Trojaner-Board - Komische Hänger und Eventuelle Fehler

Bei mir ist der Scan button nicht ,,Anklickbar,,

Zitat:

Zitat von klerk (Beitrag 1404135)

Bei mir ist der Scan button nicht ,,Anklickbar,,

OPS Das war zu schnell er machts gerade

Das ist von FRST: (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3838800 2014-12-13] (LogMeIn Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-12-08] (Raptr, Inc)
HKU\S-1-5-21-2824592807-112889927-3817933147-1005\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7kewo8ya.default
FF Homepage: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Extension: NoScript - C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7kewo8ya.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-11-05]
FF Extension: Adblock Plus - C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7kewo8ya.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-29]
FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Модуль перевірки посилань - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-08-28]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-08-28]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-08-28]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-08-28]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Безпечні платежі - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-08-28]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2014-05-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-04] ()
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-12-02] (LogMeIn, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe /launchService [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-05-28] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-03] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-03 21:39 - 2015-01-03 21:43 - 00026267 _____ () C:\Users\Kevin\Desktop\Addition.txt
2015-01-03 21:35 - 2015-01-03 21:44 - 00013832 _____ () C:\Users\Kevin\Desktop\FRST.txt
2015-01-03 21:33 - 2015-01-03 21:43 - 00000000 ____D () C:\FRST
2015-01-03 21:32 - 2015-01-03 21:32 - 02123776 _____ (Farbar) C:\Users\Kevin\Desktop\FRST64.exe
2015-01-03 20:22 - 2015-01-03 20:22 - 00304685 _____ () C:\Users\Kevin\Desktop\pz.de_Modpack01.zip
2015-01-03 16:13 - 2015-01-03 16:27 - 00000000 ____D () C:\Users\Kevin\AppData\Roaming\.minecraft
2015-01-02 20:45 - 2015-01-02 20:45 - 03996454 _____ () C:\Users\Kevin\Desktop\WARS.rar
2015-01-02 20:45 - 2015-01-02 20:45 - 00000000 ____D () C:\Users\Kevin\Desktop\world
2015-01-02 20:31 - 2015-01-02 20:31 - 00344116 _____ () C:\Users\Kevin\Desktop\Lots-of-Food-Mod-1.6.4.zip
2015-01-02 20:29 - 2015-01-02 20:29 - 00136480 _____ () C:\Users\Kevin\Downloads\164foodex162.zip
2015-01-02 19:29 - 2015-01-02 19:30 - 55706285 _____ () C:\Users\Kevin\Desktop\Sörver.rar
2015-01-02 19:29 - 2015-01-02 19:29 - 00000000 ____D () C:\Users\Kevin\Desktop\jamaha - Kopie
2015-01-02 16:46 - 2015-01-02 20:48 - 00000000 ____D () C:\Users\Kevin\Desktop\jamaha
2015-01-02 16:33 - 2015-01-02 16:33 - 00000000 ____D () C:\Users\Kevin\Desktop\Flan
2015-01-02 16:23 - 2015-01-02 16:24 - 00000961 _____ () C:\Users\Public\Desktop\Minecraft.lnk
2015-01-02 16:23 - 2015-01-02 16:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2015-01-02 16:23 - 2015-01-02 16:24 - 00000000 ____D () C:\Program Files (x86)\Minecraft
2015-01-02 16:19 - 2015-01-02 16:22 - 02314240 _____ () C:\Users\Kevin\Desktop\MinecraftInstaller.msi
