Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Pc verursacht langsames Internet (https://www.trojaner-board.de/165721-pc-verursacht-langsames-internet.html)

clemicool 01.04.2015 21:31
Pc verursacht langsames Internet
 
Hey Community,

ich hab mal wieder ein Problem...

Diesmal geht es darum das seit 5 Tagen das Internet sehr schlecht ist!

Ich schildere es mal:

Anfangs dachte ich ja durch unsere schlechte Internetleitung (45kb/s Download und 7 Kb/s Upload) kann es möglich sein wenn mein Bruder mit dem Handy irgendwas downloadet das es dran schuld ist, aber als ich dann mal auf den Teamspeak ging und merkte geht ja gar nicht da ich zwischen 150-400 Ping durchgängig habe und mein normaler Ping 60 ist wunderte es mich sehr stark.

Mein Verdacht fiel auch drauf das durch den Sturm jetzt vielleicht irgendwelche Leitungen nicht richtig funktionieren aber das ist auch nicht das Problem!

Also wenn mein Pc aus ist oder nicht verbunden ist zum Router und ich mit dem Handy in den Teamspeak gehe habe ich meinen 60er Ping und sofort wenn ich mit dem PC mich verbinde schnellt er auf 400 hoch.....

Es wird eigentlich nichts gedownloadet! Und hab auch schon Virencheck gemacht und da kam nur raus das 4 Elemente gefunden wurden(Pc wurde eine zeitlang von meiner Mutter genutzt...).

Und somit denke ich das der Pc irgendwas macht dass, das Internet sehr schlecht läuft!

Router neustarten hilft alles nicht.... und es ist den ganzen Tag über.

Ich hab trotz des 400 Pings aber meine normale Downloadrate von 45kb/s und kann im Internet surfen, aber nicht spielen und das ist das Problem!

Selten geht der Ping kurz auf 60, aber dann sofort wieder auf 400!!!

Ich hoffe Ihr könnt mir helfen!


Pc Angaben falls notwendig:
I3-3220
GTX750 Ti
Belkin Wireless Adapter N600
Windows 8

schrauber 02.04.2015 19:17
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


clemicool 03.04.2015 13:43

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Clemens (administrator) on CLEMENS-PC on 03-04-2015 14:37:05
Running from C:\Users\Clemens\Downloads
Loaded Profiles: Clemens (Available profiles: Clemens)
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Gainward Co. Ltd.) C:\Program Files (x86)\EXPERTool\TBPanel.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\AutoUpdate.exe
(Microsoft Corporation) C:\Windows\System32\AutoUpdate.exe
(Microsoft Corporation) C:\Windows\System32\AutoUpdate.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GamecomSound] => C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe [817440 2014-01-21] ()
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2601104 2015-02-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [GamingKeyboard] => C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2886848 2015-02-26] (Valve Corporation)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Clemens\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [TBPanel] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2195240 2014-02-17] (Gainward Co. Ltd.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [WLAN Optimizer] => C:\Users\Clemens\AppData\Local\Temp\Rar$EXa0.251\WLAN Optimizer.exe <===== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Clemens\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: redgiant.com/RGMediaPlayer -> C:\Program Files (x86)\Red Giant\BulletProof\npRGMediaPlayer.dll [2014-06-18] (Red Giant)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-03-08] ()

