

Ran by Dennis (administrator) on MISTERDEAD on 03-08-2014 21:53:59

Running from C:\Users\Dennis\Downloads

Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 8

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)

HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [229824 2013-10-09] (Trend Micro Inc.)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

ProxyServer: http=127.0.0.1:13869;https=127.0.0.1:13869

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB205AD382AAFCF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

BHO: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files\Trend Micro\AMSP\module\20004\3.0.1313\6.8.1120\TmIEPlg.dll (Trend Micro Inc.)

BHO: TmBpIeBHO Class -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe64.dll (Trend Micro Inc.)

BHO-x32: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files\Trend Micro\AMSP\module\20004\3.0.1313\6.8.1120\TmIEPlg32.dll (Trend Micro Inc.)

BHO-x32: TSToolbarBHO -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)

BHO-x32: TmBpIeBHO Class -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe32.dll (Trend Micro Inc.)

Toolbar: HKLM-x32 - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe64.dll (Trend Micro Inc.)

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\3.0.1313\6.8.1120\TmIEPlg.dll (Trend Micro Inc.)

Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} -  No File

Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  No File

Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe32.dll (Trend Micro Inc.)

Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\3.0.1313\6.8.1120\TmIEPlg32.dll (Trend Micro Inc.)

Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)

Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF HKLM\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension

FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension [2014-08-03]

FF HKLM-x32\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension

FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension

FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2014-08-03]

FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension

FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension [2014-08-03]
 

Chrome: 

=======

CHR HomePage: 

CHR Extension: (Google Docs) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-03]

CHR Extension: (Google Drive) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-03]

CHR Extension: (YouTube) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-03]

CHR Extension: (Google-Suche) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-03]

CHR Extension: (AdBlock) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-03]

CHR Extension: (Google Wallet) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-03]

CHR Extension: (Google Mail) - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-03]

CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1095\8.0.1095\chrome_tmbep.crx [2014-08-03]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)

R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [117312 2013-12-03] (Trend Micro Inc.)

R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [283160 2013-12-03] (Trend Micro Inc.)

R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [50976 2013-07-01] (Trend Micro Inc.)

R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [100640 2013-06-13] (Trend Micro Inc.)

R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [85936 2013-12-03] (Trend Micro Inc.)

R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [303392 2013-05-15] (Trend Micro Inc.)

R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105744 2011-08-22] (Trend Micro Inc.)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-03 21:53 - 2014-08-03 21:53 - 02094080 _____ (Farbar) C:\Users\Dennis\Downloads\FRST64.exe

2014-08-03 21:53 - 2014-08-03 21:53 - 00010685 _____ () C:\Users\Dennis\Downloads\FRST.txt

2014-08-03 21:52 - 2014-08-03 21:52 - 00001143 _____ () C:\Users\Dennis\Desktop\mbam.txt

2014-08-03 21:43 - 2014-08-03 21:43 - 00000626 _____ () C:\Users\Dennis\Desktop\JRT.txt

2014-08-03 21:36 - 2014-08-03 21:36 - 00000000 ____D () C:\Windows\ERUNT

2014-08-03 21:35 - 2014-08-03 21:35 - 01016261 _____ (Thisisu) C:\Users\Dennis\Downloads\JRT.exe

2014-08-03 21:34 - 2014-08-03 21:34 - 00001222 _____ () C:\Users\Dennis\Desktop\AdwCleaner[S1].txt

2014-08-03 21:32 - 2014-08-03 21:32 - 00001160 _____ () C:\Users\Dennis\Desktop\AdwCleaner[R2].txt

2014-08-03 21:29 - 2014-08-03 21:34 - 00001346 _____ () C:\Windows\PFRO.log

2014-08-03 21:29 - 2014-08-03 21:34 - 00000112 _____ () C:\Windows\setupact.log

2014-08-03 21:29 - 2014-08-03 21:29 - 00000000 _____ () C:\Windows\setuperr.log

2014-08-03 20:46 - 2014-08-03 20:47 - 00020867 _____ () C:\Users\Dennis\Desktop\Addition.txt