2015-01-02 16:15 - 2015-01-02 16:15 - 00000000 ____D () C:\Users\Kevin\AppData\Roaming\java
2015-01-02 16:07 - 2015-01-02 16:07 - 00519165 _____ () C:\Users\Kevin\Desktop\MC 1.6.4 - Smart Moving 14.6.1.zip
2015-01-02 16:01 - 2015-01-02 16:01 - 02206698 _____ () C:\Users\Kevin\Desktop\forge-1.6.4-9.11.0.883-installer.jar
2015-01-02 15:53 - 2015-01-02 15:53 - 00686304 _____ () C:\Users\Kevin\Desktop\FlansMod-4.1.1.jar
2015-01-02 15:52 - 2015-01-02 15:52 - 00527680 _____ () C:\Users\Kevin\Downloads\FlansMod-3.0.2.jar
2015-01-01 20:12 - 2015-01-01 20:12 - 00000600 _____ () C:\Users\Kevin\Desktop\dasiszciiookl.mvc
2014-12-31 18:10 - 2015-01-03 14:22 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-31 18:09 - 2014-12-31 18:09 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-31 18:09 - 2014-12-31 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-31 18:08 - 2014-12-31 18:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-31 18:08 - 2014-12-31 18:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-31 18:08 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-31 18:08 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-31 18:08 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-31 18:07 - 2014-12-31 18:08 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Kevin\Desktop\mbam-setup-2.0.4.1028.exe
2014-12-30 19:52 - 2014-12-30 19:52 - 00032768 _____ () C:\Windows\system32\persistent_q.db-shm
2014-12-30 19:52 - 2014-12-30 19:52 - 00003176 _____ () C:\Windows\system32\persistent_q.db-wal
2014-12-30 19:52 - 2014-12-30 19:52 - 00001024 _____ () C:\Windows\system32\persistent_q.db
2014-12-25 19:04 - 2014-12-25 19:04 - 02605237 _____ () C:\Users\Kevin\Desktop\TommyGuns.zip
2014-12-25 14:26 - 2014-12-25 14:26 - 02346942 _____ () C:\Users\Kevin\Desktop\TechnicLauncher.exe
2014-12-25 13:33 - 2014-12-25 13:33 - 00444509 _____ () C:\Users\Wowa\Downloads\X51H206AS.zip
2014-12-25 13:33 - 2014-12-25 13:33 - 00000000 ____D () C:\Users\Wowa\Downloads\X51H206AS
2014-12-25 13:33 - 2014-12-25 13:33 - 00000000 ____D () C:\Users\Wowa\AppData\Roaming\WinRAR
2014-12-24 13:38 - 2014-12-24 13:38 - 00000222 _____ () C:\Users\Kevin\Desktop\Project Zomboid.url
2014-12-23 17:29 - 2015-01-03 16:55 - 00000000 ____D () C:\Users\Alina\AppData\Roaming\Raptr
2014-12-23 12:58 - 2015-01-03 18:22 - 00000000 ____D () C:\Users\Kevin\AppData\Roaming\Raptr
2014-12-23 12:17 - 2015-01-01 12:26 - 00000000 ____D () C:\Users\Wowa\AppData\Roaming\Raptr
2014-12-23 12:17 - 2014-12-23 12:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2014-12-23 12:17 - 2014-12-23 12:17 - 00000000 ____D () C:\ProgramData\ATI
2014-12-23 12:16 - 2014-12-23 12:16 - 00058610 _____ () C:\Windows\SysWOW64\CCCInstall_201412231216449716.log
2014-12-23 12:16 - 2014-12-23 12:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-12-23 12:16 - 2014-12-23 12:16 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-12-23 12:12 - 2014-12-23 12:12 - 00000000 ____D () C:\Program Files (x86)\AMD
2014-12-23 12:08 - 2014-12-23 12:10 - 302470552 _____ (AMD Inc.) C:\Users\Wowa\Downloads\amd-catalyst-omega-14.12-with-dotnet45-win7-64bit.exe
2014-12-22 18:51 - 2014-12-30 22:16 - 00000000 ____D () C:\Users\Kevin\Zomboid
2014-12-21 17:25 - 2014-12-21 17:25 - 00002212 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-12-21 17:25 - 2014-12-21 17:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-12-21 17:24 - 2015-01-03 21:29 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-21 17:24 - 2015-01-03 17:29 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-21 17:24 - 2014-12-21 17:25 - 00000000 ____D () C:\Users\Wowa\AppData\Local\Google