Chrome:
=======
CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M18CEBFDC-E1D6-4F55-A93D-1C20C3016816&SearchSource=55&CUI=&UM=6&UP=SP7A3DCEFA-5B80-459B-8FDB-C5C7F2D6883D&SSPV=
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-09-14]
CHR Extension: (Google Slides) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-14]
CHR Extension: (Google Docs) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-07]
CHR Extension: (Google Drive) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-07]
CHR Extension: (YouTube) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-07]
CHR Extension: (Adblock Plus) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-14]
CHR Extension: (Google Search) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-07]
CHR Extension: (Google Play Music) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-09-14]
CHR Extension: (Google Sheets) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-14]
CHR Extension: (AdBlock) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-14]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-04]
CHR Extension: (Google Wallet) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-14]
CHR Extension: (Gmail) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-07]
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Slides) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-16]
CHR Extension: (Google Docs) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-16]
CHR Extension: (Google Drive) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-16]
CHR Extension: (YouTube) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-16]
CHR Extension: (Google Search) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-16]
CHR Extension: (Google Play Music) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-11-16]
CHR Extension: (Google Sheets) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-16]
CHR Extension: (Google Wallet) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-16]
CHR Extension: (Gmail) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-02-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-01-16] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-23] ()
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Apowersoft_AudioDevice; C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek                                            )
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-06-08] (Disc Soft Ltd)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 PlantronicsGC; C:\Windows\system32\drivers\PLTGC.sys [1327104 2013-04-12] (C-Media Electronics Inc)
S3 RTL8187B; C:\Windows\system32\DRIVERS\RTL8187B.sys [458384 2012-05-31] (Realtek Semiconductor Corporation                          )
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1577104 2012-09-27] (Realtek Semiconductor Corporation                          )
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-01-15] (Anchorfree Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 wolfkr; \??\C:\AeriaGames\WolfTeam-DE\avital\wolfk64.sys [X]
S3 XFDriver64; \??\C:\Program Files (x86)\Xfire2\XFDriver64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-03 14:35 - 2015-04-03 14:37 - 00015118 _____ () C:\Users\Clemens\Downloads\FRST.txt
2015-04-03 14:35 - 2015-04-03 14:37 - 00000000 ___DC () C:\FRST
2015-04-03 14:35 - 2015-04-03 14:36 - 00036313 _____ () C:\Users\Clemens\Downloads\Addition.txt
2015-04-03 14:33 - 2015-04-03 14:34 - 02095616 _____ (Farbar) C:\Users\Clemens\Downloads\FRST64.exe
2015-04-02 12:12 - 2015-04-02 13:27 - 00000000 ____D () C:\Users\Clemens\Desktop\silv
2015-04-02 11:40 - 2015-04-02 14:28 - 437588156 _____ () C:\Users\Clemens\Downloads\SnieElieIIUtmtEitionMLT9EAmgo.part13.rar
2015-04-02 08:23 - 2015-04-02 14:28 - 00000000 ____D () C:\Users\Clemens\Desktop\sniper elite 3
2015-04-02 00:08 - 2015-04-02 06:00 - 1000000000 _____ () C:\Users\Clemens\Downloads\SnieElieIIUtmtEitionMLT9EAmgo.part01.rar
2015-04-01 20:56 - 2015-04-01 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Owlchemy Labs
2015-04-01 20:55 - 2015-04-01 23:14 - 00000000 ____D () C:\Program Files (x86)\Owlchemy Labs
2015-04-01 18:06 - 2015-04-01 20:23 - 377019938 _____ () C:\Users\Clemens\Downloads\DYO0215C31XBI1737.rar
2015-04-01 17:11 - 2015-04-01 17:11 - 00000098 _____ () C:\Users\Clemens\Downloads\1e035a17-26a8-4fad-aace-7739ee27a807.htm
2015-04-01 17:08 - 2015-04-01 17:08 - 00018256 _____ () C:\Users\Clemens\Downloads\Download (1).htm
2015-04-01 17:07 - 2015-04-01 17:07 - 00008390 _____ () C:\Users\Clemens\Downloads\Download.htm
2015-04-01 16:41 - 2015-04-01 23:16 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Intel
2015-04-01 16:04 - 2015-04-01 23:14 - 00000000 ____D () C:\Program Files (x86)\Belkin
2015-04-01 16:04 - 2012-02-23 11:01 - 00451072 _____ () C:\Windows\SysWOW64\ISSRemoveSP.exe
2015-03-30 20:56 - 2015-03-30 20:56 - 00000000 ____D () C:\Users\Clemens\Documents\My Cheat Tables
2015-03-29 21:03 - 2015-03-04 09:26 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2015-03-29 21:03 - 2015-03-04 09:26 - 00467952 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2015-03-29 21:03 - 2015-03-04 09:26 - 00011105 _____ () C:\Windows\system32\AutoconfigV2.cab
