Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Internet plötzlich langsam (https://www.trojaner-board.de/157443-internet-ploetzlich-langsam.html)

CplHicks 10.08.2014 17:12
Internet plötzlich langsam
 
Hallo zusammen,

vor ca. 2 Wochen ist mein Internet schlagartig total langsam geworden (downloadrate ist bei ca 150kb/s, vorher zwischen 2 und 5 MB/s, Youtube Videos dauern ewig bis sie geladen sind, Websites ebenso) Ich habe auf meinem System keine Änderungen vorgenommen, das Internet auf meiner Xbox One funktionert tadellos und mit gewohnt schneller Leistung. Mein Virenscan mit Avast hat nichts aufälliges ergeben.
Ich hoffe ihr könnt mir helfen :crazy:

Edit: Ich hatte zwei Addons für Firefox runtergeladen, einmal "Stealthy" und noch eines welches Tracking unterbindet, ich weiss den Namen leider nichtmehr, beide hab ich aber auch schon deinstalliert.

schrauber 10.08.2014 17:57
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


CplHicks 10.08.2014 18:28
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Thomas (administrator) on THOMAS-PC on 10-08-2014 19:17:56
Running from C:\Users\Thomas\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Windows Home Server\esClient.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Windows Home Server\Microsoft.HomeServer.Archive.TransferService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Home Server\WHSConnector.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Microsoft Corporation) C:\Program Files\Windows Home Server\WHSTrayApp.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7560296 2011-12-12] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-17] (InstallShield Software Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\S-1-5-21-4108216686-3975812735-2998002786-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-17] (InstallShield Software Corporation)
HKU\S-1-5-21-4108216686-3975812735-2998002786-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-16] (Valve Corporation)
AppInit_DLLs-x32:  => "" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Windows Home Server.lnk
ShortcutTarget: Windows Home Server.lnk -> C:\Windows\Installer\{21E49794-7C13-4E84-8659-55BD378267D5}\WHSTrayApp.exe (No File)
Startup: C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {1E60EDA7-49F1-43ba-B9EF-3C24DFB518C2} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
SearchScopes: HKCU - {1F0F9C57-7B67-414a-9E6C-B42FFE7375DF} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
BHO: avast! Online Security -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: BrowserHelper Class -> {9A065C65-4EE7-4DDD-9918-F129089A894A} -> C:\Program Files\Windows Home Server\WHSDeskBands.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Home Server Banner - {D73E76A3-F902-45BD-8FC8-95AE8E014671} - C:\Program Files\Windows Home Server\WHSDeskBands.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\fzzjmys1.default
FF NetworkProxy: "ftp", "proxyus1.stealthy.co"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "proxyus1.stealthy.co"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "proxyus1.stealthy.co"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "proxyus1.stealthy.co"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Thomas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-14]

Chrome:
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 arXfrSvc; C:\Program Files\Windows Home Server\Microsoft.HomeServer.Archive.TransferService.exe [231280 2011-01-10] (Microsoft Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-12] () [File not signed]
R2 esClient; C:\Program Files\Windows Home Server\esClient.exe [109936 2011-01-10] (Microsoft Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) [File not signed]
R2 WHSConnector; C:\Program Files\Windows Home Server\WHSConnector.exe [489840 2011-01-10] (Microsoft Corporation)
S2 DES2 Service; "C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-31] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-10 19:17 - 2014-08-10 19:18 - 00017009 _____ () C:\Users\Thomas\Downloads\FRST.txt
2014-08-10 19:17 - 2014-08-10 19:17 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-08-10 19:17 - 2014-08-10 19:17 - 00000000 ____D () C:\FRST
2014-08-10 16:01 - 2014-08-10 16:01 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-10 16:01 - 2014-08-10 16:01 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-08-10 15:59 - 2014-08-10 15:59 - 204802239 _____ () C:\Windows\MEMORY.DMP
2014-08-10 15:59 - 2014-08-10 15:59 - 00000000 ____D () C:\Windows\Minidump
2014-08-09 15:15 - 2014-08-09 15:15 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Octodad Dadliest Catch
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieUserList
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieSiteList
2014-08-08 20:50 - 2014-08-08 20:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-08 18:45 - 2014-08-08 18:45 - 00001299 _____ () C:\DelFix.txt
2014-08-08 18:44 - 2014-08-08 18:44 - 00709564 _____ () C:\Users\Thomas\Downloads\delfix_10.8.exe
2014-08-08 16:44 - 2014-08-10 16:44 - 00000000 ____D () C:\Windows\ERUNT
2014-08-08 16:40 - 2014-08-10 16:00 - 00000504 _____ () C:\Windows\setupact.log
2014-08-08 16:40 - 2014-08-08 16:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-08 16:39 - 2014-08-08 16:39 - 00000310 _____ () C:\Windows\PFRO.log
2014-08-08 16:34 - 2014-08-08 16:34 - 00134960 _____ (Software Installer ) C:\Users\Thomas\Downloads\Setup(1).exe
2014-08-08 16:32 - 2014-08-08 16:32 - 00161792 _____ (Software Installer ) C:\Users\Thomas\AppData\Roaming\setup.exe
2014-08-08 16:32 - 2014-08-08 16:32 - 00134960 _____ (Software Installer ) C:\Users\Thomas\Downloads\Setup.exe
2014-08-08 16:08 - 2014-08-10 16:05 - 00041065 _____ () C:\Windows\WindowsUpdate.log
2014-08-08 15:40 - 2014-08-10 16:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-08 15:40 - 2014-08-10 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-08 15:40 - 2014-08-10 16:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-08 15:40 - 2014-08-08 15:40 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-08 15:40 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-08 15:40 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-08 15:40 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-08 15:38 - 2014-08-08 15:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager [1].exe
2014-08-08 15:36 - 2014-08-08 15:36 - 00787392 _____ ( ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager.exe
2014-08-07 19:52 - 2014-08-07 19:52 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-07 19:52 - 2014-08-07 19:52 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-07 19:44 - 2014-08-07 19:50 - 32047680 _____ () C:\Users\Thomas\Downloads\Firefox_Setup_de31.0.exe
2014-08-07 09:55 - 2014-08-07 10:00 - 00004238 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-08-06 23:51 - 2014-08-10 16:02 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-06 23:44 - 2014-08-06 23:47 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-31 18:34 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-31 18:34 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-07-31 18:34 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-07-31 18:34 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-31 18:34 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-31 18:34 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-07-31 18:34 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-07-31 18:34 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-31 18:34 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-07-29 23:50 - 2014-08-10 16:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-28 13:08 - 2014-08-10 16:43 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Gods_Will_Be_Watching
2014-07-18 16:09 - 2014-07-18 16:09 - 00002869 _____ () C:\Users\Thomas\Desktop\Mein Film22.wlmp
2014-07-18 16:06 - 2014-05-04 01:26 - 37842427 ____N () C:\Users\Thomas\Desktop\IMG_3675.MOV
2014-07-16 01:42 - 2014-08-10 16:04 - 00000000 ____D () C:\Users\Thomas\Documents\Larian Studios