2014-08-03 20:45 - 2014-08-03 21:54 - 00000000 ____D () C:\FRST

2014-08-03 20:45 - 2014-08-03 20:47 - 00051894 _____ () C:\Users\Dennis\Desktop\FRST.txt

2014-08-03 20:44 - 2014-08-03 20:45 - 00231960 _____ () C:\Windows\RegBootClean64.exe

2014-08-03 19:28 - 2014-08-03 19:28 - 00000222 _____ () C:\Users\Dennis\Desktop\Age of Empires II HD Edition.url

2014-08-03 19:21 - 2014-08-03 19:44 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-08-03 19:21 - 2014-08-03 19:21 - 01141680 _____ () C:\Users\Dennis\Downloads\SteamSetup.exe

2014-08-03 19:21 - 2014-08-03 19:21 - 00000967 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-08-03 19:21 - 2014-08-03 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-08-03 19:19 - 2014-08-03 19:19 - 00000000 ____D () C:\temp

2014-08-03 19:18 - 2014-08-03 21:28 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\TS3Client

2014-08-03 19:18 - 2014-08-03 19:18 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2014-08-03 19:18 - 2014-08-03 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-08-03 19:18 - 2014-08-03 19:18 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client

2014-08-03 19:17 - 2014-08-03 19:17 - 29254784 _____ (TeamSpeak Systems GmbH) C:\Users\Dennis\Downloads\TeamSpeak3-Client-win64-3.0.15.1 (1).exe

2014-08-03 19:16 - 2014-08-03 19:17 - 29254784 _____ (TeamSpeak Systems GmbH) C:\Users\Dennis\Downloads\TeamSpeak3-Client-win64-3.0.15.1.exe

2014-08-03 19:05 - 2014-08-03 21:33 - 00000000 ____D () C:\AdwCleaner

2014-08-03 19:05 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-08-03 19:04 - 2014-08-03 21:40 - 00000000 ____D () C:\Users\Dennis\Desktop\Viren Power Scan Ordner =3

2014-08-03 19:04 - 2014-08-03 19:04 - 01361309 _____ () C:\Users\Dennis\Downloads\adwcleaner_3.302 (1).exe

2014-08-03 18:41 - 2014-08-03 18:42 - 03738080 _____ (Piriform Ltd) C:\Users\Dennis\Downloads\ccsetup416_slim.exe

2014-08-03 18:39 - 2014-08-03 21:44 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-03 18:39 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-03 18:39 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-08-03 18:39 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-08-03 18:38 - 2014-08-03 18:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-03 18:23 - 2014-08-03 18:23 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Probit Software

2014-08-03 18:23 - 2014-08-03 18:23 - 00000000 ____D () C:\ProgramData\TEMP

2014-08-03 18:17 - 2014-08-03 18:17 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dennis\Downloads\SpyHunter-installer.exe

2014-08-03 18:08 - 2014-08-03 18:08 - 00000000 ___HD () C:\TMRescueDisk

2014-08-03 18:04 - 2014-08-03 18:04 - 00000000 ____D () C:\Users\Dennis\AppData\Local\Trend Micro

2014-08-03 18:03 - 2014-08-03 18:03 - 00003274 _____ () C:\Windows\System32\Tasks\Titanium BTC

2014-08-03 18:03 - 2013-12-03 10:57 - 00283160 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmcomm.sys

2014-08-03 18:03 - 2013-12-03 10:57 - 00117312 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmactmon.sys

2014-08-03 18:03 - 2013-12-03 10:57 - 00085936 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmevtmgr.sys

2014-08-03 18:03 - 2013-07-01 15:08 - 00050976 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\TMEBC64.sys

2014-08-03 18:03 - 2013-06-13 08:35 - 00100640 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmeevw.sys

2014-08-03 18:03 - 2013-05-15 12:23 - 00303392 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmnciesc.sys