2014-12-21 17:24 - 2014-12-21 17:24 - 00880784 _____ (Google Inc.) C:\Users\Wowa\Downloads\GoogleEarthSetup.exe
2014-12-21 17:24 - 2014-12-21 17:24 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-12-21 17:24 - 2014-12-21 17:24 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-12-21 12:42 - 2014-12-21 12:42 - 02786954 _____ () C:\Users\Kevin\Downloads\forge-1.7.2-10.12.2.1121-installer.jar
2014-12-21 12:33 - 2014-12-21 12:33 - 00234858 _____ () C:\Users\Kevin\Desktop\MC 1.7.2 - Player API core 1.0.zip
2014-12-21 12:28 - 2014-12-21 12:29 - 00371223 _____ () C:\Users\Kevin\Downloads\MC 1.7.10 - Player API core 1.1.zip
2014-12-21 12:20 - 2014-12-21 18:06 - 00000000 ____D () C:\Users\Kevin\Desktop\SERVERSSS
2014-12-16 20:00 - 2014-12-16 20:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-12-16 19:58 - 2014-12-16 19:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-12-16 19:57 - 2014-12-16 19:57 - 00000000 ____D () C:\Windows\PCHEALTH
2014-12-16 19:57 - 2014-12-16 19:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-12-16 19:55 - 2014-12-16 19:55 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-12-16 19:55 - 2014-12-16 19:55 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-12-16 19:54 - 2014-12-16 20:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-16 19:54 - 2014-12-16 19:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-12-16 19:54 - 2014-12-16 19:54 - 00000000 ____D () C:\Users\Wowa\AppData\Local\Microsoft Help
2014-12-16 19:53 - 2014-12-16 19:53 - 00000000 __RHD () C:\MSOCache
2014-12-16 15:48 - 2015-01-03 16:25 - 00000000 ____D () C:\Users\Kevin\AppData\Roaming\Craften Terminal
2014-12-16 15:48 - 2014-12-16 15:48 - 00001103 _____ () C:\Users\Public\Desktop\Craften Terminal.lnk
2014-12-16 15:48 - 2014-12-16 15:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Craften Terminal
2014-12-16 15:48 - 2014-12-16 15:48 - 00000000 ____D () C:\Program Files (x86)\Craften Terminal
2014-12-15 16:02 - 2014-12-15 16:14 - 00000000 ____D () C:\Users\Kevin\Desktop\FINGERWEG!!!!
2014-12-15 11:23 - 2014-12-15 11:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-12-15 11:23 - 2014-12-15 11:23 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-12-12 14:55 - 2014-12-12 14:55 - 00000221 _____ () C:\Users\Kevin\Desktop\Zombie Panic Source.url
2014-12-11 16:52 - 2014-12-11 16:56 - 00000000 ____D () C:\Users\Kevin\Desktop\TimiA
2014-12-10 16:05 - 2014-12-10 16:05 - 00003380 _____ () C:\Windows\System32\Tasks\{9D656A52-74ED-42F1-A672-C95EB8B50827}
2014-12-10 16:05 - 2014-12-10 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-12-06 19:07 - 2014-12-15 11:23 - 00000926 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-03 21:41 - 2014-08-28 21:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-01-03 21:31 - 2014-08-31 11:32 - 00000000 ____D () C:\Users\Kevin\AppData\Roaming\TS3Client
2015-01-03 21:21 - 2014-08-29 10:22 - 00000000 ____D () C:\Users\Kevin\AppData\Roaming\Skype
2015-01-03 21:16 - 2014-08-28 21:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-03 21:09 - 2014-10-15 14:42 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E2C1D107-4692-475F-A185-24DDB5749E55}
2015-01-03 20:25 - 2014-08-29 15:36 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-03 20:22 - 2014-08-29 16:04 - 00000000 ____D () C:\Users\Kevin\AppData\Local\LogMeIn Hamachi
