Trojaner-Board - Wieder ein Trojaner und eine Adware...

Also...

Hier die FRST.txt:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-12-2014 01

Ran by Tobi (administrator) on TOBI-PC on 21-12-2014 18:39:12

Running from C:\Users\Tobi\Desktop

Loaded Profiles: Tobi &  (Available profiles: Tobi)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

() C:\Users\Tobi\AppData\Local\MediaFire Desktop\MFUsnMonitorService.exe

() C:\Windows\System32\PnkBstrA.exe

() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Microsoft Corp.) C:\Program Files (x86)\Steam\SteamApps\common\FSX\fsx.exe

(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-07-02] (Realtek Semiconductor)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-12-08] (Raptr, Inc)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-17] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [60640 2014-12-06] (Razer Inc.)

HKU\S-1-5-21-1580617849-48991686-1063204159-1000\...\Run: [Spotify Web Helper] => C:\Users\Tobi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-12] (Spotify Ltd)

HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\Tobi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-12] (Spotify Ltd)

ShellIconOverlayIdentifiers: [1MediaFireIconError] -> {5EE8C634-CDC0-453D-9731-DF0B19F4E807} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon3_397b1.dll (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconReadOnly] -> {7995D0FC-769B-4197-AEC0-991921CB99E1} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon5_397b1.dll (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconSynched] -> {9A3B79CB-D899-40B5-8DBC-20447F1ADC8F} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon_397b1.dll (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconSyncing] -> {C4D81971-6B13-4173-AB21-F83AD20CCC04} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon2_397b1.dll (TODO: <Company name>)

ShellIconOverlayIdentifiers: [MediaFireIconLock] -> {759F3E92-F4E8-4953-8315-238B8B17E0F3} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon4_397b1.dll (TODO: <Company name>)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\S-1-5-21-1580617849-48991686-1063204159-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

SearchScopes: HKU\S-1-5-21-1580617849-48991686-1063204159-1000 -> DefaultScope {B274D83D-369F-40A7-BB68-77BA5A7DE839} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=614363&p={searchTerms}

SearchScopes: HKU\S-1-5-21-1580617849-48991686-1063204159-1000 -> {B274D83D-369F-40A7-BB68-77BA5A7DE839} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=614363&p={searchTerms}

SearchScopes: HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {B274D83D-369F-40A7-BB68-77BA5A7DE839} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=614363&p={searchTerms}

SearchScopes: HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {B274D83D-369F-40A7-BB68-77BA5A7DE839} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=614363&p={searchTerms}

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\fhvxu8oi.default

FF Keyword.URL: https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=614363&p=

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()

FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll (EA Digital Illusions CE AB)

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1580617849-48991686-1063204159-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tobi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-1580617849-48991686-1063204159-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF Plugin HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tobi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF SearchPlugin: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\fhvxu8oi.default\searchplugins\yahoo_ff.xml

FF Extension: Adblock Plus - C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\fhvxu8oi.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-24]
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP168C4545-C8E4-471A-B49E-7974020A0B18&SSPV=

CHR StartupUrls: Default -> "hxxp://www.facebook.com/"

CHR DefaultSearchKeyword: Default -> google.com_

CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

CHR Profile: C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Magic Actions for YouTube™) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-07-01]

CHR Extension: (Angry Birds) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-07-01]

CHR Extension: (Google Drive) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-01]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]

CHR Extension: (YouTube) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-01]

CHR Extension: (Adblock Plus) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-02]

CHR Extension: (Google-Suche) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-01]

CHR Extension: (Google Wallet) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-01]

CHR Extension: (Battlelog Emblem Editor Extended) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\noagedoiolkfaoaknohhepocfeooibjb [2014-08-16]

CHR Extension: (Google Mail) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-01]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [807672 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-16] (Avira Operations GmbH & Co. KG)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-09-24] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-09-24] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-09-24] (BlueStack Systems, Inc.)

R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-08-08] (CyberGhost S.R.L)

R2 MF NTFS Monitor; C:\Users\Tobi\AppData\Local\MediaFire Desktop\MFUsnMonitorService.exe [456504 2014-09-08] ()

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-21] (Electronic Arts)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-15] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-14] ()

R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [186048 2014-12-09] ()

R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [105448 2014-12-06] (Razer Inc.)

S2 PdiService; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-06-24] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-10-14] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-09-24] (BlueStack Systems)

R2 mfmonitor; C:\Windows\System32\DRIVERS\mfmonitor_x64.sys [20696 2014-09-08] (Windows (R) Win 7 DDK provider)

R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2014-12-09] (Razer, Inc.)

R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129856 2014-09-02] (Razer, Inc.)

S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-05-27] (Samsung Electronics)

S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-12-21 18:39 - 2014-12-21 18:39 - 02122240 _____ (Farbar) C:\Users\Tobi\Desktop\FRST64.exe

2014-12-21 18:39 - 2014-12-21 18:39 - 00017767 _____ () C:\Users\Tobi\Desktop\FRST.txt

2014-12-21 18:39 - 2014-12-21 18:39 - 00000000 ____D () C:\FRST

2014-12-21 16:45 - 2014-12-21 17:13 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-12-21 16:45 - 2014-12-21 16:45 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-12-21 16:45 - 2014-12-21 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-12-21 16:45 - 2014-12-21 16:45 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-12-21 16:45 - 2014-12-21 16:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-12-21 16:45 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-12-21 16:45 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-12-21 16:45 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-12-21 16:44 - 2014-12-21 16:44 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Tobi\Desktop\mbam-setup-2.0.4.1028.exe

2014-12-21 12:33 - 2014-12-21 12:33 - 00000000 ____D () C:\Windows\SysWOW64\DCS

2014-12-21 11:44 - 2014-12-21 11:45 - 00003146 _____ () C:\Windows\System32\Tasks\Run_Bobby_Browser

2014-12-21 11:40 - 2014-12-21 11:40 - 01588834 _____ (KC Softwares ) C:\Users\Tobi\Desktop\sumo.exe

2014-12-21 00:15 - 2014-12-21 00:22 - 00001252 _____ () C:\Users\Public\Desktop\Razer Cortex.lnk

2014-12-21 00:15 - 2014-12-21 00:15 - 00007598 _____ () C:\Users\Tobi\AppData\Local\Resmon.ResmonCfg

2014-12-21 00:15 - 2014-12-21 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer

2014-12-21 00:11 - 2014-12-21 00:13 - 21976768 _____ (Razer Inc. ) C:\Users\Tobi\Desktop\RazerCortexSetup_5.1.38.0.exe

2014-12-20 19:20 - 2014-12-20 19:20 - 00287646 _____ () C:\Windows\msxml4-KB973688-enu.LOG

2014-12-20 19:19 - 2014-12-20 19:20 - 00291736 _____ () C:\Windows\msxml4-KB954430-enu.LOG

2014-12-20 17:07 - 2014-12-21 16:49 - 00000000 ____D () C:\Users\Tobi\Documents\Thief

2014-12-20 13:53 - 2014-12-20 13:55 - 00000000 ____D () C:\Program Files (x86)\Addit! Pro FSX

2014-12-20 13:53 - 2014-12-20 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Addit! Pro For Flight Simulator X

2014-12-20 13:52 - 2014-12-20 13:52 - 00000000 ____D () C:\Users\Tobi\Desktop\apxv741

2014-12-20 13:52 - 2014-12-20 13:52 - 00000000 ____D () C:\Users\Tobi\AppData\Local\{B6F82D7F-FF02-4BBF-8020-5C83017A38CA}

2014-12-20 13:51 - 2014-12-20 13:52 - 11379618 _____ () C:\Users\Tobi\Desktop\apxv741.zip

2014-12-19 23:30 - 2014-12-19 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-12-19 23:30 - 2014-12-19 23:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-12-19 23:30 - 2014-12-19 23:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-12-19 23:29 - 2014-12-19 23:29 - 13087456 _____ (Microsoft Corporation) C:\Users\Tobi\Desktop\Silverlight_x64.exe

2014-12-19 18:10 - 2014-12-21 18:11 - 00000000 ____D () C:\Users\Tobi\Documents\Flight Simulator X Files

2014-12-19 18:03 - 2014-12-19 18:03 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0

2014-12-18 22:06 - 2014-12-18 22:06 - 00008891 _____ () C:\Users\Tobi\AppData\Local\recently-used.xbel