2014-08-03 18:03 - 2011-08-22 17:33 - 00105744 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmtdi.sys

2014-08-03 18:02 - 2014-08-03 18:02 - 00000059 _____ () C:\Windows\system32\SupportTool.exe.bat

2014-08-03 18:02 - 2014-08-03 18:02 - 00000000 ____D () C:\Program Files\Trend Micro

2014-08-03 18:01 - 2014-08-03 20:44 - 00000000 ____D () C:\ProgramData\Trend Micro

2014-08-03 17:57 - 2014-08-03 17:57 - 00000036 _____ () C:\Users\Dennis\AppData\Local\housecall.guid.cache

2014-08-03 17:56 - 2014-08-03 17:56 - 06631800 _____ (Trend Micro Inc.) C:\Users\Dennis\Downloads\Titanium_Internet_Security_2014.exe

2014-08-03 17:43 - 2014-08-03 21:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-03 17:43 - 2014-08-03 21:34 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-03 17:43 - 2014-08-03 21:29 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-08-03 17:43 - 2014-08-03 21:27 - 00000000 ____D () C:\Program Files (x86)\Easy Speed Check

2014-08-03 17:43 - 2014-08-03 17:48 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-08-03 17:43 - 2014-08-03 17:48 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-08-03 17:43 - 2014-08-03 17:44 - 00000000 ____D () C:\Users\Dennis\AppData\Local\Google

2014-08-03 17:43 - 2014-08-03 17:43 - 00057560 _____ () C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT

2014-08-03 17:43 - 2014-08-03 17:43 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Probit Software

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Google

2014-08-03 17:41 - 2014-08-03 19:34 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-03 17:41 - 2014-08-03 19:34 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Windows\SysWOW64\Macromed

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Windows\system32\Macromed

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Macromedia

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Adobe

2014-08-03 17:34 - 2014-08-03 17:34 - 00000000 ____D () C:\Users\Dennis\AppData\Local\NVIDIA

2014-08-03 17:34 - 2014-08-03 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-08-03 17:32 - 2014-08-03 17:32 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-08-03 17:31 - 2014-08-03 21:34 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-08-03 17:31 - 2014-08-03 17:32 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-08-03 17:31 - 2014-08-03 17:32 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-08-03 17:31 - 2014-07-02 22:48 - 00075040 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-08-03 17:31 - 2014-07-02 22:48 - 00061912 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 06783776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 03522392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 02559960 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 00935368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-08-03 17:31 - 2014-07-02 20:55 - 00386520 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-08-03 17:31 - 2014-07-02 20:55 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-08-03 17:31 - 2014-07-02 19:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-08-03 17:31 - 2014-07-02 12:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin

2014-08-03 17:30 - 2014-08-03 17:30 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-08-03 17:28 - 2009-11-25 12:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe

2014-08-03 17:28 - 2009-11-25 12:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe

2014-08-03 17:28 - 2009-11-25 12:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll

2014-08-03 17:28 - 2009-11-25 12:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll

2014-08-03 17:27 - 2014-07-02 23:29 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2014-08-03 17:27 - 2014-07-02 23:29 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2014-08-03 17:27 - 2014-07-02 23:29 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 14498552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-08-03 17:27 - 2014-07-02 22:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 03196816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 02814656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00965312 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-08-03 17:27 - 2014-07-02 22:48 - 00026353 _____ () C:\Windows\system32\nvinfo.pb

2014-08-03 17:27 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-08-03 17:27 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-08-03 17:27 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-08-03 17:25 - 2014-08-03 17:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-08-03 17:11 - 2014-08-03 18:43 - 00000000 ____D () C:\Windows\Panther

2014-08-03 17:10 - 2014-08-03 17:10 - 00008192 __RSH () C:\BOOTSECT.BAK

2014-08-03 17:10 - 2014-07-23 10:52 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-08-03 17:10 - 2009-07-14 03:38 - 00383562 __RSH () C:\bootmgr