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-10 19:18 - 2014-08-10 19:17 - 00017009 _____ () C:\Users\Thomas\Downloads\FRST.txt
2014-08-10 19:17 - 2014-08-10 19:17 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-08-10 19:17 - 2014-08-10 19:17 - 00000000 ____D () C:\FRST
2014-08-10 18:25 - 2013-05-14 22:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-10 16:57 - 2014-08-08 15:40 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-10 16:54 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-08-10 16:47 - 2014-08-08 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-10 16:47 - 2014-02-08 21:02 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-10 16:47 - 2013-07-31 18:19 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2014-08-10 16:47 - 2012-03-03 17:57 - 00000000 ____D () C:\Users\Thomas\Downloads\Sonstige Bilder
2014-08-10 16:47 - 2011-10-07 14:47 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-10 16:47 - 2011-05-29 09:44 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-08-10 16:46 - 2014-05-06 23:45 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-10 16:46 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\ShellNew
2014-08-10 16:46 - 2010-11-21 09:00 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-10 16:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-08-10 16:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\L2Schemas
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-08-10 16:44 - 2014-08-08 16:44 - 00000000 ____D () C:\Windows\ERUNT
2014-08-10 16:44 - 2013-05-14 22:08 - 00000000 ____D () C:\Windows\system32\Macromed
2014-08-10 16:44 - 2013-05-14 22:05 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-08-10 16:44 - 2013-05-14 22:00 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-08-10 16:44 - 2012-05-01 12:55 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-08-10 16:44 - 2011-10-07 14:59 - 00000000 ____D () C:\Windows\de
2014-08-10 16:44 - 2011-03-18 14:53 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-08-10 16:44 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-08-10 16:43 - 2014-08-08 15:40 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-10 16:43 - 2014-07-29 23:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-10 16:43 - 2014-07-28 13:08 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Gods_Will_Be_Watching
2014-08-10 16:43 - 2014-06-18 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-10 16:43 - 2014-06-18 09:05 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NCSOFT
2014-08-10 16:43 - 2014-06-18 09:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
2014-08-10 16:43 - 2014-05-30 12:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-10 16:43 - 2014-05-30 12:18 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-10 16:43 - 2014-03-12 15:55 - 00000000 ____D () C:\ProgramData\Caphyon
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Radiant Entertainment
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stonehearth
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\Program Files (x86)\Stonehearth
2014-08-10 16:43 - 2014-03-12 13:17 - 00000000 ____D () C:\Users\Thomas\Downloads\FGCreator
2014-08-10 16:43 - 2014-02-12 20:39 - 00000000 ____D () C:\Users\Thomas\AppData\Local\GOG.com
2014-08-10 16:43 - 2014-02-12 20:39 - 00000000 ____D () C:\Program Files (x86)\GOG.com
2014-08-10 16:43 - 2014-02-08 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-10 16:43 - 2014-01-13 22:57 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Battle.net
2014-08-10 16:43 - 2014-01-12 21:32 - 00000000 ____D () C:\Users\Thomas\Documents\DayZ
2014-08-10 16:43 - 2014-01-12 21:32 - 00000000 ____D () C:\Users\Thomas\AppData\Local\DayZ
2014-08-10 16:43 - 2013-11-13 09:36 - 00000000 ____D () C:\Users\Thomas\Zomboid
2014-08-10 16:43 - 2013-10-30 16:57 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-08-10 16:43 - 2013-07-31 18:19 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.EU
2014-08-10 16:43 - 2013-07-31 18:19 - 00000000 ____D () C:\Users\Thomas\AppData\Local\PokerStars.EU
2014-08-10 16:43 - 2013-06-26 14:51 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-10 16:43 - 2013-05-30 20:49 - 00000000 ____D () C:\Users\Thomas\AppData\Local\SWTORPerf
2014-08-10 16:43 - 2013-05-17 20:24 - 00000000 ____D () C:\Users\Thomas\Documents\StarCraft II
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files\iTunes
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files\iPod
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-08-10 16:43 - 2013-05-14 22:10 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-10 16:43 - 2013-05-14 22:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-10 16:43 - 2013-05-14 22:00 - 00000000 ____D () C:\Program Files\Realtek
2014-08-10 16:43 - 2013-05-14 21:53 - 00000000 ____D () C:\Windows\Chipset
2014-08-10 16:43 - 2013-05-14 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 16:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 16:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
2014-08-10 16:43 - 2012-08-17 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-08-10 16:43 - 2012-08-06 08:58 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-08-10 16:43 - 2012-06-16 21:38 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Downloaded Installations
2014-08-10 16:43 - 2012-06-16 21:37 - 00000000 ____D () C:\Users\Thomas\AppData\Local\ArmA 2 OA
2014-08-10 16:43 - 2012-06-16 21:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-08-10 16:43 - 2012-05-12 08:18 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-08-10 16:43 - 2012-05-01 12:55 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-08-10 16:43 - 2012-05-01 12:55 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\ProgramData\Apple
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files\Bonjour
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-08-10 16:43 - 2012-03-03 17:59 - 00000000 ____D () C:\Users\Thomas\Downloads\Programme
2014-08-10 16:43 - 2012-02-28 11:01 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Unity
2014-08-10 16:43 - 2011-10-07 14:47 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-08-10 16:43 - 2011-10-07 14:45 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-10 16:43 - 2011-09-13 09:02 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\.minecraft
2014-08-10 16:43 - 2011-09-08 23:09 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-08-10 16:43 - 2011-08-25 22:48 - 00000000 ____D () C:\Users\Thomas\AppData\Local\DoFUpdater
2014-08-10 16:43 - 2011-08-18 21:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Skype
2014-08-10 16:43 - 2011-08-18 21:57 - 00000000 ____D () C:\ProgramData\Skype
2014-08-10 16:43 - 2011-05-20 15:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2014-08-10 16:43 - 2011-04-22 11:57 - 00000000 ____D () C:\Users\Thomas\Documents\DVDVideoSoft
2014-08-10 16:43 - 2011-04-16 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-08-10 16:43 - 2011-04-16 13:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Microsoft Help
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-10 16:43 - 2011-03-18 16:57 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-08-10 16:43 - 2011-03-18 16:55 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-10 16:43 - 2011-03-18 14:30 - 00000000 ____D () C:\ProgramData\InstallShield
2014-08-10 16:43 - 2011-03-18 14:28 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-10 16:43 - 2011-03-18 14:28 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-08-10 16:43 - 2011-03-18 14:03 - 00000000 ____D () C:\Users\Thomas\AppData\Local\VirtualStore
2014-08-10 16:43 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-10 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-08-10 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-08-10 16:42 - 2011-03-19 10:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Splashtop
2014-08-10 16:42 - 2011-03-19 10:18 - 00000000 ____D () C:\ProgramData\Splashtop
2014-08-10 16:42 - 2011-03-18 14:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-08-10 16:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-08-10 16:12 - 2013-05-15 10:18 - 00000000 ____D () C:\Windows\erdnt
2014-08-10 16:05 - 2014-08-08 16:08 - 00041065 _____ () C:\Windows\WindowsUpdate.log
2014-08-10 16:04 - 2014-07-16 01:42 - 00000000 ____D () C:\Users\Thomas\Documents\Larian Studios
2014-08-10 16:04 - 2014-06-18 09:05 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\NCSOFT
2014-08-10 16:04 - 2014-06-05 16:45 - 00000000 ____D () C:\Users\Thomas\Documents\Fax
2014-08-10 16:04 - 2014-02-11 13:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Artweaver Free
2014-08-10 16:04 - 2014-01-02 17:18 - 00000000 ____D () C:\Users\Thomas\Documents\BioWare
2014-08-10 16:04 - 2013-08-17 21:34 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\thriXXX
2014-08-10 16:04 - 2013-07-25 16:38 - 00000000 ____D () C:\Users\Thomas\Downloads\Age of Empires II(2)
2014-08-10 16:04 - 2013-05-25 19:42 - 00000000 ____D () C:\Users\Thomas\Documents\Klei
2014-08-10 16:04 - 2012-10-27 15:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Zeal Game Studio
2014-08-10 16:04 - 2012-08-06 09:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DAEMON Tools Lite
2014-08-10 16:04 - 2011-05-17 10:19 - 00000000 ____D () C:\Users\Thomas\Documents\My Games
2014-08-10 16:04 - 2011-04-27 03:02 - 00000000 ____D () C:\Users\Thomas\Documents\ICQ
2014-08-10 16:04 - 2011-03-18 14:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Macromedia
2014-08-10 16:04 - 2011-03-18 14:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Adobe
2014-08-10 16:04 - 2011-03-18 14:50 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Mozilla
2014-08-10 16:03 - 2014-06-18 20:20 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA
2014-08-10 16:03 - 2014-01-06 18:58 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Geckofx
2014-08-10 16:03 - 2013-09-26 20:16 - 00000000 ____D () C:\Users\hedev
2014-08-10 16:03 - 2013-08-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-10 16:03 - 2013-05-14 22:11 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-08-10 16:03 - 2013-05-14 22:11 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-08-10 16:03 - 2012-08-06 09:19 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Eushully
2014-08-10 16:03 - 2012-07-30 23:49 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Facebook
2014-08-10 16:03 - 2011-05-14 12:06 - 00000000 ____D () C:\ProgramData\Nero
2014-08-10 16:03 - 2011-03-27 19:55 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Microsoft Games
2014-08-10 16:03 - 2011-03-18 14:50 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Mozilla
2014-08-10 16:03 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-08-10 16:02 - 2014-08-06 23:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-10 16:02 - 2014-03-15 19:10 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-08-10 16:02 - 2014-01-14 00:07 - 00000000 ____D () C:\ProgramData\HappyCloud
2014-08-10 16:02 - 2012-05-16 19:46 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-10 16:02 - 2012-04-21 07:52 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-10 16:02 - 2011-07-04 15:00 - 00000000 ____D () C:\ProgramData\Adobe
2014-08-10 16:02 - 2011-03-24 18:35 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-10 16:01 - 2014-08-10 16:01 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-10 16:01 - 2014-08-10 16:01 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-08-10 16:01 - 2011-03-25 20:41 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-10 16:01 - 2011-03-24 18:36 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-08-10 16:00 - 2014-08-08 16:40 - 00000504 _____ () C:\Windows\setupact.log
2014-08-10 16:00 - 2011-04-16 13:06 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-10 16:00 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-10 15:59 - 2014-08-10 15:59 - 204802239 _____ () C:\Windows\MEMORY.DMP
2014-08-10 15:59 - 2014-08-10 15:59 - 00000000 ____D () C:\Windows\Minidump
2014-08-10 15:59 - 2011-10-14 18:19 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-08-10 15:59 - 2011-03-24 18:35 - 00000000 ____D () C:\Program Files\AVAST Software
2014-08-10 15:59 - 2011-03-18 16:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-10 15:59 - 2011-03-18 14:03 - 00000000 ____D () C:\Users\Thomas
2014-08-10 15:57 - 2014-06-18 09:05 - 00000000 ____D () C:\Program Files (x86)\NCSOFT
2014-08-10 15:57 - 2011-10-07 14:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-08-10 15:57 - 2011-05-17 10:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-08-10 15:57 - 2011-03-18 14:30 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-08-10 15:57 - 2011-03-18 14:28 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-08-10 15:55 - 2013-05-14 22:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-08-10 15:55 - 2011-05-20 15:39 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2014-08-10 15:55 - 2011-04-16 13:05 - 00000000 ___RD () C:\MSOCache
2014-08-10 15:09 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-10 15:09 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-09 15:15 - 2014-08-09 15:15 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Octodad Dadliest Catch
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieUserList
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieSiteList
2014-08-08 20:51 - 2014-08-08 20:50 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-08 20:51 - 2012-08-05 19:10 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Google
2014-08-08 18:45 - 2014-08-08 18:45 - 00001299 _____ () C:\DelFix.txt
2014-08-08 18:44 - 2014-08-08 18:44 - 00709564 _____ () C:\Users\Thomas\Downloads\delfix_10.8.exe
2014-08-08 16:40 - 2014-08-08 16:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-08 16:39 - 2014-08-08 16:39 - 00000310 _____ () C:\Windows\PFRO.log
2014-08-08 16:39 - 2011-03-25 20:12 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-08 16:34 - 2014-08-08 16:34 - 00134960 _____ (Software Installer ) C:\Users\Thomas\Downloads\Setup(1).exe
2014-08-08 16:32 - 2014-08-08 16:32 - 00161792 _____ (Software Installer ) C:\Users\Thomas\AppData\Roaming\setup.exe
2014-08-08 16:32 - 2014-08-08 16:32 - 00134960 _____ (Software Installer ) C:\Users\Thomas\Downloads\Setup.exe
2014-08-08 15:40 - 2014-08-08 15:40 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-08 15:38 - 2014-08-08 15:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager [1].exe
2014-08-08 15:36 - 2014-08-08 15:36 - 00787392 _____ ( ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager.exe
2014-08-07 19:52 - 2014-08-07 19:52 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-07 19:52 - 2014-08-07 19:52 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-07 19:50 - 2014-08-07 19:44 - 32047680 _____ () C:\Users\Thomas\Downloads\Firefox_Setup_de31.0.exe
2014-08-07 19:39 - 2014-05-23 11:45 - 00009315 _____ () C:\Users\Thomas\Desktop\Stunden Kiosk.xlsx
2014-08-07 19:34 - 2011-03-18 15:02 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-08-07 10:00 - 2014-08-07 09:55 - 00004238 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-08-06 23:48 - 2014-02-12 20:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-08-06 23:48 - 2014-02-12 20:41 - 00000000 ____D () C:\GOG Games
2014-08-06 23:47 - 2014-08-06 23:44 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-06 23:47 - 2011-03-18 14:36 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-07-30 15:40 - 2014-01-13 22:57 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Battle.net
2014-07-18 16:09 - 2014-07-18 16:09 - 00002869 _____ () C:\Users\Thomas\Desktop\Mein Film22.wlmp

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\BRSVC_1952446_hlp.exe
C:\Users\Thomas\AppData\Local\Temp\ERUNT.exe
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-07 10:58

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-08-2014 01
Ran by Thomas at 2014-08-10 19:18:27
Running from C:\Users\Thomas\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1860 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.7.0.1860 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio Elements 10.0.9 (HKLM-x32\...\Ashampoo Burning Studio Elements_is1) (Version: 3.1.1 - Ashampoo GmbH & Co. KG)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 8.0.1489.0 - AVAST Software)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version:  - AVM Berlin)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Divinity: Original Sin (HKLM-x32\...\Steam App 230230) (Version:  - Larian Studios)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - )
EVEREST Ultimate Edition v4.60 (HKLM-x32\...\EVEREST Ultimate Edition_is1) (Version: 4.60 - Lavalys, Inc.)
Free YouTube to MP3 Converter version 3.12.37.528 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.37.528 - DVDVideoSoft Ltd.)
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.0.0.0 - Futuremark Corporation)
Gods Will Be Watching (HKLM-x32\...\Steam App 274290) (Version:  - Deconstructeam)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.1.209 - Intel Corporation)
iTunes (HKLM\...\{7FCDABCC-1A1E-4D61-909D-BA9495172774}) (Version: 11.0.3.42 - Apple Inc.)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
NVIDIA 3D Vision Controller-Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
Octodad: Dadliest Catch (HKLM-x32\...\Steam App 224480) (Version:  - Young Horses)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version:  - The Indie Stone)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6526 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
Smart 6 B10.1023.1 (HKLM-x32\...\{3B35725F-C623-4A1E-B5CC-99C0868679E3}) (Version: 1.00.0000 - GIGABYTE)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Stonehearth (HKLM-x32\...\{E651F539-2C1E-41BF-BD4C-4B531D72FEF4}) (Version: 0.1.0.52 - Radiant Entertainment)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Total War: ROME II (HKLM-x32\...\Steam App 214950) (Version:  - Creative Assembly)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
WildStar (HKLM-x32\...\WildStar) (Version:  - NCSOFT)
Windows Home Server-Connector (HKLM\...\{21E49794-7C13-4E84-8659-55BD378267D5}) (Version: 6.0.3436.0 - Microsoft Corporation)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 4.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)
神採りアルケミーマイスター (HKLM-x32\...\InstallShield_{41810510-3CE0-425B-BE07-B9793731737F}) (Version: 2.00.0019 - Eushully)
神採りアルケミーマイスター (x32 Version: 1.00.0006 - Eushully) Hidden
神採りアルケミーマイスター Append01 (HKLM-x32\...\InstallShield_{EFE563B0-DDDB-45AF-B49A-C109C93E5F35}) (Version: 1.00.0004 - Eushully)
神採りアルケミーマイスター Append01 (x32 Version: 1.00.0004 - Eushully) Hidden
神採りアルケミーマイスター Append02 (HKLM-x32\...\InstallShield_{19B5CAAF-3E36-40F4-83F2-45E0D258000C}) (Version: 1.00.0003 - Eushully)
神採りアルケミーマイスター Append02 (x32 Version: 1.00.0003 - Eushully) Hidden
神採りアルケミーマイスター Ver2.00 Update (HKLM-x32\...\InstallShield_{C7B5C8A0-CE3F-4645-A0B6-B5515794076D}) (Version: 2.00.0019 - Eushully)
神採りアルケミーマイスター Ver2.00 Update (x32 Version: 2.00.0019 - Eushully) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