2014-12-18 22:03 - 2014-12-18 22:03 - 00127564 _____ () C:\Users\Tobi\PL_bild.xcf

2014-12-18 16:07 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-12-18 16:07 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-12-16 18:22 - 2014-12-16 18:22 - 00000219 _____ () C:\Users\Tobi\Desktop\Team Fortress 2.url

2014-12-14 16:45 - 2014-12-14 16:45 - 00018280 _____ () C:\Users\Tobi\Documents\Massage des Rückens!.odt

2014-12-14 00:23 - 2014-12-14 00:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mono 3.2.3 for Windows

2014-12-14 00:23 - 2014-12-14 00:23 - 00000000 ____D () C:\Program Files (x86)\Mono-3.2.3

2014-12-14 00:16 - 2014-12-14 00:19 - 103273707 _____ (Mono ) C:\Users\Tobi\Desktop\mono-3.2.3-gtksharp-2.12.11-win32-0.exe

2014-12-13 23:55 - 2014-12-14 00:43 - 00000000 ____D () C:\Users\Tobi\Desktop\Cities in Motion 2 Mods

2014-12-13 23:03 - 2014-12-13 23:10 - 277664256 _____ () C:\Users\Tobi\Desktop\ChristmasShopperSimulator_v1.0.msi

2014-12-13 19:36 - 2014-12-13 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid

2014-12-13 19:36 - 2014-12-13 19:36 - 00000000 ____D () C:\Program Files (x86)\Xvid

2014-12-13 19:36 - 2011-05-30 14:42 - 00255488 _____ () C:\Windows\system32\xvidvfw.dll

2014-12-13 19:36 - 2011-05-30 14:42 - 00240640 _____ () C:\Windows\SysWOW64\xvidvfw.dll

2014-12-13 19:36 - 2011-05-23 10:52 - 00153088 _____ () C:\Windows\SysWOW64\xvid.ax

2014-12-13 19:36 - 2011-05-23 08:49 - 00173568 _____ () C:\Windows\system32\xvid.ax

2014-12-13 19:36 - 2011-05-23 08:46 - 00645632 _____ () C:\Windows\SysWOW64\xvidcore.dll

2014-12-13 19:36 - 2011-05-23 08:45 - 00696832 _____ () C:\Windows\system32\xvidcore.dll

2014-12-12 19:04 - 2014-12-12 19:04 - 00000017 _____ () C:\Users\Tobi\Desktop\startupvids.txt

2014-12-11 21:22 - 2014-12-11 21:22 - 00000000 ____D () C:\Windows\system32\appraiser

2014-12-11 19:34 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2014-12-11 19:34 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2014-12-11 17:41 - 2014-12-11 17:42 - 00000000 ____D () C:\Users\Tobi\Desktop\440

2014-12-11 17:22 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2014-12-11 17:22 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-12-11 17:22 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2014-12-11 17:22 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-12-11 17:22 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-12-11 17:22 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-12-11 17:22 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-12-11 17:22 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-12-11 17:22 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-12-11 17:22 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-12-11 17:22 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-12-11 17:22 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-12-11 17:22 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-12-11 17:22 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-12-11 17:22 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-12-11 17:22 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-12-11 17:22 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-12-11 17:22 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-12-11 17:22 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-12-11 17:22 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-12-11 17:22 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-12-11 17:22 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-12-11 17:22 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-12-11 17:22 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-12-11 17:22 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-12-11 17:22 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-12-11 17:22 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-12-11 17:22 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-12-11 17:22 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-12-11 17:22 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-12-11 17:22 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-12-11 17:22 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-12-11 17:22 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-12-11 17:22 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-12-11 17:22 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-12-11 17:22 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-12-11 17:22 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-12-11 17:22 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-12-11 17:22 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-12-11 17:22 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-12-11 17:22 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-12-11 17:22 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-12-11 17:22 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-12-11 17:22 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-12-11 17:22 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-12-11 17:22 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-12-11 17:22 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-12-11 17:22 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-12-11 17:22 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-12-11 17:22 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-12-11 17:22 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-12-11 17:22 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-12-11 17:22 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-12-11 17:22 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-12-11 17:22 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-12-11 17:22 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-12-11 17:22 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-12-11 17:22 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-12-11 17:22 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-11 17:22 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2014-12-11 17:20 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-12-11 17:20 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-12-11 17:20 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe

2014-12-11 17:20 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe

2014-12-11 17:20 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-12-11 17:20 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll

2014-12-11 17:20 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2014-12-11 17:20 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll

2014-12-11 17:20 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2014-12-11 17:20 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-12-11 17:20 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll

2014-12-11 17:20 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll

2014-12-11 17:20 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll

2014-12-11 17:20 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

2014-12-09 19:21 - 2014-12-09 19:21 - 00001619 _____ () C:\Users\Tobi\Desktop\Ski Challenge 15 starten.lnk

2014-12-09 19:21 - 2014-12-09 19:21 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ski Challenge 15

2014-12-09 19:16 - 2014-12-09 19:17 - 00000000 ____D () C:\Users\Tobi\Desktop\d2a536_4e9f3d87e5a37

2014-12-09 19:16 - 2014-12-09 19:16 - 00173557 _____ () C:\Users\Tobi\Desktop\d2a536_4e9f3d87e5a37.zip

2014-12-06 16:30 - 2014-12-06 16:30 - 00000000 ____D () C:\Users\Tobi\Desktop\PaintTheTownRed_V1 (1)

2014-12-06 16:26 - 2014-12-06 16:27 - 01448458 _____ () C:\Users\Tobi\Desktop\Shootmephrenia-32Bit-NEW.zip

2014-12-01 16:20 - 2014-12-01 16:20 - 00000000 ____D () C:\Users\Tobi\Desktop\UpvoidMiner

2014-12-01 16:19 - 2014-12-01 16:20 - 19900376 _____ () C:\Users\Tobi\Desktop\UpvoidMiner.zip

2014-11-30 21:29 - 2014-11-30 22:08 - 00000000 ____D () C:\Users\Tobi\Documents\ManiaPlanet

2014-11-30 21:29 - 2014-11-30 21:29 - 00001131 _____ () C:\Users\Public\Desktop\TMStadium.lnk

2014-11-30 21:29 - 2014-11-30 21:29 - 00001083 _____ () C:\Users\Public\Desktop\ManiaPlanet.lnk

2014-11-30 21:29 - 2014-11-30 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManiaPlanet

2014-11-30 21:28 - 2014-11-30 21:55 - 00000000 ____D () C:\ProgramData\ManiaPlanet

2014-11-30 21:28 - 2014-11-30 21:29 - 00000000 ____D () C:\Program Files (x86)\ManiaPlanet

2014-11-30 20:50 - 2014-11-30 21:01 - 00000015 _____ () C:\Users\Tobi\AppData\Local\X-Plane_drm.prf

2014-11-30 19:58 - 2014-11-30 19:58 - 00000080 _____ () C:\Users\Tobi\AppData\Local\X-Plane Installer.prf

2014-11-30 16:58 - 2014-11-30 16:58 - 00000040 _____ () C:\Users\Tobi\AppData\Local\x-plane_install_10.txt

2014-11-30 16:57 - 2014-11-30 16:57 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\AMD

2014-11-30 11:28 - 2014-11-30 11:28 - 00000000 ____D () C:\ProgramData\ATI

2014-11-30 11:28 - 2014-11-30 11:28 - 00000000 ____D () C:\Program Files (x86)\AMD AVT

2014-11-30 11:27 - 2014-11-30 11:27 - 00056720 _____ () C:\Windows\SysWOW64\CCCInstall_201411301127516334.log

2014-11-30 11:27 - 2014-11-30 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

2014-11-30 11:26 - 2014-11-30 11:26 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies

2014-11-29 11:57 - 2014-12-01 18:30 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\PJShooter

2014-11-29 11:53 - 2014-11-29 11:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Playfire

2014-11-29 11:53 - 2014-11-29 11:53 - 00000000 ____D () C:\Program Files (x86)\Playfire

2014-11-28 21:53 - 2014-11-28 22:26 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Tropico 4 Demo

2014-11-28 21:53 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2014-11-28 21:53 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2014-11-28 21:53 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2014-11-28 21:53 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2014-11-28 20:36 - 2014-11-28 20:37 - 00000000 ____D () C:\Users\Tobi\Documents\Shadow Warrior Demo