2014-08-03 16:53 - 2012-02-15 08:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2014-08-03 16:53 - 2012-02-15 07:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll

2014-08-03 16:53 - 2012-02-15 06:47 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2014-08-03 16:53 - 2012-02-15 06:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2014-08-03 16:53 - 2010-01-09 09:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll

2014-08-03 16:53 - 2010-01-09 08:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll

2014-08-03 16:50 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-03 16:50 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-03 16:50 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-03 16:50 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-03 16:50 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-03 16:50 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-03 16:50 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-03 16:50 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-03 16:50 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-08-03 16:49 - 2013-10-28 10:44 - 00884952 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys

2014-08-03 16:49 - 2013-10-28 10:44 - 00108760 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll

2014-08-03 16:49 - 2013-10-28 10:44 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-08-03 16:43 - 2014-08-03 16:43 - 00159200 _____ () C:\Users\Dennis\AppData\Roaming\CrashRpt1402.dll

2014-08-03 16:43 - 2014-08-03 16:43 - 00000000 ____D () C:\Users\Dennis\AppData\Local\CrashRpt

2014-08-03 16:19 - 2014-08-03 16:20 - 00000000 ____D () C:\Users\Dennis

2014-08-03 16:19 - 2014-08-03 16:19 - 00000020 ___SH () C:\Users\Dennis\ntuser.ini

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Netzwerkumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Lokale Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Eigene Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Druckumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Favoriten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 __SHD () C:\Recovery

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 ____D () C:\Users\Dennis\AppData\Local\VirtualStore

2014-08-03 16:16 - 2014-08-03 21:37 - 00687438 _____ () C:\Windows\WindowsUpdate.log

2014-08-03 16:16 - 2014-08-03 16:16 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

2014-08-03 16:16 - 2014-08-03 16:16 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

2014-08-03 16:14 - 2014-08-03 16:14 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-03 21:54 - 2014-08-03 21:53 - 00010685 _____ () C:\Users\Dennis\Downloads\FRST.txt

2014-08-03 21:54 - 2014-08-03 20:45 - 00000000 ____D () C:\FRST

2014-08-03 21:53 - 2014-08-03 21:53 - 02094080 _____ (Farbar) C:\Users\Dennis\Downloads\FRST64.exe

2014-08-03 21:53 - 2014-08-03 17:43 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-03 21:52 - 2014-08-03 21:52 - 00001143 _____ () C:\Users\Dennis\Desktop\mbam.txt

2014-08-03 21:44 - 2014-08-03 18:39 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-03 21:43 - 2014-08-03 21:43 - 00000626 _____ () C:\Users\Dennis\Desktop\JRT.txt

2014-08-03 21:40 - 2014-08-03 19:04 - 00000000 ____D () C:\Users\Dennis\Desktop\Viren Power Scan Ordner =3

2014-08-03 21:40 - 2009-07-14 19:58 - 00696132 _____ () C:\Windows\system32\perfh007.dat

2014-08-03 21:40 - 2009-07-14 19:58 - 00147428 _____ () C:\Windows\system32\perfc007.dat

2014-08-03 21:40 - 2009-07-14 07:13 - 01611160 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-08-03 21:37 - 2014-08-03 16:16 - 00687438 _____ () C:\Windows\WindowsUpdate.log

2014-08-03 21:36 - 2014-08-03 21:36 - 00000000 ____D () C:\Windows\ERUNT

2014-08-03 21:35 - 2014-08-03 21:35 - 01016261 _____ (Thisisu) C:\Users\Dennis\Downloads\JRT.exe

2014-08-03 21:34 - 2014-08-03 21:34 - 00001222 _____ () C:\Users\Dennis\Desktop\AdwCleaner[S1].txt