08-08-2014 16:45:20 Ende der Bereinigung
10-08-2014 11:29:33 Wiederherstellungsvorgang
10-08-2014 17:00:13 Windows-Sicherung

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2013-05-15 10:28 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05735E87-5D8C-4A28-B0B5-F4F65164F951} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {5879EEB5-6DCC-431A-9476-E7B414026D56} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {66D93087-4B83-418A-A3AA-BF5B8AFF98A5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {81DD6047-4D34-43C1-8009-DFDE2A7F6BFE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {CD752F17-6331-434D-BDAC-73AF2A956472} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-05-14 15:17 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-03-18 16:48 - 2011-03-02 13:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2011-03-18 14:34 - 2011-03-18 14:34 - 00008704 _____ () C:\Windows\assembly\GAC_64\GBHO\1.0.0.0__709f1911357dc329\GBHO.dll
2013-05-14 15:28 - 2013-05-09 10:58 - 00240448 ____N () C:\Program Files\AVAST Software\Avast\Setup\SetIFace.dll
2014-08-10 16:03 - 2014-08-10 10:55 - 02823168 _____ () C:\Program Files\AVAST Software\Avast\defs\14081000\algo.dll
2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-22 20:27 - 2014-07-12 02:53 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-23 10:29 - 2014-07-12 02:53 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-22 20:27 - 2014-07-12 02:53 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-01-08 11:35 - 2014-07-12 02:53 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2013-04-23 18:30 - 2014-06-27 00:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-22 20:27 - 2014-07-16 04:28 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-22 20:27 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2011-07-14 15:52 - 2014-07-16 04:28 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-12-04 19:57 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-08-07 19:52 - 2014-07-17 07:42 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-07-09 11:25 - 2014-07-09 11:25 - 17029808 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/10/2014 07:01:30 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Die Sicherung war nicht erfolgreich. Fehler: "Auf diesem Laufwerk ist nicht genügend Speicherplatz zum Speichern der Sicherung verfügbar. Löschen Sie ältere Sicherungen und nicht benötigte Daten, um Speicherplatz freizugeben, oder ändern Sie die Sicherungseinstellungen. (0x81000005)"

Error: (08/10/2014 04:01:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding  19 0.9.7.6.F.2.5.4.A.5.B.C.F.2.D.6.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR Thomas-PC-2.local.

Error: (08/10/2014 04:01:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.12:5353  17 0.9.7.6.F.2.5.4.A.5.B.C.F.2.D.6.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR Thomas-PC.local.

Error: (08/10/2014 04:01:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding  19 12.0.168.192.in-addr.arpa. PTR Thomas-PC-2.local.

Error: (08/10/2014 04:01:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.12:5353  17 12.0.168.192.in-addr.arpa. PTR Thomas-PC.local.

Error: (08/10/2014 04:01:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname Thomas-PC.local already in use; will try Thomas-PC-2.local instead

Error: (08/10/2014 04:01:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister  16 Thomas-PC.local. AAAA FE80:0000:0000:0000:6D2F:CB5A:452F:6790

Error: (08/10/2014 04:01:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.12:5353  16 Thomas-PC.local. AAAA 2A02:8071:0A91:C300:021A:4FFF:FE9D:D556

Error: (08/10/2014 04:01:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Ignoring response received before we even began probing:    4 Thomas-PC.local. Addr 192.168.0.12

Error: (08/10/2014 04:01:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ResolveSimultaneousProbe: 000000000160A460 Our Record 4 won:  887E2D3E  16 Thomas-PC.local. AAAA FE80:0000:0000:0000:6D2F:CB5A:452F:6790


System errors:
=============
Error: (08/10/2014 04:02:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (08/10/2014 04:02:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (08/10/2014 04:01:57 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (08/10/2014 04:00:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DES2 Service for Energy Saving." wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (08/10/2014 03:59:28 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000006b (0x0000000000000000, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000)C:\Windows\MEMORY.DMP

Error: (08/10/2014 03:59:28 PM) (Source: BugCheck) (EventID: 1005) (User: )
Description:

Error: (08/10/2014 01:26:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (08/10/2014 01:26:14 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst MBAMService erreicht.

Error: (08/10/2014 01:25:17 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (08/10/2014 01:24:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DES2 Service for Energy Saving." wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-05-15 10:27:56.507
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-05-15 10:27:56.461
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 24%
Total physical RAM: 8142.09 MB
Available physical RAM: 6123.97 MB
Total Pagefile: 16282.37 MB
Available Pagefile: 13878.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:249.26 GB) (Free:91.66 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Sicherung) (Fixed) (Total:48.83 GB) (Free:0.01 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 2EEB02B9)
Partition 1: (Active) - (Size=249 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 10.08.2014 19:37
hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