2015-03-29 21:03 - 2015-03-04 08:41 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-03-29 21:03 - 2015-03-04 08:41 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-29 21:03 - 2015-03-04 06:53 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-03-29 21:03 - 2015-03-04 06:53 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-29 20:52 - 2015-03-11 07:21 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00943104 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-03-29 20:52 - 2015-03-11 00:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-03-29 20:50 - 2015-03-14 10:07 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-29 20:50 - 2015-03-14 08:33 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\Documents\PluralEyes
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Red_Giant
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\AppData\Local\PluralEyes 3
2015-03-24 22:24 - 2015-03-24 22:31 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Red Giant
2015-03-24 22:24 - 2015-03-24 22:24 - 00000000 ____D () C:\Users\Clemens\Documents\Red Giant
2015-03-24 22:17 - 2015-03-24 22:18 - 00000000 ____D () C:\Program Files (x86)\Red Giant Link
2015-03-24 22:15 - 2015-03-24 22:15 - 00000000 ____D () C:\ProgramData\rgt
2015-03-24 22:10 - 2015-03-24 22:17 - 00000000 ____D () C:\Program Files (x86)\Red Giant
2015-03-24 22:10 - 2015-03-24 22:16 - 00000000 ____D () C:\ProgramData\Red Giant
2015-03-24 22:10 - 2015-03-24 22:10 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Red Giant
2015-03-24 22:06 - 2015-03-24 22:16 - 00000000 ____D () C:\Program Files\Red Giant
2015-03-24 22:06 - 2015-03-09 11:36 - 41522176 _____ (Red Giant LLC) C:\Windows\system32\MBLooksUI_x64.dll
2015-03-24 22:06 - 2015-02-27 13:39 - 13485056 _____ (Red Giant Software) C:\Windows\system32\Gpu_Shader_Engine_x64.dll
2015-03-24 22:06 - 2015-02-27 13:39 - 05849600 _____ (Noesis Technologies) C:\Windows\system32\Noesis.dll
2015-03-24 22:06 - 2013-11-21 11:38 - 04893184 _____ () C:\Windows\system32\PhotoLooksRenderer_x64.dll
2015-03-24 22:06 - 2013-11-21 11:38 - 04168704 _____ () C:\Windows\SysWOW64\PhotoLooksRenderer.dll
2015-03-23 17:46 - 2015-03-23 17:46 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\RenPy
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnH Solutions
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnH Solutions
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\Program Files (x86)\UnH Solutions
2015-03-22 12:57 - 2011-10-21 17:48 - 00000000 ___HD () C:\Users\Clemens\Desktop\flashgames
2015-03-19 16:01 - 2015-03-13 17:38 - 00622224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-03-19 16:00 - 2015-03-13 21:41 - 32114888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 24775368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 20466376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 16022016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 14121624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 13297144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 13210080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10775080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10715864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10262160 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-03-19 16:00 - 2015-03-13 21:41 - 03611792 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 03249352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434788.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434788.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00997856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00970384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00944784 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00930448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00909512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00878328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00400584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00390288 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00354112 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00346824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00306208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00178512 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-03-18 23:12 - 2015-03-19 01:19 - 309143408 _____ (NVIDIA Corporation) C:\Users\Clemens\Downloads\347.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-03-13 18:34 - 2015-01-24 08:42 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-13 18:34 - 2015-01-24 07:00 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-12 07:48 - 2015-03-12 07:48 - 00288352 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 23:15 - 2015-02-23 12:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 23:15 - 2015-02-23 12:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 23:15 - 2015-02-23 12:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 23:15 - 2015-02-23 12:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 23:15 - 2015-02-23 11:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 23:15 - 2015-02-23 11:15 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2015-03-11 23:15 - 2015-02-23 10:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 23:15 - 2015-02-21 07:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00737280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 23:15 - 2015-02-21 07:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 23:15 - 2015-02-21 07:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 23:15 - 2015-02-21 07:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 23:15 - 2015-02-21 07:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 23:15 - 2015-02-21 07:07 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2015-03-11 