2014-08-03 21:34 - 2014-08-03 21:29 - 00001346 _____ () C:\Windows\PFRO.log

2014-08-03 21:34 - 2014-08-03 21:29 - 00000112 _____ () C:\Windows\setupact.log

2014-08-03 21:34 - 2014-08-03 17:43 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-03 21:34 - 2014-08-03 17:31 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-08-03 21:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-03 21:33 - 2014-08-03 19:05 - 00000000 ____D () C:\AdwCleaner

2014-08-03 21:33 - 2009-07-14 06:45 - 00013600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-08-03 21:33 - 2009-07-14 06:45 - 00013600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-08-03 21:32 - 2014-08-03 21:32 - 00001160 _____ () C:\Users\Dennis\Desktop\AdwCleaner[R2].txt

2014-08-03 21:29 - 2014-08-03 21:29 - 00000000 _____ () C:\Windows\setuperr.log

2014-08-03 21:29 - 2014-08-03 17:43 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-08-03 21:28 - 2014-08-03 19:18 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\TS3Client

2014-08-03 21:28 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-08-03 21:27 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Easy Speed Check

2014-08-03 21:26 - 2014-08-03 18:23 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Probit Software

2014-08-03 20:47 - 2014-08-03 20:46 - 00020867 _____ () C:\Users\Dennis\Desktop\Addition.txt

2014-08-03 20:47 - 2014-08-03 20:45 - 00051894 _____ () C:\Users\Dennis\Desktop\FRST.txt

2014-08-03 20:45 - 2014-08-03 20:44 - 00231960 _____ () C:\Windows\RegBootClean64.exe

2014-08-03 20:44 - 2014-08-03 18:01 - 00000000 ____D () C:\ProgramData\Trend Micro

2014-08-03 19:44 - 2014-08-03 19:21 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-08-03 19:34 - 2014-08-03 17:41 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-03 19:34 - 2014-08-03 17:41 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-08-03 19:28 - 2014-08-03 19:28 - 00000222 _____ () C:\Users\Dennis\Desktop\Age of Empires II HD Edition.url

2014-08-03 19:21 - 2014-08-03 19:21 - 01141680 _____ () C:\Users\Dennis\Downloads\SteamSetup.exe

2014-08-03 19:21 - 2014-08-03 19:21 - 00000967 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-08-03 19:21 - 2014-08-03 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-08-03 19:19 - 2014-08-03 19:19 - 00000000 ____D () C:\temp

2014-08-03 19:18 - 2014-08-03 19:18 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2014-08-03 19:18 - 2014-08-03 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-08-03 19:18 - 2014-08-03 19:18 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client

2014-08-03 19:17 - 2014-08-03 19:17 - 29254784 _____ (TeamSpeak Systems GmbH) C:\Users\Dennis\Downloads\TeamSpeak3-Client-win64-3.0.15.1 (1).exe

2014-08-03 19:17 - 2014-08-03 19:16 - 29254784 _____ (TeamSpeak Systems GmbH) C:\Users\Dennis\Downloads\TeamSpeak3-Client-win64-3.0.15.1.exe

2014-08-03 19:04 - 2014-08-03 19:04 - 01361309 _____ () C:\Users\Dennis\Downloads\adwcleaner_3.302 (1).exe

2014-08-03 18:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2014-08-03 18:43 - 2014-08-03 17:11 - 00000000 ____D () C:\Windows\Panther

2014-08-03 18:42 - 2014-08-03 18:41 - 03738080 _____ (Piriform Ltd) C:\Users\Dennis\Downloads\ccsetup416_slim.exe

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-03 18:39 - 2014-08-03 18:39 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-03 18:38 - 2014-08-03 18:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-03 18:23 - 2014-08-03 18:23 - 00000000 ____D () C:\ProgramData\TEMP

2014-08-03 18:17 - 2014-08-03 18:17 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dennis\Downloads\SpyHunter-installer.exe

2014-08-03 18:08 - 2014-08-03 18:08 - 00000000 ___HD () C:\TMRescueDisk

2014-08-03 18:04 - 2014-08-03 18:04 - 00000000 ____D () C:\Users\Dennis\AppData\Local\Trend Micro