2014-11-27 18:03 - 2014-11-27 18:03 - 00000000 ____D () C:\Users\Tobi\Documents\SimCity

2014-11-27 16:20 - 2014-11-27 16:20 - 00000000 ____D () C:\Users\Tobi\AppData\Local\webkit

2014-11-27 15:58 - 2014-11-27 15:58 - 00000000 ____D () C:\Users\Tobi\.thumbnails

2014-11-27 15:57 - 2014-12-18 22:06 - 00000000 ____D () C:\Users\Tobi\AppData\Local\gtk-2.0

2014-11-27 15:56 - 2014-12-18 22:07 - 00000000 ____D () C:\Users\Tobi\.gimp-2.8

2014-11-27 15:56 - 2014-11-27 15:56 - 00000000 ____D () C:\Users\Tobi\AppData\Local\gegl-0.2

2014-11-27 15:55 - 2014-11-27 15:55 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk

2014-11-27 15:54 - 2014-11-27 15:55 - 00000000 ____D () C:\Program Files\GIMP 2

2014-11-26 23:00 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2014-11-26 23:00 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2014-11-26 23:00 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2014-11-26 23:00 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2014-11-26 21:21 - 2014-12-03 22:57 - 00019893 _____ () C:\Users\Tobi\Documents\AUFWÄRMTRAINING_DEB.odt

2014-11-26 17:30 - 2014-11-26 17:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved

2014-11-24 19:14 - 2014-11-24 19:14 - 00016921 _____ () C:\Users\Tobi\Desktop\Aufwärmtraining_DEB.odt

2014-11-22 15:54 - 2014-11-22 15:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-12-21 18:10 - 2014-07-01 17:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-12-21 18:04 - 2014-08-26 16:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-21 17:30 - 2014-07-02 17:32 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-12-21 17:17 - 2009-07-14 05:45 - 00028704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-12-21 17:17 - 2009-07-14 05:45 - 00028704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-12-21 17:14 - 2014-07-01 17:26 - 01633160 _____ () C:\Windows\WindowsUpdate.log

2014-12-21 17:12 - 2014-09-21 02:03 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Raptr

2014-12-21 17:10 - 2014-07-01 17:53 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-12-21 17:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-12-21 17:09 - 2010-11-21 04:47 - 00180966 _____ () C:\Windows\PFRO.log

2014-12-21 17:09 - 2009-07-14 05:51 - 00067488 _____ () C:\Windows\setupact.log

2014-12-21 17:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2014-12-21 12:34 - 2014-08-31 21:38 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Spotify

2014-12-21 11:50 - 2014-07-13 15:07 - 00000000 ____D () C:\ProgramData\Origin

2014-12-21 11:49 - 2014-07-13 15:07 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-12-21 00:16 - 2014-08-26 10:11 - 00000000 ____D () C:\Users\Tobi\AppData\Local\Razer

2014-12-21 00:15 - 2014-08-26 10:10 - 00000000 ____D () C:\ProgramData\Razer

2014-12-21 00:15 - 2014-08-26 10:10 - 00000000 ____D () C:\Program Files (x86)\Razer

2014-12-18 22:03 - 2014-07-01 17:26 - 00000000 ____D () C:\Users\Tobi

2014-12-18 21:19 - 2014-08-31 21:39 - 00000000 ____D () C:\Users\Tobi\AppData\Local\Spotify

2014-12-14 12:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-12-11 21:22 - 2014-07-03 16:06 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-12-11 21:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-12-11 21:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat

2014-12-11 19:39 - 2014-07-02 19:39 - 00000000 ____D () C:\Windows\system32\MRT

2014-12-11 19:35 - 2014-07-02 19:39 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-12-11 18:04 - 2014-08-26 16:00 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-11 18:04 - 2014-07-22 18:06 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-11 18:04 - 2014-07-22 18:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-11 17:51 - 2011-04-12 08:43 - 00699092 _____ () C:\Windows\system32\perfh007.dat

2014-12-11 17:51 - 2011-04-12 08:43 - 00149232 _____ () C:\Windows\system32\perfc007.dat

2014-12-11 17:51 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-12-10 15:43 - 2014-09-21 02:03 - 00000000 ____D () C:\Program Files (x86)\Raptr

2014-12-09 23:21 - 2014-09-22 21:32 - 00037184 _____ (Razer, Inc.) C:\Windows\system32\Drivers\rzpmgrk.sys

2014-12-09 19:19 - 2014-09-22 22:42 - 00000000 ____D () C:\Games

2014-12-05 18:44 - 2014-07-13 15:20 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-12-05 18:39 - 2014-07-13 15:20 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-12-05 16:57 - 2014-07-08 17:02 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2014-11-30 11:28 - 2014-07-01 17:38 - 00000000 ____D () C:\ProgramData\AMD

2014-11-30 11:25 - 2014-07-02 16:57 - 00000000 ____D () C:\Program Files\ATI Technologies

2014-11-30 11:21 - 2014-07-02 16:50 - 00000000 ____D () C:\AMD

2014-11-30 11:09 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-11-29 11:56 - 2014-09-21 01:58 - 00000000 ____D () C:\Users\Tobi\AppData\Local\Vulcan

2014-11-29 11:53 - 2014-09-21 01:57 - 00000925 _____ () C:\Users\Public\Desktop\Playfire.lnk

2014-11-29 11:53 - 2014-07-02 16:57 - 00000000 ____D () C:\ProgramData\Package Cache

2014-11-28 21:53 - 2014-07-02 17:23 - 00142995 _____ () C:\Windows\DirectX.log

2014-11-27 19:31 - 2014-09-21 23:43 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\uTorrent

2014-11-27 19:20 - 2014-07-13 15:14 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-11-27 19:20 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-11-22 21:12 - 2014-09-24 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-11-21 21:02 - 2014-07-11 21:58 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Audacity
 

Some content of TEMP:

====================

C:\Users\Tobi\AppData\Local\Temp\avgnt.exe

C:\Users\Tobi\AppData\Local\Temp\BingBarSetup-Partner.exe

C:\Users\Tobi\AppData\Local\Temp\raptrpatch.exe

C:\Users\Tobi\AppData\Local\Temp\raptr_stub.exe

C:\Users\Tobi\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Tobi\AppData\Local\Temp\sonarinst.exe

C:\Users\Tobi\AppData\Local\Temp\tmp27F9.exe

C:\Users\Tobi\AppData\Local\Temp\_is9B06.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-12-16 12:03
 

==================== End Of Log ============================

--- --- ---

Und die addition.txt:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-12-2014 01

Ran by Tobi at 2014-12-21 18:39:49

Running from C:\Users\Tobi\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

µTorrent (HKU\S-1-5-21-1580617849-48991686-1063204159-1000\...\uTorrent) (Version: 3.4.2.34024 - BitTorrent Inc.)

µTorrent (HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\uTorrent) (Version: 3.4.2.34024 - BitTorrent Inc.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Addit! Pro For Flight Simulator X (HKLM-x32\...\{8DDD9A95-43C2-420F-B188-A1A62B202201}) (Version: 7.4.0001 - Joseph Stearns)

Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (HKLM\...\{A3808FE1-6B99-1B1F-F18A-FE658F175C0E}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

ANDY OS (HKLM\...\ANDY OS) (Version: 1.1 - andyroid.net)

Angry Birds Space (HKLM-x32\...\Steam App 210550) (Version:  - Rovio Entertainment Ltd)

Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.12.9.0 - Asmedia Technology)

Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)

Audiosurf (HKLM-x32\...\Steam App 12900) (Version:  - Dylan Fitterer)

Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.23028 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.3.4073 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{D0B14565-60F3-4276-9265-91906896EFD0}) (Version: 0.9.3.4073 - BlueStack Systems, Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Cities in Motion 2 (HKLM-x32\...\Steam App 225420) (Version:  - Colossal Order Ltd.)

CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dark Messiah of Might & Magic Single Player (HKLM-x32\...\Steam App 2100) (Version:  - Arkane Studios)

Das Wichsspiel (HKU\S-1-5-21-1580617849-48991686-1063204159-1000\...\b4d6361fca446621) (Version: 1.0.0.6 - Das Wichsspiel)

Das Wichsspiel (HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\b4d6361fca446621) (Version: 1.0.0.6 - Das Wichsspiel)

Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)

Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.5.1 - Electronic Arts)

Die Sims™ 3 Luxus-Accessoires (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.0.38 - Electronic Arts)

Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)

Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)

Euro Truck Simulator 2 Multiplayer 0.1.0.7.3 Alpha (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.0.7.3 Alpha - ETS2MP Team)

Evolve (HKLM-x32\...\Steam App 273350) (Version:  - Turtle Rock Studios)

Far Cry 3 Blood Dragon (HKLM-x32\...\{A071F478-73E0-4143-AE55-4DD6BABD74F5}) (Version: 1.02 - Ubisoft)

Fork Parker's Holiday Profit Hike (HKLM-x32\...\Steam App 339120) (Version:  - Dodge Roll)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Free YouTube to MP3 Converter version 3.12.43.806 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.43.806 - DVDVideoSoft Ltd.)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Gunpoint version v1.1 (HKLM-x32\...\{B33EDF25-91DF-40FC-B2F7-FA19E3F0489F}}_is1) (Version: v1.1 - )

Hard Time  (HKLM-x32\...\Hard Time) (Version:  - MDickie)

I am Bread (HKLM-x32\...\Steam App 327890) (Version:  - Bossa Studios)

iTunes (HKLM\...\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)

Java 8 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218020F0}) (Version: 8.0.200 - Oracle Corporation)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

KeePass Password Safe 1.27 (HKLM-x32\...\KeePass Password Safe_is1) (Version: 1.27 - Dominik Reichl)

K-Lite Codec Pack 10.6.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.0 - )

Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )

Leawo Blu-ray Player version  1.8.0.2 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.8.0.2 - leawo Software)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

ManiaPlanet (HKLM-x32\...\ManiaPlanet_is1) (Version:  - Nadeo)

MediaFire Desktop (HKLM-x32\...\MediaFire Desktop 1.3.9.10486) (Version: 1.3.9.10486 - MediaFire)

Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.56 - Peter Lorenz)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Flight Simulator SimConnect Client v10.0.62607.0 (HKLM-x32\...\{33D89314-361A-4495-A1E1-0ACBCE08F78D}) (Version: 10.0.62607.0 - Microsoft Corporation)

Microsoft Flight Simulator X: Steam Edition (HKLM-x32\...\Steam App 314160) (Version:  - Microsoft Game Studios)

Microsoft Games for Windows - LIVE (HKLM-x32\...\{F112F66E-25CA-42DD-983C-6118EB38F606}) (Version: 3.0.89.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}) (Version: 3.0.19.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Mono for Windows 3.2.3 (HKLM-x32\...\{afbbbda2-1dd7-11e3-ae37-080027022fbf}_is1) (Version: 3.2.3 - Mono)

MouseServer Version 1.5.1.0 (HKLM-x32\...\{E13018F5-FFC7-4729-9C1B-1A85807D03E6}_is1) (Version: 1.5.1.0 - Necta Co.)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 33.1.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 de)) (Version: 33.1.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.2 - Mozilla)

MPC-HC 1.7.6 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.6 - MPC-HC Team)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

My Game Long Name (HKLM\...\UDK-5e437d29-3b77-4de2-bba5-2e7f217ea09b) (Version:  - Epic Games, Inc.)

NEOTOKYO° (HKLM-x32\...\Steam App 244630) (Version:  - STUDIO RADI-8)

NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)

NoLimits 2 Demo (remove only) (HKLM\...\NoLimits 2 Demo) (Version:  - )

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)

Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)

PixelJunk™ Shooter (HKLM-x32\...\Steam App 255870) (Version:  - Double Eleven)

Playfire (HKLM-x32\...\{6b69b0a4-05aa-4ee8-a108-0ebb857ecba4}) (Version: 0.0.72.0 - Playfire)

Playfire (x32 Version: 0.0.72.0 - Playfire) Hidden

Pool Nation (HKLM-x32\...\Steam App 254440) (Version:  - Cherry Pop Games)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

Quake Live (HKLM-x32\...\Steam App 282440) (Version:  - id Software)

Quantum Rush (HKLM-x32\...\{9A7BBB91-C643-471D-BC9B-9A1B451FF204}_is1) (Version: 0.22 - Game Art Studio GmbH)

QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 5.2.22.0 - Razer Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)

Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)

Red Faction: Guerrilla  (HKLM-x32\...\Steam App 20500) (Version:  - Volition)

ROCCAT Power-Grid Version 0.459 (HKLM-x32\...\{953CF6E6-4EC8-4E55-A263-720CEBD591FE}_is1) (Version: 0.459 - ROCCAT GmbH)

Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)

Shutdown4U (HKLM-x32\...\Shutdown4U) (Version:  - )

Ski Challenge 15 (HKU\S-1-5-21-1580617849-48991686-1063204159-1000\...\sc15-GAMETWIST_MAIN) (Version:  - )

Ski Challenge 15 (HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\sc15-GAMETWIST_MAIN) (Version:  - )

Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)

Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - )

Spotify (HKU\S-1-5-21-1580617849-48991686-1063204159-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)

Spotify (HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Supraball (HKLM-x32\...\Supraball) (Version:  - Supra Games Gbr)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)

The Crew (Beta) (HKLM-x32\...\Uplay Install 750) (Version:  - Ubisoft)

Thief (HKLM-x32\...\Steam App 239160) (Version:  - Eidos-Montréal)

Unity Web Player (HKU\S-1-5-21-1580617849-48991686-1063204159-1000\...\UnityWebPlayer) (Version: 4.5.2f1 - Unity Technologies ApS)

Unity Web Player (HKU\S-1-5-21-1580617849-48991686-1063204159-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\UnityWebPlayer) (Version: 4.5.2f1 - Unity Technologies ApS)

Uplay (HKLM-x32\...\Uplay) (Version: 2.1 - Ubisoft)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VR-NetWorld (HKLM-x32\...\{8815F011-43AF-4F50-BBD8-D78ED3D6F5B9}) (Version:  - )

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)

Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

18-12-2014 19:33:37 Windows Update

19-12-2014 18:03:25 Installed MSXML 4.0 SP2 Parser and SDK

19-12-2014 18:04:13 Microsoft Flight Simulator SimConnect Client v10.0.62607.0 wird installiert

20-12-2014 13:52:58 Installed Addit! Pro For Flight Simulator X.

20-12-2014 19:19:17 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {1A95D863-F21C-4321-ACFA-6F43DBEB91A6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-11] (Adobe Systems Incorporated)

Task: {20734C00-88DB-4A1E-B35D-8814C162E486} - System32\Tasks\{009332E5-012E-40B0-BC05-70E51213EF3D} => Chrome.exe hxxp://ui.skype.com/ui/0/6.18.0.106/de/go/help.faq.installer?LastError=1601

Task: {5A863FA9-D295-40F4-AB9A-9D1C53F38B9A} - System32\Tasks\Run_Bobby_Browser => C:\Users\Tobi\AppData\Local\BoBrowser\Application\bobrowser.exe <==== ATTENTION

Task: {5BFDE561-6400-4C10-B05E-2261D7191C5F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-01] (Google Inc.)

Task: {C53F247D-AC38-48B4-8631-93ADCA562A58} - System32\Tasks\Driver Booster SkipUAC (Tobi) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe

Task: {D55B525A-FCB0-4B78-B40E-B034AF54723C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-01] (Google Inc.)