2015-01-03 20:22 - 2009-07-14 05:51 - 00093295 _____ () C:\Windows\setupact.log
2015-01-03 20:19 - 2014-08-29 17:41 - 00000000 ____D () C:\Users\Alina\AppData\Local\LogMeIn Hamachi
2015-01-03 19:56 - 2014-08-29 08:33 - 00000000 ____D () C:\Users\Alina\AppData\Roaming\Skype
2015-01-03 14:29 - 2009-07-14 05:45 - 00025680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-03 14:29 - 2009-07-14 05:45 - 00025680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-03 14:25 - 2014-08-28 20:26 - 01200477 _____ () C:\Windows\WindowsUpdate.log
2015-01-03 14:21 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-01 13:30 - 2014-08-29 08:22 - 00000000 ____D () C:\Users\Wowa\AppData\Roaming\Skype
2015-01-01 12:25 - 2014-09-01 09:22 - 00000000 ____D () C:\Users\Wowa\AppData\Local\LogMeIn Hamachi
2015-01-01 12:24 - 2010-11-21 04:47 - 00087018 _____ () C:\Windows\PFRO.log
2014-12-31 21:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-12-31 19:46 - 2014-11-08 14:01 - 00000222 _____ () C:\Users\Kevin\Desktop\Prison Architect.url
2014-12-28 19:21 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-27 13:07 - 2014-09-28 09:45 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-27 13:07 - 2014-08-29 08:22 - 00000000 ____D () C:\ProgramData\Skype
2014-12-25 13:35 - 2014-08-29 06:21 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-12-25 13:35 - 2014-08-29 06:21 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-12-25 13:35 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-23 15:02 - 2014-09-05 18:11 - 00000000 ____D () C:\Users\Kevin\AppData\Local\ArmA 2 OA
2014-12-23 14:51 - 2014-09-05 18:11 - 00000000 ____D () C:\Users\Kevin\Documents\ArmA 2
2014-12-23 12:17 - 2014-08-28 21:58 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-12-23 12:16 - 2014-08-28 21:56 - 00000000 ____D () C:\ProgramData\AMD
2014-12-23 12:16 - 2014-08-28 21:55 - 00000000 ____D () C:\Program Files\AMD
2014-12-23 12:15 - 2014-08-28 21:45 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-12-23 12:11 - 2014-08-28 21:44 - 00000000 ____D () C:\AMD
2014-12-22 18:51 - 2014-08-29 10:21 - 00000000 ____D () C:\Users\Kevin
2014-12-21 17:25 - 2014-09-26 16:29 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-17 16:30 - 2014-08-28 21:06 - 00111336 _____ () C:\Users\Wowa\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-17 15:49 - 2014-08-29 10:22 - 00111336 _____ () C:\Users\Kevin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-17 14:59 - 2014-08-29 08:32 - 00111336 _____ () C:\Users\Alina\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-17 14:58 - 2009-07-14 05:45 - 00417584 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-16 19:58 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-12-16 19:57 - 2010-11-21 08:17 - 00000000 ____D () C:\Windows\ShellNew
2014-12-16 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-12-16 19:54 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2014-12-10 16:05 - 2014-09-05 18:10 - 00000000 ____D () C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-12-10 15:16 - 2014-08-28 21:56 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-10 15:16 - 2014-08-28 21:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-10 15:16 - 2014-08-28 21:56 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-05 20:17 - 2014-08-31 15:42 - 00000000 ____D () C:\Users\Kevin\AppData\Local\DayZ