CplHicks 10.08.2014 19:55
Code:
ComboFix 14-08-06.02 - Thomas 10.08.2014  20:46:30.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.8142.6088 [GMT 2:00]
ausgeführt von:: c:\users\Thomas\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Thomas\AppData\Roaming\Setup.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-07-10 bis 2014-08-10  ))))))))))))))))))))))))))))))
.
.
2014-08-10 17:17 . 2014-08-10 17:18        --------        d-----w-        C:\FRST
2014-08-10 14:19 . 2014-08-10 14:19        75888        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{76268117-BADA-4D54-8D6E-2892935DB426}\offreg.dll
2014-08-09 13:15 . 2014-08-09 13:15        --------        d-----w-        c:\users\Thomas\AppData\Local\Octodad Dadliest Catch
2014-08-08 18:51 . 2014-08-08 18:51        --------        d-sh--w-        c:\users\Thomas\AppData\Local\EmieUserList
2014-08-08 18:51 . 2014-08-08 18:51        --------        d-sh--w-        c:\users\Thomas\AppData\Local\EmieSiteList
2014-08-08 18:50 . 2014-08-08 18:51        --------        d-----w-        c:\program files (x86)\Google
2014-08-08 14:44 . 2014-08-10 14:44        --------        d-----w-        c:\windows\ERUNT
2014-08-08 13:40 . 2014-08-10 14:57        122584        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-08 13:40 . 2014-05-12 05:26        63704        ----a-w-        c:\windows\system32\drivers\mwac.sys
2014-08-08 13:40 . 2014-05-12 05:26        91352        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys
2014-08-08 13:40 . 2014-05-12 05:25        25816        ----a-w-        c:\windows\system32\drivers\mbam.sys
2014-08-08 13:40 . 2014-08-10 14:43        --------        d-----w-        c:\program files (x86)\Malwarebytes Anti-Malware
2014-08-08 13:29 . 2014-07-02 03:09        10924376        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{76268117-BADA-4D54-8D6E-2892935DB426}\mpengine.dll
2014-08-06 21:51 . 2014-08-10 14:02        --------        d-----w-        c:\programdata\Malwarebytes
2014-07-28 11:08 . 2014-08-10 14:43        --------        d-----w-        c:\users\Thomas\AppData\Local\Gods_Will_Be_Watching
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-06 21:47 . 2011-03-18 12:36        25640        ----a-w-        c:\windows\gdrv.sys
2014-07-09 23:00 . 2011-03-25 17:15        96441528        ----a-w-        c:\windows\system32\MRT.exe
2014-07-09 09:25 . 2013-05-14 20:08        699056        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-09 09:25 . 2011-08-02 08:00        71344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-06-20 20:14 . 2014-07-09 08:44        266424        ----a-w-        c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 08:44        23464448        ----a-w-        c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 08:44        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 08:44        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 08:44        2768384        ----a-w-        c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 08:44        548352        ----a-w-        c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 08:44        66048        ----a-w-        c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 08:44        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 08:44        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 08:44        51200        ----a-w-        c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 08:44        33792        ----a-w-        c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 08:44        598016        ----a-w-        c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 08:44        139264        ----a-w-        c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 08:44        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 08:44        752640        ----a-w-        c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 08:44        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 08:44        452608        ----a-w-        c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 08:44        38400        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 08:44        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 08:44        195584        ----a-w-        c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 08:44        5721088        ----a-w-        c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 08:44        85504        ----a-w-        c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 08:44        292864        ----a-w-        c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 08:44        608768        ----a-w-        c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 08:44        455168        ----a-w-        c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 08:44        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 08:44        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 08:44        62464        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 08:44        631808        ----a-w-        c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 08:44        1249280        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 08:44        2040832        ----a-w-        c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 08:44        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 08:44        592896        ----a-w-        c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 08:44        32256        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 08:44        2266112        ----a-w-        c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 08:44        4254720        ----a-w-        c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 08:44        13527040        ----a-w-        c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 08:44        1068032        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 08:44        1964544        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 08:44        1393664        ----a-w-        c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 08:44        846336        ----a-w-        c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 08:44        1791488        ----a-w-        c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 08:44        692736        ----a-w-        c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 08:44        646144        ----a-w-        c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 08:44        3157504        ----a-w-        c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 08:44        624128        ----a-w-        c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 08:44        509440        ----a-w-        c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 08:44        1460736        ----a-w-        c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 08:43        22016        ----a-w-        c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 08:43        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 08:44        210944        ----a-w-        c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 08:44        86528        ----a-w-        c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 08:44        340992        ----a-w-        c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 08:44        314880        ----a-w-        c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 08:44        307200        ----a-w-        c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 08:44        728064        ----a-w-        c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 08:44        22016        ----a-w-        c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 08:44        172032        ----a-w-        c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 08:44        65536        ----a-w-        c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 08:44        247808        ----a-w-        c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 08:44        220160        ----a-w-        c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 08:44        259584        ----a-w-        c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 08:44        550912        ----a-w-        c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 08:44        17408        ----a-w-        c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 08:44        497152        ----a-w-        c:\windows\system32\drivers\afd.sys
2014-05-20 02:44 . 2014-06-18 18:15        9697640        ----a-w-        c:\windows\SysWow64\nvopencl.dll
2014-05-20 02:44 . 2014-06-18 18:15        895776        ----a-w-        c:\windows\system32\NvIFR64.dll
2014-05-20 02:44 . 2014-06-18 18:15        867784        ----a-w-        c:\windows\SysWow64\NvIFR.dll
2014-05-20 02:44 . 2014-06-18 18:15        31387936        ----a-w-        c:\windows\system32\nvoglv64.dll
2014-05-20 02:44 . 2014-06-18 18:15        24025376        ----a-w-        c:\windows\SysWow64\nvoglv32.dll
2014-05-20 02:44 . 2014-06-18 18:15        12688328        ----a-w-        c:\windows\system32\drivers\nvlddmkm.sys
2014-05-20 02:44 . 2014-06-18 18:15        11599072        ----a-w-        c:\windows\system32\nvopencl.dll
2014-05-20 02:44 . 2014-06-18 18:15        9735256        ----a-w-        c:\windows\SysWow64\nvcuda.dll
2014-05-20 02:44 . 2014-06-18 18:15        892704        ----a-w-        c:\windows\system32\NvFBC64.dll
2014-05-20 02:44 . 2014-06-18 18:15        861128        ----a-w-        c:\windows\SysWow64\NvFBC.dll
2014-05-20 02:44 . 2014-06-18 18:15        3141976        ----a-w-        c:\windows\system32\nvcuvid.dll
2014-05-20 02:44 . 2014-06-18 18:15        2953672        ----a-w-        c:\windows\SysWow64\nvcuvid.dll
2014-05-20 02:44 . 2014-06-18 18:15        2785568        ----a-w-        c:\windows\system32\nvcuvenc.dll
2014-05-20 02:44 . 2014-06-18 18:15        25256224        ----a-w-        c:\windows\system32\nvcompiler.dll
2014-05-20 02:44 . 2014-06-18 18:15        2412376        ----a-w-        c:\windows\SysWow64\nvcuvenc.dll
2014-05-20 02:44 . 2014-06-18 18:15        1889112        ----a-w-        c:\windows\system32\nvdispco6433788.dll
2014-05-20 02:44 . 2014-06-18 18:15        17561544        ----a-w-        c:\windows\SysWow64\nvcompiler.dll
2014-05-20 02:44 . 2014-06-18 18:15        17480432        ----a-w-        c:\windows\system32\nvd3dumx.dll
2014-05-20 02:44 . 2014-06-18 18:15        1541576        ----a-w-        c:\windows\system32\nvdispgenco6433788.dll
2014-05-20 02:44 . 2014-06-18 18:15        14434704        ----a-w-        c:\windows\SysWow64\nvd3dum.dll
2014-05-20 02:44 . 2014-06-18 18:15        11644928        ----a-w-        c:\windows\system32\nvcuda.dll
2014-05-20 02:44 . 2013-09-12 07:34        16003912        ----a-w-        c:\windows\SysWow64\nvwgf2um.dll
2014-05-20 02:44 . 2013-09-12 07:34        2730208        ----a-w-        c:\windows\SysWow64\nvapi.dll
2014-05-20 02:44 . 2011-03-18 14:55        3109248        ----a-w-        c:\windows\system32\nvapi64.dll
2014-05-20 02:44 . 2009-07-13 21:59        18531568        ----a-w-        c:\windows\system32\nvwgf2umx.dll
2014-05-20 01:25 . 2011-01-07 18:50        6769096        ----a-w-        c:\windows\system32\nvcpl.dll
2014-05-20 01:25 . 2011-01-07 18:49        3514144        ----a-w-        c:\windows\system32\nvsvc64.dll
2014-05-20 01:25 . 2011-01-07 18:49        927520        ----a-w-        c:\windows\system32\nvvsvc.exe
2014-05-20 01:25 . 2011-01-07 19:49        62808        ----a-w-        c:\windows\system32\nvshext.dll
2014-05-20 01:25 . 2011-01-07 18:49        387528        ----a-w-        c:\windows\system32\nvmctray.dll
2014-05-20 01:25 . 2011-01-07 18:49        2560968        ----a-w-        c:\windows\system32\nvsvcr.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2014-07-16 1753280]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"AVMWlanClient"="c:\program files (x86)\avmwlanstick\wlangui.exe" [2010-10-22 2105344]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-04 291608]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-15 152392]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 DES2 Service;DES2 Service for Energy Saving.;c:\program files (x86)\GIGABYTE\EnergySaver2\des2svr.exe;c:\program files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x64.sys;c:\windows\TEMP\cpuz135\cpuz135_x64.sys [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [x]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 arXfrSvc;Windows Media Center TV Archive Transfer Service;c:\program files\Windows Home Server\Microsoft.HomeServer.Archive.TransferService.exe;c:\program files\Windows Home Server\Microsoft.HomeServer.Archive.TransferService.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 esClient;Windows Media Center Client Service;c:\program files\Windows Home Server\esClient.exe;c:\program files\Windows Home Server\esClient.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Smart TimeLock;Smart TimeLock Service;c:\program files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe;c:\program files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 WHSConnector;Windows Home Server-Connectordienst;c:\program files\Windows Home Server\WHSConnector.exe;c:\program files\Windows Home Server\WHSConnector.exe [x]
S3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-08-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-14 09:25]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
2010-11-21 03:23        444752        ----a-w-        c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58        133840        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2010-11-03 1580368]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-12-12 7560296]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-30 2199840]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-04-30 1225920]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = fritz.box;*.local
uSearchAssistant = www.google.com
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1 192.168.0.2
FF - ProfilePath - c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\fzzjmys1.default\
FF - prefs.js: network.proxy.ftp - proxyus1.stealthy.co
FF - prefs.js: network.proxy.ftp_port - 3128
FF - prefs.js: network.proxy.http - proxyus1.stealthy.co
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.socks - proxyus1.stealthy.co
FF - prefs.js: network.proxy.socks_port - 3128
FF - prefs.js: network.proxy.ssl - proxyus1.stealthy.co
FF - prefs.js: network.proxy.ssl_port - 3128
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Windows Home Server.lnk - c:\windows\Installer\{21E49794-7C13-4E84-8659-55BD378267D5}\WHSTrayApp.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-08-10  20:53:20
ComboFix-quarantined-files.txt  2014-08-10 18:53
.
Vor Suchlauf: 14 Verzeichnis(se), 97.984.016.384 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 98.169.323.520 Bytes frei
.
- - End Of File - - A0568637AC3B26AB6F5AF99EA8CF5A43
A36C5E4F47E84449FF07ED3517B43A31

schrauber 11.08.2014 20:07
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

CplHicks 11.08.2014 21:13
Hallo Schrauber, erstmal ein großes Danke an dich für deine Mühe :)

Hier die Logs:

FRST:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Thomas (administrator) on THOMAS-PC on 11-08-2014 22:09:45
Running from C:\Users\Thomas\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Windows Home Server\esClient.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Home Server\Microsoft.HomeServer.Archive.TransferService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Home Server\WHSConnector.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\ehome\ehrec.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Farbar) C:\Users\Thomas\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7560296 2011-12-12] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-17] (InstallShield Software Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKU\S-1-5-21-4108216686-3975812735-2998002786-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-17] (InstallShield Software Corporation)
HKU\S-1-5-21-4108216686-3975812735-2998002786-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-16] (Valve Corporation)
Startup: C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {1E60EDA7-49F1-43ba-B9EF-3C24DFB518C2} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
SearchScopes: HKCU - {1F0F9C57-7B67-414a-9E6C-B42FFE7375DF} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
BHO: avast! Online Security -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: BrowserHelper Class -> {9A065C65-4EE7-4DDD-9918-F129089A894A} -> C:\Program Files\Windows Home Server\WHSDeskBands.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Home Server Banner - {D73E76A3-F902-45BD-8FC8-95AE8E014671} - C:\Program Files\Windows Home Server\WHSDeskBands.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\fzzjmys1.default
FF NetworkProxy: "ftp", "proxyus1.stealthy.co"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "proxyus1.stealthy.co"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "proxyus1.stealthy.co"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "proxyus1.stealthy.co"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Thomas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-14]

Chrome:
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 arXfrSvc; C:\Program Files\Windows Home Server\Microsoft.HomeServer.Archive.TransferService.exe [231280 2011-01-10] (Microsoft Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-12] () [File not signed]
R2 esClient; C:\Program Files\Windows Home Server\esClient.exe [109936 2011-01-10] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) [File not signed]
R2 WHSConnector; C:\Program Files\Windows Home Server\WHSConnector.exe [489840 2011-01-10] (Microsoft Corporation)
S2 DES2 Service; "C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-31] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-11 22:09 - 2014-08-11 22:09 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64(1).exe
2014-08-11 22:07 - 2014-08-11 22:08 - 00000758 _____ () C:\Users\Thomas\Desktop\JRT.txt
2014-08-11 22:03 - 2014-08-11 22:03 - 01016261 _____ (Thisisu) C:\Users\Thomas\Downloads\JRT.exe
2014-08-11 22:01 - 2014-08-11 22:01 - 00000983 _____ () C:\Users\Thomas\Desktop\AdwCleaner[S0].txt
2014-08-11 21:56 - 2014-08-11 21:58 - 00000000 ____D () C:\AdwCleaner
2014-08-11 21:56 - 2014-08-11 21:56 - 01366203 _____ () C:\Users\Thomas\Downloads\adwcleaner_3.304.exe
2014-08-11 21:56 - 2014-08-11 21:56 - 00001160 _____ () C:\Users\Thomas\Desktop\MBAM txt.txt
2014-08-11 14:43 - 2014-08-11 14:43 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Thomas\Downloads\revosetup95.exe
2014-08-11 14:43 - 2014-08-11 14:43 - 00001272 _____ () C:\Users\Thomas\Desktop\Revo Uninstaller.lnk
2014-08-11 14:43 - 2014-08-11 14:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-10 20:53 - 2014-08-10 20:53 - 00025536 _____ () C:\ComboFix.txt
2014-08-10 20:45 - 2014-08-10 20:53 - 00000000 ____D () C:\Qoobox
2014-08-10 20:45 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-10 20:45 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-10 20:45 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-10 20:43 - 2014-08-10 20:44 - 05568206 ____R (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe
2014-08-10 19:18 - 2014-08-10 19:18 - 00031036 _____ () C:\Users\Thomas\Downloads\Addition.txt
2014-08-10 19:17 - 2014-08-11 22:09 - 00016203 _____ () C:\Users\Thomas\Downloads\FRST.txt
2014-08-10 19:17 - 2014-08-11 22:09 - 00000000 ____D () C:\FRST
2014-08-10 19:17 - 2014-08-10 19:17 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-08-10 16:01 - 2014-08-11 22:01 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-10 16:01 - 2014-08-10 16:01 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-08-10 15:59 - 2014-08-10 15:59 - 204802239 _____ () C:\Windows\MEMORY.DMP
2014-08-10 15:59 - 2014-08-10 15:59 - 00000000 ____D () C:\Windows\Minidump
2014-08-09 15:15 - 2014-08-09 15:15 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Octodad Dadliest Catch
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieUserList
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieSiteList
2014-08-08 20:50 - 2014-08-08 20:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-08 18:45 - 2014-08-08 18:45 - 00001299 _____ () C:\DelFix.txt
2014-08-08 18:44 - 2014-08-08 18:44 - 00709564 _____ () C:\Users\Thomas\Downloads\delfix_10.8.exe
2014-08-08 16:44 - 2014-08-10 16:44 - 00000000 ____D () C:\Windows\ERUNT
2014-08-08 16:40 - 2014-08-11 22:00 - 00001176 _____ () C:\Windows\setupact.log
2014-08-08 16:40 - 2014-08-08 16:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-08 16:39 - 2014-08-11 21:59 - 00001176 _____ () C:\Windows\PFRO.log
2014-08-08 16:08 - 2014-08-11 21:59 - 00080218 _____ () C:\Windows\WindowsUpdate.log
2014-08-08 15:40 - 2014-08-11 21:46 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-08 15:40 - 2014-08-10 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-08 15:40 - 2014-08-10 16:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-08 15:40 - 2014-08-08 15:40 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-08 15:40 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-08 15:40 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-08 15:40 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-08 15:38 - 2014-08-08 15:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager [1].exe
2014-08-08 15:36 - 2014-08-08 15:36 - 00787392 _____ ( ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager.exe
2014-08-07 19:52 - 2014-08-07 19:52 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-07 19:52 - 2014-08-07 19:52 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-07 19:44 - 2014-08-07 19:50 - 32047680 _____ () C:\Users\Thomas\Downloads\Firefox_Setup_de31.0.exe
2014-08-07 09:55 - 2014-08-07 10:00 - 00004238 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-08-06 23:51 - 2014-08-10 16:02 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-06 23:44 - 2014-08-06 23:47 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-31 18:34 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-31 18:34 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-07-31 18:34 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-07-31 18:34 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-31 18:34 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-31 18:34 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-07-31 18:34 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-07-31 18:34 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-31 18:34 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-07-29 23:50 - 2014-08-10 16:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-28 13:08 - 2014-08-10 16:43 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Gods_Will_Be_Watching
2014-07-18 16:09 - 2014-07-18 16:09 - 00002869 _____ () C:\Users\Thomas\Desktop\Mein Film22.wlmp
2014-07-18 16:06 - 2014-05-04 01:26 - 37842427 ____N () C:\Users\Thomas\Desktop\IMG_3675.MOV
2014-07-16 01:42 - 2014-08-10 16:04 - 00000000 ____D () C:\Users\Thomas\Documents\Larian Studios