Task: {FD3B49CC-3F6A-4FC5-A9C6-25FBD1338258} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-09-24 16:40 - 2014-09-08 22:00 - 00456504 _____ () C:\Users\Tobi\AppData\Local\MediaFire Desktop\MFUsnMonitorService.exe

2014-08-15 17:11 - 2014-08-15 17:11 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

2014-12-09 23:22 - 2014-12-09 23:22 - 00186048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

2014-07-03 12:20 - 2014-07-03 12:20 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-07-03 12:19 - 2014-07-03 12:19 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-12-12 23:11 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll

2014-12-12 23:11 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll

2014-12-12 23:11 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll

2014-12-12 23:11 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll

2014-08-24 16:49 - 2014-12-01 22:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-08-24 16:49 - 2014-12-01 22:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-08-24 16:49 - 2014-12-01 22:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-08-24 16:49 - 2014-12-01 22:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-07-02 17:34 - 2014-11-11 19:47 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2014-12-03 22:25 - 2014-12-02 01:29 - 05002752 _____ () C:\Program Files (x86)\Steam\v8.dll

2014-12-03 22:25 - 2014-12-02 01:29 - 01612800 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2014-12-03 22:25 - 2014-12-02 01:29 - 01210368 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-07-02 17:34 - 2014-12-20 00:38 - 02226880 _____ () C:\Program Files (x86)\Steam\video.dll

2014-08-24 16:49 - 2014-12-01 22:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2014-07-02 17:34 - 2014-12-20 00:38 - 00696000 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2014-07-02 17:34 - 2014-12-20 00:38 - 34641288 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2014-07-24 16:23 - 2014-12-20 00:38 - 01709960 _____ () C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll

2014-07-02 17:34 - 2014-12-20 00:38 - 00357568 _____ () C:\Program Files (x86)\Steam\steam.dll

2014-12-18 22:35 - 2014-12-19 05:13 - 00528064 _____ () C:\Program Files (x86)\Steam\steamapps\common\FSX\sdkencryptedappticket.dll

2014-12-12 23:11 - 2014-12-06 02:50 - 14913352 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VR-NetWorld Auftragsprüfung.lnk => C:\Windows\pss\VR-NetWorld Auftragsprüfung.lnk.CommonStartup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Andy => C:\Program Files\Andy\HandyAndy.exe

MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe

MSCONFIG\startupreg: DT PLP => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -PLP

MSCONFIG\startupreg: Dxtory Update Checker 2.0 => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe

MSCONFIG\startupreg: GoogleChromeAutoLaunch_9FFD629E84CE89AE22FC14953FDFAFA6 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start

MSCONFIG\startupreg: MediaFire Tray => C:\Users\Tobi\AppData\Local\MediaFire Desktop\mf_watch.exe

MSCONFIG\startupreg: PivotSoftware => "C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

MSCONFIG\startupreg: SearchProtection => "C:\Users\Tobi\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart

MSCONFIG\startupreg: Spotify => "C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Tobi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-1580617849-48991686-1063204159-500 - Administrator - Disabled)

Gast (S-1-5-21-1580617849-48991686-1063204159-501 - Limited - Disabled)

Tobi (S-1-5-21-1580617849-48991686-1063204159-1000 - Administrator - Enabled) => C:\Users\Tobi
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/21/2014 06:21:06 PM) (Source: .NET Runtime) (EventID: 1022) (User: )

Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 5524. Meldungs-ID: [0x2509].
 

Error: (12/21/2014 05:11:35 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/21/2014 05:10:43 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/21/2014 04:49:55 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Name des fehlerhaften Moduls: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000083ed63

ID des fehlerhaften Prozesses: 0xc98

Startzeit der fehlerhaften Anwendung: 0xShipping-ThiefGame.exe0

Pfad der fehlerhaften Anwendung: Shipping-ThiefGame.exe1

Pfad des fehlerhaften Moduls: Shipping-ThiefGame.exe2

Berichtskennung: Shipping-ThiefGame.exe3
 

Error: (12/21/2014 04:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/21/2014 04:40:25 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/21/2014 04:16:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Name des fehlerhaften Moduls: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000083ed63

ID des fehlerhaften Prozesses: 0x2c8

Startzeit der fehlerhaften Anwendung: 0xShipping-ThiefGame.exe0

Pfad der fehlerhaften Anwendung: Shipping-ThiefGame.exe1

Pfad des fehlerhaften Moduls: Shipping-ThiefGame.exe2

Berichtskennung: Shipping-ThiefGame.exe3
 

Error: (12/21/2014 04:15:32 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Name des fehlerhaften Moduls: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000083ed63

ID des fehlerhaften Prozesses: 0x16dc

Startzeit der fehlerhaften Anwendung: 0xShipping-ThiefGame.exe0

Pfad der fehlerhaften Anwendung: Shipping-ThiefGame.exe1

Pfad des fehlerhaften Moduls: Shipping-ThiefGame.exe2

Berichtskennung: Shipping-ThiefGame.exe3
 

Error: (12/21/2014 04:14:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Name des fehlerhaften Moduls: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000083ed63

ID des fehlerhaften Prozesses: 0x12c0

Startzeit der fehlerhaften Anwendung: 0xShipping-ThiefGame.exe0

Pfad der fehlerhaften Anwendung: Shipping-ThiefGame.exe1

Pfad des fehlerhaften Moduls: Shipping-ThiefGame.exe2

Berichtskennung: Shipping-ThiefGame.exe3
 

Error: (12/21/2014 04:13:35 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Name des fehlerhaften Moduls: Shipping-ThiefGame.exe, Version: 1.7.0.0, Zeitstempel: 0x5433c73c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000083ed63

ID des fehlerhaften Prozesses: 0x106c

Startzeit der fehlerhaften Anwendung: 0xShipping-ThiefGame.exe0

Pfad der fehlerhaften Anwendung: Shipping-ThiefGame.exe1

Pfad des fehlerhaften Moduls: Shipping-ThiefGame.exe2

Berichtskennung: Shipping-ThiefGame.exe3
 
 

System errors:

=============

Error: (12/21/2014 05:11:12 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (12/21/2014 05:10:43 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (12/21/2014 05:10:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/21/2014 05:10:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Portrait Displays SDK Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/21/2014 05:10:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/21/2014 04:40:25 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (12/21/2014 04:40:07 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (12/21/2014 04:39:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/21/2014 04:39:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Portrait Displays SDK Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/21/2014 04:39:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (12/21/2014 06:21:06 PM) (Source: .NET Runtime) (EventID: 1022) (User: )

Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 5524. Meldungs-ID: [0x2509].
 

Error: (12/21/2014 05:11:35 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/21/2014 05:10:43 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/21/2014 04:49:55 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Shipping-ThiefGame.exe1.7.0.05433c73cShipping-ThiefGame.exe1.7.0.05433c73cc0000005000000000083ed63c9801d01d35a25222a0C:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exeC:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exe01bb344e-8929-11e4-9582-8c89a599acf4
 

Error: (12/21/2014 04:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/21/2014 04:40:25 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/21/2014 04:16:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Shipping-ThiefGame.exe1.7.0.05433c73cShipping-ThiefGame.exe1.7.0.05433c73cc0000005000000000083ed632c801d01d31005eb23cC:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exeC:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exe488fd56b-8924-11e4-8edf-8c89a599acf4
 

Error: (12/21/2014 04:15:32 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Shipping-ThiefGame.exe1.7.0.05433c73cShipping-ThiefGame.exe1.7.0.05433c73cc0000005000000000083ed6316dc01d01d30ea5a3c24C:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exeC:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exe340a1e44-8924-11e4-8edf-8c89a599acf4
 

Error: (12/21/2014 04:14:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Shipping-ThiefGame.exe1.7.0.05433c73cShipping-ThiefGame.exe1.7.0.05433c73cc0000005000000000083ed6312c001d01d30ce4ae6d5C:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exeC:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exe1a1f85bf-8924-11e4-8edf-8c89a599acf4
 

Error: (12/21/2014 04:13:35 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Shipping-ThiefGame.exe1.7.0.05433c73cShipping-ThiefGame.exe1.7.0.05433c73cc0000005000000000083ed63106c01d01d30a2294229C:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exeC:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries2\Win64\Shipping-ThiefGame.exeeeb28db7-8923-11e4-8edf-8c89a599acf4
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-09-17 00:28:54.681

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-09-17 00:28:54.643

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-09-17 00:28:01.037

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-09-17 00:28:00.995

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz

Percentage of memory in use: 43%

Total physical RAM: 8173.64 MB

Available physical RAM: 4655.26 MB

Total Pagefile: 16345.46 MB

Available Pagefile: 11661.86 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:643.82 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 407A0749)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Hier einmal ESET:

Code:

TSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=c5e9cd5b21cf734a82dfa98b4b9c19eb

# engine=21686

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-12-23 10:09:07

# local_time=2014-12-23 11:09:07 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 14972546 171002397 0 0

# scanned=224

# found=1

# cleaned=0

# scan_time=25

sh=55375DAAAEF823841688934CFDC7077D8B289C99 ft=1 fh=fd8f0399fbc248c8 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tobi\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=c5e9cd5b21cf734a82dfa98b4b9c19eb

# engine=21686

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-12-23 11:25:55

# local_time=2014-12-24 12:25:55 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 14977154 171007005 0 0

# scanned=339994

# found=3

# cleaned=3

# scan_time=4479

sh=55375DAAAEF823841688934CFDC7077D8B289C99 ft=1 fh=fd8f0399fbc248c8 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Tobi\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"

sh=AD7D22C1677296CAFF249EEA249B30D3192F0FED ft=1 fh=2d3d2ce8970a56e2 vn="Win32/BundleLoader.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Tobi\Desktop\sumo.exe"

sh=19B1030386CB1B685EF47564DE29428ED83D8ED3 ft=1 fh=de64fed2ea10d63a vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Tobi\Downloads\Driver Booster Free - CHIP-Installer.exe"

Das Programm hat sich einmal am Anfang aufgehängt, daher lief da auch leider was falsch mit dem Löschen und so, so wie es nach dem Log aussieht.