Some content of TEMP:
====================
C:\Users\Alina\AppData\Local\Temp\tmpABA9.exe
C:\Users\Kevin\AppData\Local\Temp\i4jdel0.exe
C:\Users\Wowa\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Wowa\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Wowa\AppData\Local\Temp\ose00000.exe
C:\Users\Wowa\AppData\Local\Temp\raptrpatch.exe
C:\Users\Wowa\AppData\Local\Temp\raptr_stub.exe
C:\Users\Wowa\AppData\Local\Temp\tmpD59D.exe
C:\Users\Wowa\AppData\Local\Temp\tmpF890.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-12-30 12:17

==================== End Of Log ============================

Das ist von Addition:FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2015 03

Ran by Kevin at 2015-01-03 21:45:10

Running from C:\Users\Kevin\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}

AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)

Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)

Awesomium Redistributable (HKLM-x32\...\{5BCB064B-9F65-4E15-BAFB-669E72E54FD9}) (Version: 1.7.4.2 - SIX Networks GmbH)

BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )

BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version:  - )

Craften Terminal 4.0.2 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 4.0.2 - Craften.de)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

EPSON StandardBusinessPrinters Printer Uninstall (HKLM\...\EPSON StandardBusinessPrinters) (Version:  - SEIKO EPSON Corporation)

EPSON WF-2510 Series Printer Uninstall (HKLM\...\EPSON WF-2510 Series) (Version:  - SEIKO EPSON Corporation)

GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)

Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)

Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)

Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.291 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.291 - LogMeIn, Inc.) Hidden

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{02BAAFC5-4E16-42E6-A9F6-8DDE0B7ED3B8}) (Version: 1.0.0.0 - Mojang)

Mozilla Firefox 34.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0 (x86 de)) (Version: 34.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)

NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)

Prison Architect (HKLM-x32\...\Steam App 233450) (Version:  - Introversion Software)

Project Zomboid (HKLM-x32\...\Steam App 108600) (Version:  - The Indie Stone)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: 1.20.0000 - Firefly Studios)

Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)

TeamSpeak 3 Client (HKU\S-1-5-21-2824592807-112889927-3817933147-1005\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

Zombie Panic Source (HKLM-x32\...\Steam App 17500) (Version:  - Zombie Panic Team)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

30-12-2014 12:24:10 Geplanter Prüfpunkt

02-01-2015 16:20:22 Installed Minecraft

02-01-2015 16:23:00 Installed Minecraft
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {5BFCD702-569A-41ED-A692-9E27274A8669} - System32\Tasks\{9D656A52-74ED-42F1-A672-C95EB8B50827} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\BEsetup"

Task: {84BE6BF4-1B72-42EF-9085-B17BC55C4E97} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-21] (Google Inc.)

Task: {A65A4FDF-84B5-4A82-9687-FFF80CC3C6F9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)

Task: {CC2F99DD-D14D-4813-A4DD-6563A914CF9C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-21] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-06-17 11:35 - 2013-06-17 11:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll

2013-05-08 13:52 - 2013-05-08 13:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll

2010-11-22 23:56 - 2010-11-22 23:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

2010-11-22 23:57 - 2010-11-22 23:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll

2010-11-22 23:56 - 2010-11-22 23:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd

2010-11-22 23:57 - 2010-11-22 23:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd

2010-11-22 23:57 - 2010-11-22 23:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd

2011-02-15 19:17 - 2011-02-15 19:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll

2010-11-22 23:57 - 2010-11-22 23:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll

2010-11-22 23:57 - 2010-11-22 23:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd

2014-08-14 01:37 - 2014-08-14 01:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll

2014-08-14 01:37 - 2014-08-14 01:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll

2010-11-22 23:56 - 2010-11-22 23:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd

2010-11-22 23:57 - 2010-11-22 23:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd

2013-11-21 01:05 - 2013-11-21 01:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll

2010-11-22 23:57 - 2010-11-22 23:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd

2014-06-18 01:56 - 2014-06-18 01:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

2011-02-15 19:17 - 2011-02-15 19:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll

2010-11-23 00:06 - 2010-11-23 00:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll

2013-05-10 00:52 - 2013-05-10 00:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll

2013-05-10 00:52 - 2013-05-10 00:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll

2013-05-10 00:52 - 2013-05-10 00:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll

2013-05-03 19:56 - 2013-05-03 19:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll

2013-05-03 19:56 - 2013-05-03 19:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll

2013-05-03 19:56 - 2013-05-03 19:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll

2014-11-05 16:41 - 2014-11-11 19:48 - 01171456 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-11-05 16:41 - 2014-11-11 19:48 - 00442368 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-11-05 16:41 - 2014-11-11 19:48 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-11-05 16:42 - 2014-11-11 19:47 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2014-11-05 16:42 - 2014-11-18 21:23 - 02227904 _____ () C:\Program Files (x86)\Steam\video.dll

2014-11-05 16:41 - 2014-11-11 19:48 - 00403968 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-11-05 16:41 - 2014-11-11 19:48 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2014-11-05 16:41 - 2014-11-18 21:23 - 00690880 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2014-11-05 16:41 - 2014-11-11 19:48 - 34589888 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2014-11-05 16:41 - 2014-11-11 19:48 - 00837824 _____ () C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll