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-11 22:10 - 2014-08-10 19:17 - 00016203 _____ () C:\Users\Thomas\Downloads\FRST.txt
2014-08-11 22:09 - 2014-08-11 22:09 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64(1).exe
2014-08-11 22:09 - 2014-08-10 19:17 - 00000000 ____D () C:\FRST
2014-08-11 22:08 - 2014-08-11 22:07 - 00000758 _____ () C:\Users\Thomas\Desktop\JRT.txt
2014-08-11 22:07 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-11 22:07 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-11 22:04 - 2014-08-08 16:08 - 00080218 _____ () C:\Windows\WindowsUpdate.log
2014-08-11 22:03 - 2014-08-11 22:03 - 01016261 _____ (Thisisu) C:\Users\Thomas\Downloads\JRT.exe
2014-08-11 22:02 - 2011-03-25 20:41 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-11 22:01 - 2014-08-11 22:01 - 00000983 _____ () C:\Users\Thomas\Desktop\AdwCleaner[S0].txt
2014-08-11 22:01 - 2014-08-10 16:01 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-11 22:00 - 2014-08-08 16:40 - 00001176 _____ () C:\Windows\setupact.log
2014-08-11 21:59 - 2014-08-08 16:39 - 00001176 _____ () C:\Windows\PFRO.log
2014-08-11 21:59 - 2011-03-18 16:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-11 21:59 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-11 21:58 - 2014-08-11 21:56 - 00000000 ____D () C:\AdwCleaner
2014-08-11 21:56 - 2014-08-11 21:56 - 01366203 _____ () C:\Users\Thomas\Downloads\adwcleaner_3.304.exe
2014-08-11 21:56 - 2014-08-11 21:56 - 00001160 _____ () C:\Users\Thomas\Desktop\MBAM txt.txt
2014-08-11 21:46 - 2014-08-08 15:40 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-11 18:25 - 2013-05-14 22:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-11 14:51 - 2011-03-18 14:28 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-11 14:43 - 2014-08-11 14:43 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Thomas\Downloads\revosetup95.exe
2014-08-11 14:43 - 2014-08-11 14:43 - 00001272 _____ () C:\Users\Thomas\Desktop\Revo Uninstaller.lnk
2014-08-11 14:43 - 2014-08-11 14:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-10 20:53 - 2014-08-10 20:53 - 00025536 _____ () C:\ComboFix.txt
2014-08-10 20:53 - 2014-08-10 20:45 - 00000000 ____D () C:\Qoobox
2014-08-10 20:51 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-08-10 20:44 - 2014-08-10 20:43 - 05568206 ____R (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe
2014-08-10 20:44 - 2013-05-15 10:18 - 00000000 ____D () C:\Windows\erdnt
2014-08-10 19:18 - 2014-08-10 19:18 - 00031036 _____ () C:\Users\Thomas\Downloads\Addition.txt
2014-08-10 19:17 - 2014-08-10 19:17 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-08-10 16:54 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-08-10 16:47 - 2014-08-08 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-10 16:47 - 2014-02-08 21:02 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-10 16:47 - 2013-07-31 18:19 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2014-08-10 16:47 - 2012-03-03 17:57 - 00000000 ____D () C:\Users\Thomas\Downloads\Sonstige Bilder
2014-08-10 16:47 - 2011-10-07 14:47 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-10 16:47 - 2011-05-29 09:44 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-08-10 16:46 - 2014-05-06 23:45 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-10 16:46 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\ShellNew
2014-08-10 16:46 - 2010-11-21 09:00 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-10 16:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-08-10 16:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\L2Schemas
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-08-10 16:44 - 2014-08-08 16:44 - 00000000 ____D () C:\Windows\ERUNT
2014-08-10 16:44 - 2013-05-14 22:08 - 00000000 ____D () C:\Windows\system32\Macromed
2014-08-10 16:44 - 2013-05-14 22:05 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-08-10 16:44 - 2013-05-14 22:00 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-08-10 16:44 - 2012-05-01 12:55 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-08-10 16:44 - 2011-10-07 14:59 - 00000000 ____D () C:\Windows\de
2014-08-10 16:44 - 2011-03-18 14:53 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-08-10 16:44 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-08-10 16:43 - 2014-08-08 15:40 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-10 16:43 - 2014-07-29 23:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-10 16:43 - 2014-07-28 13:08 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Gods_Will_Be_Watching
2014-08-10 16:43 - 2014-06-18 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-10 16:43 - 2014-06-18 09:05 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NCSOFT
2014-08-10 16:43 - 2014-06-18 09:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
2014-08-10 16:43 - 2014-05-30 12:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-10 16:43 - 2014-05-30 12:18 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-10 16:43 - 2014-03-12 15:55 - 00000000 ____D () C:\ProgramData\Caphyon
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Radiant Entertainment
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stonehearth
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\Program Files (x86)\Stonehearth
2014-08-10 16:43 - 2014-03-12 13:17 - 00000000 ____D () C:\Users\Thomas\Downloads\FGCreator
2014-08-10 16:43 - 2014-02-12 20:39 - 00000000 ____D () C:\Users\Thomas\AppData\Local\GOG.com
2014-08-10 16:43 - 2014-02-12 20:39 - 00000000 ____D () C:\Program Files (x86)\GOG.com
2014-08-10 16:43 - 2014-02-08 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-10 16:43 - 2014-01-13 22:57 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Battle.net
2014-08-10 16:43 - 2014-01-12 21:32 - 00000000 ____D () C:\Users\Thomas\Documents\DayZ
2014-08-10 16:43 - 2014-01-12 21:32 - 00000000 ____D () C:\Users\Thomas\AppData\Local\DayZ
2014-08-10 16:43 - 2013-11-13 09:36 - 00000000 ____D () C:\Users\Thomas\Zomboid
2014-08-10 16:43 - 2013-10-30 16:57 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-08-10 16:43 - 2013-07-31 18:19 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.EU
2014-08-10 16:43 - 2013-07-31 18:19 - 00000000 ____D () C:\Users\Thomas\AppData\Local\PokerStars.EU
2014-08-10 16:43 - 2013-06-26 14:51 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-10 16:43 - 2013-05-30 20:49 - 00000000 ____D () C:\Users\Thomas\AppData\Local\SWTORPerf
2014-08-10 16:43 - 2013-05-17 20:24 - 00000000 ____D () C:\Users\Thomas\Documents\StarCraft II
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files\iTunes
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files\iPod
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-08-10 16:43 - 2013-05-14 22:10 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-10 16:43 - 2013-05-14 22:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-10 16:43 - 2013-05-14 22:00 - 00000000 ____D () C:\Program Files\Realtek
2014-08-10 16:43 - 2013-05-14 21:53 - 00000000 ____D () C:\Windows\Chipset
2014-08-10 16:43 - 2013-05-14 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 16:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 16:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
2014-08-10 16:43 - 2012-08-17 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-08-10 16:43 - 2012-08-06 08:58 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-08-10 16:43 - 2012-06-16 21:38 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Downloaded Installations
2014-08-10 16:43 - 2012-06-16 21:37 - 00000000 ____D () C:\Users\Thomas\AppData\Local\ArmA 2 OA
2014-08-10 16:43 - 2012-06-16 21:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-08-10 16:43 - 2012-05-12 08:18 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-08-10 16:43 - 2012-05-01 12:55 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-08-10 16:43 - 2012-05-01 12:55 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\ProgramData\Apple
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files\Bonjour
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-08-10 16:43 - 2012-03-03 17:59 - 00000000 ____D () C:\Users\Thomas\Downloads\Programme
2014-08-10 16:43 - 2012-02-28 11:01 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Unity
2014-08-10 16:43 - 2011-10-07 14:47 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-08-10 16:43 - 2011-10-07 14:45 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-10 16:43 - 2011-09-13 09:02 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\.minecraft
2014-08-10 16:43 - 2011-09-08 23:09 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-08-10 16:43 - 2011-08-25 22:48 - 00000000 ____D () C:\Users\Thomas\AppData\Local\DoFUpdater
2014-08-10 16:43 - 2011-08-18 21:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Skype
2014-08-10 16:43 - 2011-08-18 21:57 - 00000000 ____D () C:\ProgramData\Skype
2014-08-10 16:43 - 2011-05-20 15:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2014-08-10 16:43 - 2011-04-22 11:57 - 00000000 ____D () C:\Users\Thomas\Documents\DVDVideoSoft
2014-08-10 16:43 - 2011-04-16 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-08-10 16:43 - 2011-04-16 13:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Microsoft Help
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-10 16:43 - 2011-03-18 16:57 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-08-10 16:43 - 2011-03-18 16:55 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-10 16:43 - 2011-03-18 14:30 - 00000000 ____D () C:\ProgramData\InstallShield
2014-08-10 16:43 - 2011-03-18 14:28 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-08-10 16:43 - 2011-03-18 14:03 - 00000000 ____D () C:\Users\Thomas\AppData\Local\VirtualStore
2014-08-10 16:43 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-10 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-08-10 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-08-10 16:42 - 2011-03-19 10:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Splashtop
2014-08-10 16:42 - 2011-03-19 10:18 - 00000000 ____D () C:\ProgramData\Splashtop
2014-08-10 16:42 - 2011-03-18 14:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-08-10 16:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-08-10 16:04 - 2014-07-16 01:42 - 00000000 ____D () C:\Users\Thomas\Documents\Larian Studios
2014-08-10 16:04 - 2014-06-18 09:05 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\NCSOFT
2014-08-10 16:04 - 2014-06-05 16:45 - 00000000 ____D () C:\Users\Thomas\Documents\Fax
2014-08-10 16:04 - 2014-02-11 13:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Artweaver Free
2014-08-10 16:04 - 2014-01-02 17:18 - 00000000 ____D () C:\Users\Thomas\Documents\BioWare
2014-08-10 16:04 - 2013-08-17 21:34 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\thriXXX
2014-08-10 16:04 - 2013-07-25 16:38 - 00000000 ____D () C:\Users\Thomas\Downloads\Age of Empires II(2)
2014-08-10 16:04 - 2013-05-25 19:42 - 00000000 ____D () C:\Users\Thomas\Documents\Klei
2014-08-10 16:04 - 2012-10-27 15:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Zeal Game Studio
2014-08-10 16:04 - 2012-08-06 09:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DAEMON Tools Lite
2014-08-10 16:04 - 2011-05-17 10:19 - 00000000 ____D () C:\Users\Thomas\Documents\My Games
2014-08-10 16:04 - 2011-04-27 03:02 - 00000000 ____D () C:\Users\Thomas\Documents\ICQ
2014-08-10 16:04 - 2011-03-18 14:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Macromedia
2014-08-10 16:04 - 2011-03-18 14:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Adobe
2014-08-10 16:04 - 2011-03-18 14:50 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Mozilla
2014-08-10 16:03 - 2014-06-18 20:20 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA
2014-08-10 16:03 - 2014-01-06 18:58 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Geckofx
2014-08-10 16:03 - 2013-09-26 20:16 - 00000000 ____D () C:\Users\hedev
2014-08-10 16:03 - 2013-08-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-10 16:03 - 2013-05-14 22:11 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-08-10 16:03 - 2013-05-14 22:11 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-08-10 16:03 - 2012-08-06 09:19 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Eushully
2014-08-10 16:03 - 2012-07-30 23:49 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Facebook
2014-08-10 16:03 - 2011-05-14 12:06 - 00000000 ____D () C:\ProgramData\Nero
2014-08-10 16:03 - 2011-03-27 19:55 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Microsoft Games
2014-08-10 16:03 - 2011-03-18 14:50 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Mozilla
2014-08-10 16:03 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-08-10 16:02 - 2014-08-06 23:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-10 16:02 - 2014-03-15 19:10 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-08-10 16:02 - 2014-01-14 00:07 - 00000000 ____D () C:\ProgramData\HappyCloud
2014-08-10 16:02 - 2012-05-16 19:46 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-10 16:02 - 2012-04-21 07:52 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-10 16:02 - 2011-07-04 15:00 - 00000000 ____D () C:\ProgramData\Adobe
2014-08-10 16:02 - 2011-03-24 18:35 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-10 16:01 - 2014-08-10 16:01 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-08-10 16:01 - 2011-03-24 18:36 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-08-10 16:00 - 2011-04-16 13:06 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-10 15:59 - 2014-08-10 15:59 - 204802239 _____ () C:\Windows\MEMORY.DMP
2014-08-10 15:59 - 2014-08-10 15:59 - 00000000 ____D () C:\Windows\Minidump
2014-08-10 15:59 - 2011-10-14 18:19 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-08-10 15:59 - 2011-03-24 18:35 - 00000000 ____D () C:\Program Files\AVAST Software
2014-08-10 15:59 - 2011-03-18 14:03 - 00000000 ____D () C:\Users\Thomas
2014-08-10 15:57 - 2014-06-18 09:05 - 00000000 ____D () C:\Program Files (x86)\NCSOFT
2014-08-10 15:57 - 2011-10-07 14:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-08-10 15:57 - 2011-05-17 10:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-08-10 15:57 - 2011-03-18 14:30 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-08-10 15:57 - 2011-03-18 14:28 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-08-10 15:55 - 2013-05-14 22:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-08-10 15:55 - 2011-05-20 15:39 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2014-08-10 15:55 - 2011-04-16 13:05 - 00000000 ___RD () C:\MSOCache
2014-08-09 15:15 - 2014-08-09 15:15 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Octodad Dadliest Catch
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieUserList
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieSiteList
2014-08-08 20:51 - 2014-08-08 20:50 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-08 20:51 - 2012-08-05 19:10 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Google
2014-08-08 18:45 - 2014-08-08 18:45 - 00001299 _____ () C:\DelFix.txt
2014-08-08 18:44 - 2014-08-08 18:44 - 00709564 _____ () C:\Users\Thomas\Downloads\delfix_10.8.exe
2014-08-08 16:40 - 2014-08-08 16:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-08 16:39 - 2011-03-25 20:12 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-08 15:40 - 2014-08-08 15:40 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-08 15:38 - 2014-08-08 15:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager [1].exe
2014-08-08 15:36 - 2014-08-08 15:36 - 00787392 _____ ( ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager.exe
2014-08-07 19:52 - 2014-08-07 19:52 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-07 19:52 - 2014-08-07 19:52 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-07 19:50 - 2014-08-07 19:44 - 32047680 _____ () C:\Users\Thomas\Downloads\Firefox_Setup_de31.0.exe
2014-08-07 19:39 - 2014-05-23 11:45 - 00009315 _____ () C:\Users\Thomas\Desktop\Stunden Kiosk.xlsx
2014-08-07 19:34 - 2011-03-18 15:02 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-08-07 10:00 - 2014-08-07 09:55 - 00004238 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-08-06 23:48 - 2014-02-12 20:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-08-06 23:48 - 2014-02-12 20:41 - 00000000 ____D () C:\GOG Games
2014-08-06 23:47 - 2014-08-06 23:44 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-06 23:47 - 2011-03-18 14:36 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-07-30 15:40 - 2014-01-13 22:57 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Battle.net
2014-07-18 16:09 - 2014-07-18 16:09 - 00002869 _____ () C:\Users\Thomas\Desktop\Mein Film22.wlmp