Hier vom SecurityCheck:

Code:

 Results of screen317's Security Check version 0.99.93  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop   

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 Java 8 Update 20  

 Java version 32-bit out of Date! 

  Adobe Flash Player 15.0.0.246 Flash Player out of Date!  

 Adobe Reader XI  

 Mozilla Firefox 33.1.1 Firefox out of Date!  

 Google Chrome (39.0.2171.71) 

 Google Chrome (39.0.2171.95) 
 ````````Process Check: objlist.exe by Laurent````````  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Hier das FRST-Log:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-12-2014 01

Ran by Tobi (administrator) on TOBI-PC on 24-12-2014 01:18:01

Running from C:\Users\Tobi\Desktop

Loaded Profile: Tobi (Available profiles: Tobi)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

() C:\Users\Tobi\AppData\Local\MediaFire Desktop\MFUsnMonitorService.exe

() C:\Windows\System32\PnkBstrA.exe

() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-07-02] (Realtek Semiconductor)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-12-08] (Raptr, Inc)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-17] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [60640 2014-12-06] (Razer Inc.)

HKU\S-1-5-21-1580617849-48991686-1063204159-1000\...\Run: [Spotify Web Helper] => C:\Users\Tobi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-12] (Spotify Ltd)

ShellIconOverlayIdentifiers: [1MediaFireIconError] -> {5EE8C634-CDC0-453D-9731-DF0B19F4E807} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon3_397b1.dll (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconReadOnly] -> {7995D0FC-769B-4197-AEC0-991921CB99E1} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon5_397b1.dll (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconSynched] -> {9A3B79CB-D899-40B5-8DBC-20447F1ADC8F} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon_397b1.dll (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconSyncing] -> {C4D81971-6B13-4173-AB21-F83AD20CCC04} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon2_397b1.dll (TODO: <Company name>)

ShellIconOverlayIdentifiers: [MediaFireIconLock] -> {759F3E92-F4E8-4953-8315-238B8B17E0F3} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon4_397b1.dll (TODO: <Company name>)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\S-1-5-21-1580617849-48991686-1063204159-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1580617849-48991686-1063204159-1000 -> {B274D83D-369F-40A7-BB68-77BA5A7DE839} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=614363&p={searchTerms}

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\fhvxu8oi.default

FF Keyword.URL: https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=614363&p=

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()

FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll (EA Digital Illusions CE AB)

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1580617849-48991686-1063204159-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tobi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-1580617849-48991686-1063204159-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF SearchPlugin: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\fhvxu8oi.default\searchplugins\yahoo_ff.xml

FF Extension: Adblock Plus - C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\fhvxu8oi.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-24]
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP168C4545-C8E4-471A-B49E-7974020A0B18&SSPV=

CHR StartupUrls: Default -> "hxxp://www.facebook.com/"

CHR DefaultSearchKeyword: Default -> google.com_

CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

CHR Profile: C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Magic Actions for YouTube™) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-07-01]

CHR Extension: (Angry Birds) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-07-01]

CHR Extension: (Google Drive) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-01]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]

CHR Extension: (YouTube) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-01]

CHR Extension: (Adblock Plus) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-02]

CHR Extension: (Google-Suche) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-01]

CHR Extension: (Google Wallet) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-01]

CHR Extension: (Battlelog Emblem Editor Extended) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\noagedoiolkfaoaknohhepocfeooibjb [2014-08-16]

CHR Extension: (Google Mail) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-01]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [807672 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-16] (Avira Operations GmbH & Co. KG)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-09-24] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-09-24] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-09-24] (BlueStack Systems, Inc.)

R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-08-08] (CyberGhost S.R.L)

R2 MF NTFS Monitor; C:\Users\Tobi\AppData\Local\MediaFire Desktop\MFUsnMonitorService.exe [456504 2014-09-08] ()

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-21] (Electronic Arts)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-15] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-14] ()

R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [186048 2014-12-09] ()

R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [105448 2014-12-06] (Razer Inc.)

S2 PdiService; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-06-24] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-10-14] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-09-24] (BlueStack Systems)

R2 mfmonitor; C:\Windows\System32\DRIVERS\mfmonitor_x64.sys [20696 2014-09-08] (Windows (R) Win 7 DDK provider)

R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2014-12-09] (Razer, Inc.)

R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129856 2014-09-02] (Razer, Inc.)

S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-05-27] (Samsung Electronics)

S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-12-24 01:05 - 2014-12-24 01:05 - 00852505 _____ () C:\Users\Tobi\Desktop\SecurityCheck.exe

2014-12-23 23:06 - 2014-12-23 23:06 - 02347384 _____ (ESET) C:\Users\Tobi\Desktop\esetsmartinstaller_deu.exe

2014-12-22 19:14 - 2014-12-22 19:14 - 00000624 _____ () C:\Users\Tobi\Desktop\JRT.txt

2014-12-22 19:11 - 2014-12-22 19:11 - 01707646 _____ (Thisisu) C:\Users\Tobi\Desktop\JRT.exe

2014-12-22 19:11 - 2014-12-22 19:11 - 00000000 ____D () C:\Windows\ERUNT

2014-12-22 17:50 - 2014-12-20 17:07 - 00063844 _____ () C:\Users\Tobi\Desktop\ThiefEngine.ini

2014-12-22 17:24 - 2014-12-22 17:58 - 00000000 ____D () C:\AdwCleaner

2014-12-22 17:09 - 2014-12-22 17:09 - 02173952 _____ () C:\Users\Tobi\Desktop\AdwCleaner_4.106.exe

2014-12-21 18:39 - 2014-12-24 01:18 - 00015981 _____ () C:\Users\Tobi\Desktop\FRST.txt

2014-12-21 18:39 - 2014-12-24 01:18 - 00000000 ____D () C:\FRST

2014-12-21 18:39 - 2014-12-21 18:39 - 02122240 _____ (Farbar) C:\Users\Tobi\Desktop\FRST64.exe

2014-12-21 16:45 - 2014-12-22 17:09 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-12-21 16:45 - 2014-12-21 16:45 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-12-21 16:45 - 2014-12-21 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-12-21 16:45 - 2014-12-21 16:45 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-12-21 16:45 - 2014-12-21 16:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-12-21 16:45 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-12-21 16:45 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-12-21 16:45 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-12-21 16:44 - 2014-12-21 16:44 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Tobi\Desktop\mbam-setup-2.0.4.1028.exe

2014-12-21 12:33 - 2014-12-21 12:33 - 00000000 ____D () C:\Windows\SysWOW64\DCS

2014-12-21 00:15 - 2014-12-21 00:22 - 00001252 _____ () C:\Users\Public\Desktop\Razer Cortex.lnk

2014-12-21 00:15 - 2014-12-21 00:15 - 00007598 _____ () C:\Users\Tobi\AppData\Local\Resmon.ResmonCfg

2014-12-21 00:15 - 2014-12-21 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer

2014-12-21 00:11 - 2014-12-21 00:13 - 21976768 _____ (Razer Inc. ) C:\Users\Tobi\Desktop\RazerCortexSetup_5.1.38.0.exe

2014-12-20 19:20 - 2014-12-20 19:20 - 00287646 _____ () C:\Windows\msxml4-KB973688-enu.LOG

2014-12-20 19:19 - 2014-12-20 19:20 - 00291736 _____ () C:\Windows\msxml4-KB954430-enu.LOG

2014-12-20 17:07 - 2014-12-21 16:49 - 00000000 ____D () C:\Users\Tobi\Documents\Thief

2014-12-20 16:38 - 2014-12-20 16:38 - 00000000 ____D () C:\Users\Tobi\Desktop\Win64