2014-12-02 13:25 - 2014-12-02 13:25 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-2824592807-112889927-3817933147-500 - Administrator - Disabled)

Alina (S-1-5-21-2824592807-112889927-3817933147-1004 - Limited - Enabled) => C:\Users\Alina

Gast (S-1-5-21-2824592807-112889927-3817933147-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2824592807-112889927-3817933147-1002 - Limited - Enabled)

Kevin (S-1-5-21-2824592807-112889927-3817933147-1005 - Administrator - Enabled) => C:\Users\Kevin

Wowa (S-1-5-21-2824592807-112889927-3817933147-1001 - Administrator - Enabled) => C:\Users\Wowa
 

==================== Faulty Device Manager Devices =============
 

Name: Coprozessor

Description: Coprozessor

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (01/03/2015 04:29:31 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1274
 

Startzeit: 01d027699fae6eee
 

Endzeit: 53
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: 4e034876-935d-11e4-a1ef-002421560cda
 

Error: (01/03/2015 04:23:36 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 14e4
 

Startzeit: 01d0276918918f58
 

Endzeit: 36
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: 7ae511c6-935c-11e4-a1ef-002421560cda
 

Error: (01/03/2015 04:19:38 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 470
 

Startzeit: 01d027687bec72f1
 

Endzeit: 177
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: ed2576b2-935b-11e4-a1ef-002421560cda
 

Error: (01/03/2015 04:17:24 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1628
 

Startzeit: 01d0276802c8e5bb
 

Endzeit: 45
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: 9d3f627f-935b-11e4-a1ef-002421560cda
 

Error: (01/03/2015 04:12:57 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: c14
 

Startzeit: 01d02767965913c0
 

Endzeit: 46
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: fdf386a3-935a-11e4-a1ef-002421560cda
 

Error: (01/03/2015 04:09:36 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: fa0
 

Startzeit: 01d027671c0f3a44
 

Endzeit: 43
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: 8626b375-935a-11e4-a1ef-002421560cda
 

Error: (01/03/2015 04:07:08 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 784
 

Startzeit: 01d027658fe76a25
 

Endzeit: 53
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: 2e0251d4-935a-11e4-a1ef-002421560cda
 

Error: (01/03/2015 03:56:41 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 144c
 

Startzeit: 01d02760ea538337
 

Endzeit: 85
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: b8b6f010-9358-11e4-a1ef-002421560cda
 

Error: (01/03/2015 03:23:24 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 424
 

Startzeit: 01d0275db95a69e4
 

Endzeit: 59
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: 1215c58d-9354-11e4-a1ef-002421560cda
 

Error: (01/03/2015 03:00:37 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm javaw.exe, Version 7.0.550.13 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 14a8
 

Startzeit: 01d0275b5e6823ad
 

Endzeit: 47
 

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe
 

Berichts-ID: e3474b42-9350-11e4-a1ef-002421560cda
 
 

System errors:

=============

Error: (01/03/2015 02:21:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (01/02/2015 07:19:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (01/02/2015 01:36:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (01/01/2015 05:13:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (01/01/2015 02:13:03 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AVP erreicht.
 

Error: (01/01/2015 02:11:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (01/01/2015 00:27:19 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )

Description: WMPNetworkSvc0x80004005
 

Error: (01/01/2015 00:24:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/31/2014 09:50:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/31/2014 09:50:26 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎31.‎12.‎2014 um 21:30:16 unerwartet heruntergefahren.
 
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2014-12-30 12:18:34.148

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-30 12:18:34.148

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-30 12:18:34.140

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-30 12:18:34.078

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-30 12:18:34.078

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-30 12:18:34.078

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-16 13:31:49.750

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-16 13:31:49.749

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-16 13:31:49.745

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-12-16 13:31:49.713

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+

Percentage of memory in use: 73%

Total physical RAM: 4095.37 MB

Available physical RAM: 1097.52 MB

Total Pagefile: 8188.91 MB

Available Pagefile: 4445.35 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:232.79 GB) (Free:122.47 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 92A492A4)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---
Entschuldigung für das da oben

Also könnte man hier von einem befall reden? Oder ist es nur ein Error?