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-07 10:58

==================== End Of Log ============================
--- --- ---


MalwareBytes:

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 11.08.2014
Suchlauf-Zeit: 21:46:34
Logdatei: MBAM txt.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.11.06
Rootkit Datenbank: v2014.08.04.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Thomas

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 333419
Verstrichene Zeit: 8 Min, 9 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
JRT:

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Thomas on 11.08.2014 at 22:03:37,00
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\fzzjmys1.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11.08.2014 at 22:07:57,05
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
AdwCleaner:

Code:
# AdwCleaner v3.304 - Bericht erstellt am 11/08/2014 um 21:58:47
# Aktualisiert 08/08/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : C:\Users\Thomas\Downloads\adwcleaner_3.304.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\fzzjmys1.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [923 octets] - [11/08/2014 21:57:08]
AdwCleaner[S0].txt - [845 octets] - [11/08/2014 21:58:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [904 octets] ##########

schrauber 12.08.2014 13:26

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

CplHicks 12.08.2014 15:55
FRST:


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Thomas (administrator) on THOMAS-PC on 12-08-2014 16:49:29
Running from C:\Users\Thomas\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Windows Home Server\esClient.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Windows Home Server\Microsoft.HomeServer.Archive.TransferService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Home Server\WHSConnector.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Farbar) C:\Users\Thomas\Downloads\FRST64(2).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7560296 2011-12-12] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-17] (InstallShield Software Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKU\S-1-5-21-4108216686-3975812735-2998002786-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-17] (InstallShield Software Corporation)
HKU\S-1-5-21-4108216686-3975812735-2998002786-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-16] (Valve Corporation)
Startup: C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {1E60EDA7-49F1-43ba-B9EF-3C24DFB518C2} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
SearchScopes: HKCU - {1F0F9C57-7B67-414a-9E6C-B42FFE7375DF} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
BHO: avast! Online Security -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: BrowserHelper Class -> {9A065C65-4EE7-4DDD-9918-F129089A894A} -> C:\Program Files\Windows Home Server\WHSDeskBands.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Home Server Banner - {D73E76A3-F902-45BD-8FC8-95AE8E014671} - C:\Program Files\Windows Home Server\WHSDeskBands.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\fzzjmys1.default
FF NetworkProxy: "ftp", "proxyus1.stealthy.co"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "proxyus1.stealthy.co"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "proxyus1.stealthy.co"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "proxyus1.stealthy.co"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Thomas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-14]

Chrome:
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 arXfrSvc; C:\Program Files\Windows Home Server\Microsoft.HomeServer.Archive.TransferService.exe [231280 2011-01-10] (Microsoft Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-12] () [File not signed]
R2 esClient; C:\Program Files\Windows Home Server\esClient.exe [109936 2011-01-10] (Microsoft Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) [File not signed]
R2 WHSConnector; C:\Program Files\Windows Home Server\WHSConnector.exe [489840 2011-01-10] (Microsoft Corporation)
S2 DES2 Service; "C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-31] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-12 16:49 - 2014-08-12 16:49 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64(2).exe
2014-08-12 16:48 - 2014-08-12 16:48 - 00000748 _____ () C:\Users\Thomas\Desktop\checkup1111.txt
2014-08-12 16:45 - 2014-08-12 16:45 - 00854410 _____ () C:\Users\Thomas\Downloads\SecurityCheck.exe
2014-08-12 15:22 - 2014-08-12 15:22 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-12 15:21 - 2014-08-12 15:21 - 02347384 _____ (ESET) C:\Users\Thomas\Downloads\esetsmartinstaller_deu.exe
2014-08-11 22:09 - 2014-08-11 22:09 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64(1).exe
2014-08-11 22:03 - 2014-08-11 22:03 - 01016261 _____ (Thisisu) C:\Users\Thomas\Downloads\JRT.exe
2014-08-11 21:56 - 2014-08-11 21:58 - 00000000 ____D () C:\AdwCleaner
2014-08-11 21:56 - 2014-08-11 21:56 - 01366203 _____ () C:\Users\Thomas\Downloads\adwcleaner_3.304.exe
2014-08-11 14:43 - 2014-08-11 14:43 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Thomas\Downloads\revosetup95.exe
2014-08-11 14:43 - 2014-08-11 14:43 - 00001272 _____ () C:\Users\Thomas\Desktop\Revo Uninstaller.lnk
2014-08-11 14:43 - 2014-08-11 14:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-10 20:53 - 2014-08-10 20:53 - 00025536 _____ () C:\ComboFix.txt
2014-08-10 20:45 - 2014-08-10 20:53 - 00000000 ____D () C:\Qoobox
2014-08-10 20:45 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-10 20:45 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-10 20:45 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-10 20:45 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-10 20:43 - 2014-08-10 20:44 - 05568206 ____R (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe
2014-08-10 19:18 - 2014-08-10 19:18 - 00031036 _____ () C:\Users\Thomas\Downloads\Addition.txt
2014-08-10 19:17 - 2014-08-12 16:49 - 00016026 _____ () C:\Users\Thomas\Downloads\FRST.txt
2014-08-10 19:17 - 2014-08-12 16:49 - 00000000 ____D () C:\FRST
2014-08-10 19:17 - 2014-08-10 19:17 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-08-10 16:01 - 2014-08-12 15:17 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-10 16:01 - 2014-08-10 16:01 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-08-10 15:59 - 2014-08-10 15:59 - 204802239 _____ () C:\Windows\MEMORY.DMP
2014-08-10 15:59 - 2014-08-10 15:59 - 00000000 ____D () C:\Windows\Minidump
2014-08-09 15:15 - 2014-08-09 15:15 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Octodad Dadliest Catch
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieUserList
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieSiteList
2014-08-08 20:50 - 2014-08-08 20:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-08 18:45 - 2014-08-08 18:45 - 00001299 _____ () C:\DelFix.txt
2014-08-08 18:44 - 2014-08-08 18:44 - 00709564 _____ () C:\Users\Thomas\Downloads\delfix_10.8.exe
2014-08-08 16:44 - 2014-08-10 16:44 - 00000000 ____D () C:\Windows\ERUNT
2014-08-08 16:40 - 2014-08-12 15:15 - 00001512 _____ () C:\Windows\setupact.log
2014-08-08 16:40 - 2014-08-08 16:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-08 16:39 - 2014-08-11 21:59 - 00001176 _____ () C:\Windows\PFRO.log
2014-08-08 16:08 - 2014-08-12 16:05 - 00120077 _____ () C:\Windows\WindowsUpdate.log
2014-08-08 15:40 - 2014-08-12 15:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-08 15:40 - 2014-08-10 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-08 15:40 - 2014-08-10 16:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-08 15:40 - 2014-08-08 15:40 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-08 15:40 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-08 15:40 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-08 15:40 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-08 15:38 - 2014-08-08 15:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager [1].exe
2014-08-08 15:36 - 2014-08-08 15:36 - 00787392 _____ ( ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager.exe
2014-08-07 19:52 - 2014-08-07 19:52 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-07 19:52 - 2014-08-07 19:52 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-07 19:44 - 2014-08-07 19:50 - 32047680 _____ () C:\Users\Thomas\Downloads\Firefox_Setup_de31.0.exe
2014-08-07 09:55 - 2014-08-07 10:00 - 00004238 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-08-06 23:51 - 2014-08-10 16:02 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-06 23:44 - 2014-08-06 23:47 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-31 18:34 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-31 18:34 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-07-31 18:34 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-07-31 18:34 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-07-31 18:34 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-31 18:34 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-31 18:34 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-07-31 18:34 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-07-31 18:34 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-31 18:34 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-07-29 23:50 - 2014-08-10 16:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-28 13:08 - 2014-08-10 16:43 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Gods_Will_Be_Watching
2014-07-18 16:09 - 2014-07-18 16:09 - 00002869 _____ () C:\Users\Thomas\Desktop\Mein Film22.wlmp
2014-07-18 16:06 - 2014-05-04 01:26 - 37842427 ____N () C:\Users\Thomas\Desktop\IMG_3675.MOV
2014-07-16 01:42 - 2014-08-10 16:04 - 00000000 ____D () C:\Users\Thomas\Documents\Larian Studios