2014-12-20 13:53 - 2014-12-20 13:55 - 00000000 ____D () C:\Program Files (x86)\Addit! Pro FSX

2014-12-20 13:53 - 2014-12-20 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Addit! Pro For Flight Simulator X

2014-12-20 13:52 - 2014-12-20 13:52 - 00000000 ____D () C:\Users\Tobi\Desktop\apxv741

2014-12-20 13:52 - 2014-12-20 13:52 - 00000000 ____D () C:\Users\Tobi\AppData\Local\{B6F82D7F-FF02-4BBF-8020-5C83017A38CA}

2014-12-20 13:51 - 2014-12-20 13:52 - 11379618 _____ () C:\Users\Tobi\Desktop\apxv741.zip

2014-12-19 23:30 - 2014-12-19 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-12-19 23:30 - 2014-12-19 23:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-12-19 23:30 - 2014-12-19 23:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-12-19 23:29 - 2014-12-19 23:29 - 13087456 _____ (Microsoft Corporation) C:\Users\Tobi\Desktop\Silverlight_x64.exe

2014-12-19 18:10 - 2014-12-21 21:12 - 00000000 ____D () C:\Users\Tobi\Documents\Flight Simulator X Files

2014-12-19 18:03 - 2014-12-19 18:03 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0

2014-12-18 22:06 - 2014-12-18 22:06 - 00008891 _____ () C:\Users\Tobi\AppData\Local\recently-used.xbel

2014-12-18 22:03 - 2014-12-18 22:03 - 00127564 _____ () C:\Users\Tobi\PL_bild.xcf

2014-12-18 16:07 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-12-18 16:07 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-12-16 18:22 - 2014-12-16 18:22 - 00000219 _____ () C:\Users\Tobi\Desktop\Team Fortress 2.url

2014-12-14 16:45 - 2014-12-14 16:45 - 00018280 _____ () C:\Users\Tobi\Documents\Massage des Rückens!.odt

2014-12-14 00:23 - 2014-12-14 00:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mono 3.2.3 for Windows

2014-12-14 00:23 - 2014-12-14 00:23 - 00000000 ____D () C:\Program Files (x86)\Mono-3.2.3

2014-12-14 00:16 - 2014-12-14 00:19 - 103273707 _____ (Mono ) C:\Users\Tobi\Desktop\mono-3.2.3-gtksharp-2.12.11-win32-0.exe

2014-12-13 23:55 - 2014-12-14 00:43 - 00000000 ____D () C:\Users\Tobi\Desktop\Cities in Motion 2 Mods

2014-12-13 23:03 - 2014-12-13 23:10 - 277664256 _____ () C:\Users\Tobi\Desktop\ChristmasShopperSimulator_v1.0.msi

2014-12-13 19:36 - 2014-12-13 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid

2014-12-13 19:36 - 2014-12-13 19:36 - 00000000 ____D () C:\Program Files (x86)\Xvid

2014-12-13 19:36 - 2011-05-30 14:42 - 00255488 _____ () C:\Windows\system32\xvidvfw.dll

2014-12-13 19:36 - 2011-05-30 14:42 - 00240640 _____ () C:\Windows\SysWOW64\xvidvfw.dll

2014-12-13 19:36 - 2011-05-23 10:52 - 00153088 _____ () C:\Windows\SysWOW64\xvid.ax

2014-12-13 19:36 - 2011-05-23 08:49 - 00173568 _____ () C:\Windows\system32\xvid.ax

2014-12-13 19:36 - 2011-05-23 08:46 - 00645632 _____ () C:\Windows\SysWOW64\xvidcore.dll

2014-12-13 19:36 - 2011-05-23 08:45 - 00696832 _____ () C:\Windows\system32\xvidcore.dll

2014-12-12 19:04 - 2014-12-12 19:04 - 00000017 _____ () C:\Users\Tobi\Desktop\startupvids.txt

2014-12-11 21:22 - 2014-12-11 21:22 - 00000000 ____D () C:\Windows\system32\appraiser

2014-12-11 19:34 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2014-12-11 19:34 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2014-12-11 17:41 - 2014-12-11 17:42 - 00000000 ____D () C:\Users\Tobi\Desktop\440

2014-12-11 17:22 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-12-11 17:22 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2014-12-11 17:22 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-12-11 17:22 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2014-12-11 17:22 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-12-11 17:22 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-12-11 17:22 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-12-11 17:22 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-12-11 17:22 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-12-11 17:22 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-12-11 17:22 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-12-11 17:22 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-12-11 17:22 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-12-11 17:22 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-12-11 17:22 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-12-11 17:22 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-12-11 17:22 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-12-11 17:22 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-12-11 17:22 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-12-11 17:22 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-12-11 17:22 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-12-11 17:22 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-12-11 17:22 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-12-11 17:22 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-12-11 17:22 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-12-11 17:22 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-12-11 17:22 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-12-11 17:22 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-12-11 17:22 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-12-11 17:22 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-12-11 17:22 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-12-11 17:22 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-12-11 17:22 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-12-11 17:22 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-12-11 17:22 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-12-11 17:22 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-12-11 17:22 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-12-11 17:22 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-12-11 17:22 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-12-11 17:22 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-12-11 17:22 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-12-11 17:22 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-12-11 17:22 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-12-11 17:22 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-12-11 17:22 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-12-11 17:22 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-12-11 17:22 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-12-11 17:22 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-12-11 17:22 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-12-11 17:22 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-12-11 17:22 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-12-11 17:22 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-12-11 17:22 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-12-11 17:22 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-12-11 17:22 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-12-11 17:22 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-12-11 17:22 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-12-11 17:22 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-12-11 17:22 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-12-11 17:22 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-11 17:22 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2014-12-11 17:20 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-12-11 17:20 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-12-11 17:20 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe

2014-12-11 17:20 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe

2014-12-11 17:20 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-12-11 17:20 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll

2014-12-11 17:20 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2014-12-11 17:20 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll

2014-12-11 17:20 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2014-12-11 17:20 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-12-11 17:20 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll

2014-12-11 17:20 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll

2014-12-11 17:20 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll

2014-12-11 17:20 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

2014-12-09 19:21 - 2014-12-09 19:21 - 00001619 _____ () C:\Users\Tobi\Desktop\Ski Challenge 15 starten.lnk

2014-12-09 19:21 - 2014-12-09 19:21 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ski Challenge 15

2014-12-09 19:16 - 2014-12-09 19:17 - 00000000 ____D () C:\Users\Tobi\Desktop\d2a536_4e9f3d87e5a37

2014-12-09 19:16 - 2014-12-09 19:16 - 00173557 _____ () C:\Users\Tobi\Desktop\d2a536_4e9f3d87e5a37.zip