2014-08-03 18:03 - 2014-08-03 18:03 - 00003274 _____ () C:\Windows\System32\Tasks\Titanium BTC

2014-08-03 18:02 - 2014-08-03 18:02 - 00000059 _____ () C:\Windows\system32\SupportTool.exe.bat

2014-08-03 18:02 - 2014-08-03 18:02 - 00000000 ____D () C:\Program Files\Trend Micro

2014-08-03 17:57 - 2014-08-03 17:57 - 00000036 _____ () C:\Users\Dennis\AppData\Local\housecall.guid.cache

2014-08-03 17:56 - 2014-08-03 17:56 - 06631800 _____ (Trend Micro Inc.) C:\Users\Dennis\Downloads\Titanium_Internet_Security_2014.exe

2014-08-03 17:48 - 2014-08-03 17:43 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-08-03 17:48 - 2014-08-03 17:43 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-08-03 17:44 - 2014-08-03 17:43 - 00000000 ____D () C:\Users\Dennis\AppData\Local\Google

2014-08-03 17:43 - 2014-08-03 17:43 - 00057560 _____ () C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT

2014-08-03 17:43 - 2014-08-03 17:43 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Probit Software

2014-08-03 17:43 - 2014-08-03 17:43 - 00000000 ____D () C:\Program Files (x86)\Google

2014-08-03 17:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Windows\SysWOW64\Macromed

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Windows\system32\Macromed

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Macromedia

2014-08-03 17:41 - 2014-08-03 17:41 - 00000000 ____D () C:\Users\Dennis\AppData\Roaming\Adobe

2014-08-03 17:34 - 2014-08-03 17:34 - 00000000 ____D () C:\Users\Dennis\AppData\Local\NVIDIA

2014-08-03 17:34 - 2014-08-03 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-08-03 17:32 - 2014-08-03 17:32 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-08-03 17:32 - 2014-08-03 17:31 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-08-03 17:32 - 2014-08-03 17:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-08-03 17:32 - 2014-08-03 17:25 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-08-03 17:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help

2014-08-03 17:30 - 2014-08-03 17:30 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-08-03 17:10 - 2014-08-03 17:10 - 00008192 __RSH () C:\BOOTSECT.BAK

2014-08-03 17:10 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG

2014-08-03 17:10 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-08-03 16:48 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore

2014-08-03 16:43 - 2014-08-03 16:43 - 00159200 _____ () C:\Users\Dennis\AppData\Roaming\CrashRpt1402.dll

2014-08-03 16:43 - 2014-08-03 16:43 - 00000000 ____D () C:\Users\Dennis\AppData\Local\CrashRpt

2014-08-03 16:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-08-03 16:20 - 2014-08-03 16:19 - 00000000 ____D () C:\Users\Dennis

2014-08-03 16:19 - 2014-08-03 16:19 - 00000020 ___SH () C:\Users\Dennis\ntuser.ini

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Netzwerkumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Lokale Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Eigene Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Druckumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Dennis\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Favoriten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 __SHD () C:\Recovery

2014-08-03 16:19 - 2014-08-03 16:19 - 00000000 ____D () C:\Users\Dennis\AppData\Local\VirtualStore

2014-08-03 16:19 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-08-03 16:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT

2014-08-03 16:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-08-03 16:17 - 2009-07-14 06:45 - 00274464 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-03 16:16 - 2014-08-03 16:16 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

2014-08-03 16:16 - 2014-08-03 16:16 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

2014-08-03 16:16 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-08-03 16:16 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-08-03 16:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep

2014-08-03 16:14 - 2014-08-03 16:14 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

2014-07-23 10:52 - 2014-08-03 17:10 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 

Some content of TEMP:

====================

C:\Users\Dennis\AppData\Local\Temp\CrashRpt1402.dll

C:\Users\Dennis\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-08-03 16:11
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Lg Misterdead