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-12 16:49 - 2014-08-12 16:49 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64(2).exe
2014-08-12 16:49 - 2014-08-10 19:17 - 00016026 _____ () C:\Users\Thomas\Downloads\FRST.txt
2014-08-12 16:49 - 2014-08-10 19:17 - 00000000 ____D () C:\FRST
2014-08-12 16:48 - 2014-08-12 16:48 - 00000748 _____ () C:\Users\Thomas\Desktop\checkup1111.txt
2014-08-12 16:45 - 2014-08-12 16:45 - 00854410 _____ () C:\Users\Thomas\Downloads\SecurityCheck.exe
2014-08-12 16:25 - 2013-05-14 22:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-12 16:05 - 2014-08-08 16:08 - 00120077 _____ () C:\Windows\WindowsUpdate.log
2014-08-12 15:23 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-12 15:23 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-12 15:22 - 2014-08-12 15:22 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-12 15:21 - 2014-08-12 15:21 - 02347384 _____ (ESET) C:\Users\Thomas\Downloads\esetsmartinstaller_deu.exe
2014-08-12 15:21 - 2011-03-25 20:41 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-12 15:18 - 2014-08-08 15:40 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-12 15:17 - 2014-08-10 16:01 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-12 15:15 - 2014-08-08 16:40 - 00001512 _____ () C:\Windows\setupact.log
2014-08-12 15:15 - 2011-03-18 16:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-12 15:15 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-11 22:09 - 2014-08-11 22:09 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64(1).exe
2014-08-11 22:03 - 2014-08-11 22:03 - 01016261 _____ (Thisisu) C:\Users\Thomas\Downloads\JRT.exe
2014-08-11 21:59 - 2014-08-08 16:39 - 00001176 _____ () C:\Windows\PFRO.log
2014-08-11 21:58 - 2014-08-11 21:56 - 00000000 ____D () C:\AdwCleaner
2014-08-11 21:56 - 2014-08-11 21:56 - 01366203 _____ () C:\Users\Thomas\Downloads\adwcleaner_3.304.exe
2014-08-11 14:51 - 2011-03-18 14:28 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-11 14:43 - 2014-08-11 14:43 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Thomas\Downloads\revosetup95.exe
2014-08-11 14:43 - 2014-08-11 14:43 - 00001272 _____ () C:\Users\Thomas\Desktop\Revo Uninstaller.lnk
2014-08-11 14:43 - 2014-08-11 14:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-10 20:53 - 2014-08-10 20:53 - 00025536 _____ () C:\ComboFix.txt
2014-08-10 20:53 - 2014-08-10 20:45 - 00000000 ____D () C:\Qoobox
2014-08-10 20:51 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-08-10 20:44 - 2014-08-10 20:43 - 05568206 ____R (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe
2014-08-10 20:44 - 2013-05-15 10:18 - 00000000 ____D () C:\Windows\erdnt
2014-08-10 19:18 - 2014-08-10 19:18 - 00031036 _____ () C:\Users\Thomas\Downloads\Addition.txt
2014-08-10 19:17 - 2014-08-10 19:17 - 02099712 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-08-10 16:54 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-08-10 16:47 - 2014-08-08 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-10 16:47 - 2014-02-08 21:02 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-10 16:47 - 2013-07-31 18:19 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2014-08-10 16:47 - 2012-03-03 17:57 - 00000000 ____D () C:\Users\Thomas\Downloads\Sonstige Bilder
2014-08-10 16:47 - 2011-10-07 14:47 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-10 16:47 - 2011-05-29 09:44 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-08-10 16:46 - 2014-05-06 23:45 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-10 16:46 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\ShellNew
2014-08-10 16:46 - 2010-11-21 09:00 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-10 16:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-08-10 16:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\L2Schemas
2014-08-10 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-08-10 16:44 - 2014-08-08 16:44 - 00000000 ____D () C:\Windows\ERUNT
2014-08-10 16:44 - 2013-05-14 22:08 - 00000000 ____D () C:\Windows\system32\Macromed
2014-08-10 16:44 - 2013-05-14 22:05 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-08-10 16:44 - 2013-05-14 22:00 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-08-10 16:44 - 2012-05-01 12:55 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-08-10 16:44 - 2011-10-07 14:59 - 00000000 ____D () C:\Windows\de
2014-08-10 16:44 - 2011-03-18 14:53 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-08-10 16:44 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2014-08-10 16:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-08-10 16:43 - 2014-08-08 15:40 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-10 16:43 - 2014-07-29 23:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-10 16:43 - 2014-07-28 13:08 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Gods_Will_Be_Watching
2014-08-10 16:43 - 2014-06-18 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-10 16:43 - 2014-06-18 09:05 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NCSOFT
2014-08-10 16:43 - 2014-06-18 09:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
2014-08-10 16:43 - 2014-05-30 12:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-10 16:43 - 2014-05-30 12:18 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-10 16:43 - 2014-03-12 15:55 - 00000000 ____D () C:\ProgramData\Caphyon
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Radiant Entertainment
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stonehearth
2014-08-10 16:43 - 2014-03-12 15:54 - 00000000 ____D () C:\Program Files (x86)\Stonehearth
2014-08-10 16:43 - 2014-03-12 13:17 - 00000000 ____D () C:\Users\Thomas\Downloads\FGCreator
2014-08-10 16:43 - 2014-02-12 20:39 - 00000000 ____D () C:\Users\Thomas\AppData\Local\GOG.com
2014-08-10 16:43 - 2014-02-12 20:39 - 00000000 ____D () C:\Program Files (x86)\GOG.com
2014-08-10 16:43 - 2014-02-08 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-10 16:43 - 2014-01-13 22:57 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Battle.net
2014-08-10 16:43 - 2014-01-12 21:32 - 00000000 ____D () C:\Users\Thomas\Documents\DayZ
2014-08-10 16:43 - 2014-01-12 21:32 - 00000000 ____D () C:\Users\Thomas\AppData\Local\DayZ
2014-08-10 16:43 - 2013-11-13 09:36 - 00000000 ____D () C:\Users\Thomas\Zomboid
2014-08-10 16:43 - 2013-10-30 16:57 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-08-10 16:43 - 2013-07-31 18:19 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.EU
2014-08-10 16:43 - 2013-07-31 18:19 - 00000000 ____D () C:\Users\Thomas\AppData\Local\PokerStars.EU
2014-08-10 16:43 - 2013-06-26 14:51 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-10 16:43 - 2013-05-30 20:49 - 00000000 ____D () C:\Users\Thomas\AppData\Local\SWTORPerf
2014-08-10 16:43 - 2013-05-17 20:24 - 00000000 ____D () C:\Users\Thomas\Documents\StarCraft II
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files\iTunes
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files\iPod
2014-08-10 16:43 - 2013-05-17 19:38 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-08-10 16:43 - 2013-05-14 22:10 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-10 16:43 - 2013-05-14 22:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-10 16:43 - 2013-05-14 22:00 - 00000000 ____D () C:\Program Files\Realtek
2014-08-10 16:43 - 2013-05-14 21:53 - 00000000 ____D () C:\Windows\Chipset
2014-08-10 16:43 - 2013-05-14 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 16:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 16:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-10 16:43 - 2013-05-14 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
2014-08-10 16:43 - 2012-08-17 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-08-10 16:43 - 2012-08-06 08:58 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-08-10 16:43 - 2012-06-16 21:38 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Downloaded Installations
2014-08-10 16:43 - 2012-06-16 21:37 - 00000000 ____D () C:\Users\Thomas\AppData\Local\ArmA 2 OA
2014-08-10 16:43 - 2012-06-16 21:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-08-10 16:43 - 2012-05-12 08:18 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-08-10 16:43 - 2012-05-01 12:55 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-08-10 16:43 - 2012-05-01 12:55 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\ProgramData\Apple
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files\Bonjour
2014-08-10 16:43 - 2012-05-01 12:54 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-08-10 16:43 - 2012-03-03 17:59 - 00000000 ____D () C:\Users\Thomas\Downloads\Programme
2014-08-10 16:43 - 2012-02-28 11:01 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Unity
2014-08-10 16:43 - 2011-10-07 14:47 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-08-10 16:43 - 2011-10-07 14:45 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-10 16:43 - 2011-09-13 09:02 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\.minecraft
2014-08-10 16:43 - 2011-09-08 23:09 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-08-10 16:43 - 2011-08-25 22:48 - 00000000 ____D () C:\Users\Thomas\AppData\Local\DoFUpdater
2014-08-10 16:43 - 2011-08-18 21:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Skype
2014-08-10 16:43 - 2011-08-18 21:57 - 00000000 ____D () C:\ProgramData\Skype
2014-08-10 16:43 - 2011-05-20 15:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2014-08-10 16:43 - 2011-04-22 11:57 - 00000000 ____D () C:\Users\Thomas\Documents\DVDVideoSoft
2014-08-10 16:43 - 2011-04-16 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-08-10 16:43 - 2011-04-16 13:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Microsoft Help
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-10 16:43 - 2011-04-16 13:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-10 16:43 - 2011-03-18 16:57 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-08-10 16:43 - 2011-03-18 16:55 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-10 16:43 - 2011-03-18 14:30 - 00000000 ____D () C:\ProgramData\InstallShield
2014-08-10 16:43 - 2011-03-18 14:28 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-08-10 16:43 - 2011-03-18 14:03 - 00000000 ____D () C:\Users\Thomas\AppData\Local\VirtualStore
2014-08-10 16:43 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-10 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-08-10 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-08-10 16:42 - 2011-03-19 10:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Splashtop
2014-08-10 16:42 - 2011-03-19 10:18 - 00000000 ____D () C:\ProgramData\Splashtop
2014-08-10 16:42 - 2011-03-18 14:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-08-10 16:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-08-10 16:04 - 2014-07-16 01:42 - 00000000 ____D () C:\Users\Thomas\Documents\Larian Studios
2014-08-10 16:04 - 2014-06-18 09:05 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\NCSOFT
2014-08-10 16:04 - 2014-06-05 16:45 - 00000000 ____D () C:\Users\Thomas\Documents\Fax
2014-08-10 16:04 - 2014-02-11 13:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Artweaver Free
2014-08-10 16:04 - 2014-01-02 17:18 - 00000000 ____D () C:\Users\Thomas\Documents\BioWare
2014-08-10 16:04 - 2013-08-17 21:34 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\thriXXX
2014-08-10 16:04 - 2013-07-25 16:38 - 00000000 ____D () C:\Users\Thomas\Downloads\Age of Empires II(2)
2014-08-10 16:04 - 2013-05-25 19:42 - 00000000 ____D () C:\Users\Thomas\Documents\Klei
2014-08-10 16:04 - 2012-10-27 15:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Zeal Game Studio
2014-08-10 16:04 - 2012-08-06 09:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DAEMON Tools Lite
2014-08-10 16:04 - 2011-05-17 10:19 - 00000000 ____D () C:\Users\Thomas\Documents\My Games
2014-08-10 16:04 - 2011-04-27 03:02 - 00000000 ____D () C:\Users\Thomas\Documents\ICQ
2014-08-10 16:04 - 2011-03-18 14:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Macromedia
2014-08-10 16:04 - 2011-03-18 14:53 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Adobe
2014-08-10 16:04 - 2011-03-18 14:50 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Mozilla
2014-08-10 16:03 - 2014-06-18 20:20 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA
2014-08-10 16:03 - 2014-01-06 18:58 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Geckofx
2014-08-10 16:03 - 2013-09-26 20:16 - 00000000 ____D () C:\Users\hedev
2014-08-10 16:03 - 2013-08-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-10 16:03 - 2013-05-14 22:11 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-08-10 16:03 - 2013-05-14 22:11 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-08-10 16:03 - 2012-08-06 09:19 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Eushully
2014-08-10 16:03 - 2012-07-30 23:49 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Facebook
2014-08-10 16:03 - 2011-05-14 12:06 - 00000000 ____D () C:\ProgramData\Nero
2014-08-10 16:03 - 2011-03-27 19:55 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Microsoft Games
2014-08-10 16:03 - 2011-03-18 14:50 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Mozilla
2014-08-10 16:03 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-08-10 16:02 - 2014-08-06 23:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-10 16:02 - 2014-03-15 19:10 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-08-10 16:02 - 2014-01-14 00:07 - 00000000 ____D () C:\ProgramData\HappyCloud
2014-08-10 16:02 - 2012-05-16 19:46 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-10 16:02 - 2012-04-21 07:52 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-10 16:02 - 2011-07-04 15:00 - 00000000 ____D () C:\ProgramData\Adobe
2014-08-10 16:02 - 2011-03-24 18:35 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-10 16:01 - 2014-08-10 16:01 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-08-10 16:01 - 2011-03-24 18:36 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-08-10 16:00 - 2011-04-16 13:06 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-10 15:59 - 2014-08-10 15:59 - 204802239 _____ () C:\Windows\MEMORY.DMP
2014-08-10 15:59 - 2014-08-10 15:59 - 00000000 ____D () C:\Windows\Minidump
2014-08-10 15:59 - 2011-10-14 18:19 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-08-10 15:59 - 2011-03-24 18:35 - 00000000 ____D () C:\Program Files\AVAST Software
2014-08-10 15:59 - 2011-03-18 14:03 - 00000000 ____D () C:\Users\Thomas
2014-08-10 15:57 - 2014-06-18 09:05 - 00000000 ____D () C:\Program Files (x86)\NCSOFT
2014-08-10 15:57 - 2011-10-07 14:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-08-10 15:57 - 2011-05-17 10:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-08-10 15:57 - 2011-03-18 14:30 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-08-10 15:57 - 2011-03-18 14:28 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-08-10 15:55 - 2013-05-14 22:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-08-10 15:55 - 2011-05-20 15:39 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2014-08-10 15:55 - 2011-04-16 13:05 - 00000000 ___RD () C:\MSOCache
2014-08-09 15:15 - 2014-08-09 15:15 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Octodad Dadliest Catch
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieUserList
2014-08-08 20:51 - 2014-08-08 20:51 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieSiteList
2014-08-08 20:51 - 2014-08-08 20:50 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-08 20:51 - 2012-08-05 19:10 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Google
2014-08-08 18:45 - 2014-08-08 18:45 - 00001299 _____ () C:\DelFix.txt
2014-08-08 18:44 - 2014-08-08 18:44 - 00709564 _____ () C:\Users\Thomas\Downloads\delfix_10.8.exe
2014-08-08 16:40 - 2014-08-08 16:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-08 16:39 - 2011-03-25 20:12 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-08 15:40 - 2014-08-08 15:40 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-08 15:38 - 2014-08-08 15:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager [1].exe
2014-08-08 15:36 - 2014-08-08 15:36 - 00787392 _____ ( ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager.exe
2014-08-07 19:52 - 2014-08-07 19:52 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-07 19:52 - 2014-08-07 19:52 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-07 19:50 - 2014-08-07 19:44 - 32047680 _____ () C:\Users\Thomas\Downloads\Firefox_Setup_de31.0.exe
2014-08-07 19:39 - 2014-05-23 11:45 - 00009315 _____ () C:\Users\Thomas\Desktop\Stunden Kiosk.xlsx
2014-08-07 19:34 - 2011-03-18 15:02 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-08-07 10:00 - 2014-08-07 09:55 - 00004238 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-08-06 23:48 - 2014-02-12 20:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-08-06 23:48 - 2014-02-12 20:41 - 00000000 ____D () C:\GOG Games
2014-08-06 23:47 - 2014-08-06 23:44 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-06 23:47 - 2011-03-18 14:36 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-07-30 15:40 - 2014-01-13 22:57 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Battle.net
2014-07-18 16:09 - 2014-07-18 16:09 - 00002869 _____ () C:\Users\Thomas\Desktop\Mein Film22.wlmp