2014-12-06 16:30 - 2014-12-06 16:30 - 00000000 ____D () C:\Users\Tobi\Desktop\PaintTheTownRed_V1 (1)

2014-12-06 16:26 - 2014-12-06 16:27 - 01448458 _____ () C:\Users\Tobi\Desktop\Shootmephrenia-32Bit-NEW.zip

2014-12-01 16:20 - 2014-12-01 16:20 - 00000000 ____D () C:\Users\Tobi\Desktop\UpvoidMiner

2014-12-01 16:19 - 2014-12-01 16:20 - 19900376 _____ () C:\Users\Tobi\Desktop\UpvoidMiner.zip

2014-11-30 21:29 - 2014-11-30 22:08 - 00000000 ____D () C:\Users\Tobi\Documents\ManiaPlanet

2014-11-30 21:29 - 2014-11-30 21:29 - 00001131 _____ () C:\Users\Public\Desktop\TMStadium.lnk

2014-11-30 21:29 - 2014-11-30 21:29 - 00001083 _____ () C:\Users\Public\Desktop\ManiaPlanet.lnk

2014-11-30 21:29 - 2014-11-30 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManiaPlanet

2014-11-30 21:28 - 2014-11-30 21:55 - 00000000 ____D () C:\ProgramData\ManiaPlanet

2014-11-30 21:28 - 2014-11-30 21:29 - 00000000 ____D () C:\Program Files (x86)\ManiaPlanet

2014-11-30 20:50 - 2014-11-30 21:01 - 00000015 _____ () C:\Users\Tobi\AppData\Local\X-Plane_drm.prf

2014-11-30 19:58 - 2014-11-30 19:58 - 00000080 _____ () C:\Users\Tobi\AppData\Local\X-Plane Installer.prf

2014-11-30 16:58 - 2014-11-30 16:58 - 00000040 _____ () C:\Users\Tobi\AppData\Local\x-plane_install_10.txt

2014-11-30 16:57 - 2014-11-30 16:57 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\AMD

2014-11-30 11:28 - 2014-11-30 11:28 - 00000000 ____D () C:\ProgramData\ATI

2014-11-30 11:28 - 2014-11-30 11:28 - 00000000 ____D () C:\Program Files (x86)\AMD AVT

2014-11-30 11:27 - 2014-11-30 11:27 - 00056720 _____ () C:\Windows\SysWOW64\CCCInstall_201411301127516334.log

2014-11-30 11:27 - 2014-11-30 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

2014-11-30 11:26 - 2014-11-30 11:26 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies

2014-11-29 11:57 - 2014-12-01 18:30 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\PJShooter

2014-11-29 11:53 - 2014-11-29 11:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Playfire

2014-11-29 11:53 - 2014-11-29 11:53 - 00000000 ____D () C:\Program Files (x86)\Playfire

2014-11-28 21:53 - 2014-11-28 22:26 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Tropico 4 Demo

2014-11-28 21:53 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2014-11-28 21:53 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2014-11-28 21:53 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2014-11-28 21:53 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2014-11-28 21:53 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2014-11-28 21:53 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2014-11-28 20:36 - 2014-11-28 20:37 - 00000000 ____D () C:\Users\Tobi\Documents\Shadow Warrior Demo

2014-11-27 18:03 - 2014-11-27 18:03 - 00000000 ____D () C:\Users\Tobi\Documents\SimCity

2014-11-27 16:20 - 2014-11-27 16:20 - 00000000 ____D () C:\Users\Tobi\AppData\Local\webkit

2014-11-27 15:58 - 2014-11-27 15:58 - 00000000 ____D () C:\Users\Tobi\.thumbnails

2014-11-27 15:57 - 2014-12-18 22:06 - 00000000 ____D () C:\Users\Tobi\AppData\Local\gtk-2.0

2014-11-27 15:56 - 2014-12-18 22:07 - 00000000 ____D () C:\Users\Tobi\.gimp-2.8

2014-11-27 15:56 - 2014-11-27 15:56 - 00000000 ____D () C:\Users\Tobi\AppData\Local\gegl-0.2

2014-11-27 15:55 - 2014-11-27 15:55 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk

2014-11-27 15:54 - 2014-11-27 15:55 - 00000000 ____D () C:\Program Files\GIMP 2

2014-11-26 23:00 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2014-11-26 23:00 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2014-11-26 23:00 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2014-11-26 23:00 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2014-11-26 21:21 - 2014-12-03 22:57 - 00019893 _____ () C:\Users\Tobi\Documents\AUFWÄRMTRAINING_DEB.odt

2014-11-26 17:30 - 2014-11-26 17:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved

2014-11-24 19:14 - 2014-11-24 19:14 - 00016921 _____ () C:\Users\Tobi\Desktop\Aufwärmtraining_DEB.odt
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-12-24 01:10 - 2014-07-01 17:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-12-24 01:04 - 2014-08-26 16:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-24 00:49 - 2014-09-21 02:03 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Raptr

2014-12-23 23:13 - 2011-04-12 08:43 - 00699092 _____ () C:\Windows\system32\perfh007.dat

2014-12-23 23:13 - 2011-04-12 08:43 - 00149232 _____ () C:\Windows\system32\perfc007.dat

2014-12-23 23:13 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-12-23 23:06 - 2014-07-02 17:32 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-12-23 22:55 - 2014-08-31 21:38 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Spotify

2014-12-23 20:56 - 2009-07-14 05:45 - 00028704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-12-23 20:56 - 2009-07-14 05:45 - 00028704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-12-23 20:52 - 2014-07-01 17:26 - 01719967 _____ () C:\Windows\WindowsUpdate.log

2014-12-23 20:48 - 2014-07-01 17:53 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-12-23 20:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-12-23 20:48 - 2009-07-14 05:51 - 00067880 _____ () C:\Windows\setupact.log

2014-12-23 17:09 - 2014-08-31 21:39 - 00000000 ____D () C:\Users\Tobi\AppData\Local\Spotify

2014-12-22 17:59 - 2010-11-21 04:47 - 00181642 _____ () C:\Windows\PFRO.log

2014-12-21 17:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2014-12-21 11:52 - 2014-07-13 15:07 - 00000000 ____D () C:\ProgramData\Origin

2014-12-21 11:49 - 2014-07-13 15:07 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-12-21 00:16 - 2014-08-26 10:11 - 00000000 ____D () C:\Users\Tobi\AppData\Local\Razer

2014-12-21 00:15 - 2014-08-26 10:10 - 00000000 ____D () C:\ProgramData\Razer

2014-12-21 00:15 - 2014-08-26 10:10 - 00000000 ____D () C:\Program Files (x86)\Razer

2014-12-18 22:03 - 2014-07-01 17:26 - 00000000 ____D () C:\Users\Tobi

2014-12-14 12:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-12-11 21:22 - 2014-07-03 16:06 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-12-11 21:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-12-11 21:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat

2014-12-11 19:39 - 2014-07-02 19:39 - 00000000 ____D () C:\Windows\system32\MRT

2014-12-11 19:35 - 2014-07-02 19:39 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-12-11 18:04 - 2014-08-26 16:00 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-11 18:04 - 2014-07-22 18:06 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-11 18:04 - 2014-07-22 18:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-10 15:43 - 2014-09-21 02:03 - 00000000 ____D () C:\Program Files (x86)\Raptr

2014-12-09 23:21 - 2014-09-22 21:32 - 00037184 _____ (Razer, Inc.) C:\Windows\system32\Drivers\rzpmgrk.sys

2014-12-09 19:19 - 2014-09-22 22:42 - 00000000 ____D () C:\Games

2014-12-05 18:44 - 2014-07-13 15:20 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-12-05 18:39 - 2014-07-13 15:20 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-12-05 16:57 - 2014-07-08 17:02 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2014-11-30 11:28 - 2014-07-01 17:38 - 00000000 ____D () C:\ProgramData\AMD

2014-11-30 11:25 - 2014-07-02 16:57 - 00000000 ____D () C:\Program Files\ATI Technologies

2014-11-30 11:21 - 2014-07-02 16:50 - 00000000 ____D () C:\AMD

2014-11-30 11:09 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-11-29 11:56 - 2014-09-21 01:58 - 00000000 ____D () C:\Users\Tobi\AppData\Local\Vulcan

2014-11-29 11:53 - 2014-09-21 01:57 - 00000925 _____ () C:\Users\Public\Desktop\Playfire.lnk

2014-11-29 11:53 - 2014-07-02 16:57 - 00000000 ____D () C:\ProgramData\Package Cache

2014-11-28 21:53 - 2014-07-02 17:23 - 00142995 _____ () C:\Windows\DirectX.log

2014-11-27 19:31 - 2014-09-21 23:43 - 00000000 ____D () C:\Users\Tobi\AppData\Roaming\uTorrent

2014-11-27 19:20 - 2014-07-13 15:14 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-11-27 19:20 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
 

Some content of TEMP:

====================

C:\Users\Tobi\AppData\Local\Temp\avgnt.exe

C:\Users\Tobi\AppData\Local\Temp\BingBarSetup-Partner.exe

C:\Users\Tobi\AppData\Local\Temp\Quarantine.exe

C:\Users\Tobi\AppData\Local\Temp\raptrpatch.exe

C:\Users\Tobi\AppData\Local\Temp\raptr_stub.exe

C:\Users\Tobi\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Tobi\AppData\Local\Temp\sonarinst.exe

C:\Users\Tobi\AppData\Local\Temp\sqlite3.dll

C:\Users\Tobi\AppData\Local\Temp\tmp27F9.exe

C:\Users\Tobi\AppData\Local\Temp\_is9B06.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-12-16 12:03
 

==================== End Of Log ============================

--- --- ---

Ich glaube, jetzt ist langsam alles sauber, oder?