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-07 10:58

==================== End Of Log ============================
--- --- ---

--- --- ---


Security Checkup

Code:
Results of screen317's Security Check version 0.99.86 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
avast! Antivirus 
 Antivirus out of date! 
`````````Anti-malware/Other Utilities Check:`````````
 Adobe Flash Player 14.0.0.145 
 Adobe Reader XI 
 Mozilla Firefox (31.0)
````````Process Check: objlist.exe by Laurent```````` 
 AVAST Software Avast AvastSvc.exe 
 AVAST Software Avast AvastUI.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
ESET:

Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=b3c27b77a40d0f4394b491a966021735
# engine=19617
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-12 02:44:02
# local_time=2014-08-12 04:44:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=777 16777213 100 100 172840 184564514 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 16126 159484492 0 0
# scanned=191451
# found=7
# cleaned=0
# scan_time=4450
sh=8F28C8D1567940B973B4548286F04202D1821ABC ft=1 fh=fe7981ae83438545 vn="Variante von Win32/AdWare.iBryte.AX Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Thomas\AppData\Roaming\Setup.exe.vir"
sh=8F28C8D1567940B973B4548286F04202D1821ABC ft=1 fh=fe7981ae83438545 vn="Variante von Win32/AdWare.iBryte.AX Anwendung" ac=I fn="C:\Users\Thomas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NL75I6ZS\Setup[1].exe"
sh=55355942E2D03BB6C256F2222C9233E9213BA7CC ft=1 fh=74bc3bfee77212ad vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thomas\Downloads\mbam-setup-2.0.2.1012_CB-DL-Manager.exe"
sh=FF273D0017363755214FA5CD888C2C2D54721700 ft=1 fh=0089eae0191970f8 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll"
sh=A70EFAB5F2D2D83AD2B7E0304169C73F6D0EC700 ft=1 fh=011924ad9c4ebdbf vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"
sh=6353EF828F8CB683E9FC8030F00F1A0AF2CF89C9 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="D:\THOMAS-PC\Backup Set 2011-03-19 155440\Backup Files 2011-05-15 190002\Backup files 1.zip"
sh=DA2208C698DA30FA77195F7894F44C84EBBD3636 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="D:\THOMAS-PC\Backup Set 2011-06-13 110024\Backup Files 2011-06-13 110024\Backup files 9.zip"
Bei Eset hat es ca 7 Infizierte Dateien gefunden...

Internet läuft aber immernoch langsam, downloadrate bei maximal 260KB, von ehemals 2MB/s:confused::confused:

EDIT: Was ichnoch hinzufügen sollte, ich hatte mal eine Meldung über einen IP Adressen Konflikt (habe mir nichts weiter dabei gedacht), dass meine IP zweimal im Netzwerk wäre, oder irgendwie so.. das war auch zu dem Zeitpunkt als das ganze Begann.

schrauber 12.08.2014 18:27
Zitat:
EDIT: Was ichnoch hinzufügen sollte, ich hatte mal eine Meldung über einen IP Adressen Konflikt (habe mir nichts weiter dabei gedacht), dass meine IP zweimal im Netzwerk wäre, oder irgendwie so.. das war auch zu dem Zeitpunkt als das ganze Begann.
ach, echt? :D

Das is ja mal ne Neuigkeit ;). Bissl früher wäre auch cool gewesen :).

Beschreib mal bitte dein Netzwerk, vom Kabel in der Wand bis zum Rechner, Teil für Teil.

CplHicks 12.08.2014 18:36
PC Neugestartet und siehe da, Internet läuft jetzt wie geschmiert :) also haben deine Maßnahmen gefruchtet, ich danke dir!:daumenhoc :daumenhoc Spende an euch kommt

schrauber 12.08.2014 18:53
Beantworte bitte trotzdem obiges, möglich dass der IP konflikt wieder kommt :)

CplHicks 12.08.2014 20:15
Anbieter ist KabelBW, habe von denen auch den Router (mit Wlan) Router geht in die Wand per Kabel, und den PC habe ich per Wlan mit dem Router verbunden (Fritz Wlan Stick)

schrauber 13.08.2014 10:46
Du nutzt also das integrierte WLAN des Kabel Modems für 3 Euro im Monat? Oder hast du hinter das Modem nochmal selbst nen Wlan Router gesteckt?

Stick am Rechner? Hat der Rechner kein integriertes WLAN? Wieviele Geräte sind im Netzwerk?

CplHicks 13.08.2014 15:33
Genau ich nutze das integriete WLan des Modems. Nein Mein PC hat kein integrietes WLan ich muss die Verbindung durch einen WLan Stick herstellen. Am Netzwerk hängen eine Xbox One / Xbox 360, zwei Handys, ein laptop sowie ein Desktop PC.


Alle Zeitangaben in WEZ +1. Es ist jetzt 18:43 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131