23:15 - 2015-02-21 06:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 23:15 - 2015-02-21 05:00 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2015-03-11 23:14 - 2015-01-29 10:45 - 06973248 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 23:08 - 2015-02-17 08:54 - 19777536 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 23:08 - 2015-02-17 07:13 - 17561600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 23:06 - 2015-01-29 10:05 - 01627648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 23:06 - 2015-01-29 08:19 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 23:05 - 2015-03-06 09:39 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2015-03-11 23:05 - 2015-03-06 09:39 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 23:05 - 2015-03-06 07:48 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2015-03-11 23:05 - 2015-03-06 07:48 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 23:05 - 2015-02-03 01:18 - 00569712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 23:04 - 2015-01-31 15:48 - 00044024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-03-11 23:04 - 2015-01-31 07:55 - 00275712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-03-11 23:01 - 2015-02-26 06:35 - 04063232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 23:00 - 2015-02-20 15:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 23:00 - 2015-02-20 13:56 - 00366592 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 23:00 - 2015-02-20 10:10 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 23:00 - 2015-02-20 09:24 - 00304128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 23:00 - 2015-02-13 01:18 - 00396419 _____ () C:\Windows\system32\ApnDatabase.xml
2015-03-11 23:00 - 2015-01-24 08:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 23:00 - 2015-01-24 07:00 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-11 23:00 - 2015-01-24 06:31 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 17:00 - 2015-03-11 17:00 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\11bitstudios
2015-03-08 14:36 - 2015-03-08 14:36 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\MMFApplications
2015-03-08 14:35 - 2015-03-08 14:35 - 00000000 ____D () C:\ProgramData\SkidRow
2015-03-06 18:25 - 2015-04-01 23:01 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-03-06 18:24 - 2015-04-01 23:18 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-03-06 17:25 - 2015-03-06 18:23 - 152428336 _____ (Apple Inc.) C:\Users\Clemens\Downloads\itunes6464setup.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-03 14:37 - 2012-07-26 12:27 - 00828878 _____ () C:\Windows\system32\perfh007.dat
2015-04-03 14:37 - 2012-07-26 12:27 - 00188018 _____ () C:\Windows\system32\perfc007.dat
2015-04-03 14:37 - 2012-07-26 09:28 - 01949496 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-03 14:34 - 2014-01-15 16:28 - 01477242 _____ () C:\Windows\WindowsUpdate.log
2015-04-03 14:31 - 2013-12-07 13:47 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\TS3Client
2015-04-03 14:31 - 2013-12-07 12:35 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-03 14:30 - 2013-12-09 19:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-03 14:30 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-02 15:11 - 2014-01-07 19:48 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\vlc
2015-04-02 15:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2015-04-02 14:30 - 2013-12-07 12:35 - 00001140 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-02 11:41 - 2013-12-28 19:57 - 00000000 ____D () C:\Users\Clemens\Desktop\Spiele
2015-04-02 09:51 - 2014-09-26 15:37 - 08009728 ___SH () C:\Users\Clemens\Desktop\Thumbs.db
2015-04-01 23:22 - 2013-12-07 12:09 - 00000000 ____D () C:\Users\Clemens
2015-04-01 23:18 - 2014-12-18 23:46 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-01 23:18 - 2014-10-30 14:51 - 00000000 ____D () C:\Windows\system32\AutoUpdateLicense
2015-04-01 23:18 - 2014-07-10 16:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-01 23:18 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\WinStore
2015-04-01 23:17 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Sysprep
2015-04-01 23:16 - 2014-10-01 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-04-01 23:16 - 2014-10-01 21:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-04-01 23:16 - 2014-08-03 01:09 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-04-01 23:16 - 2014-06-08 21:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-04-01 23:16 - 2014-01-18 00:13 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Skype
2015-04-01 23:16 - 2014-01-03 16:22 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-01 23:16 - 2013-12-28 19:58 - 00000000 ___RD () C:\Users\Clemens\Desktop\Tools
2015-04-01 23:16 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache
2015-04-01 23:15 - 2014-06-28 13:44 - 00000000 ____D () C:\ProgramData\Apple
2015-04-01 23:15 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\registration
2015-04-01 23:14 - 2014-03-07 17:57 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-01 23:14 - 2014-02-08 13:38 - 00000000 ____D () C:\Program Files (x86)\Activision
2015-04-01 23:14 - 2013-12-18 19:18 - 00000000 ____D () C:\Users\Clemens\Desktop\Musik
2015-04-01 23:14 - 2013-12-07 12:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-01 23:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-01 23:01 - 2015-01-31 17:15 - 00000000 ____D () C:\ProgramData\Nero
2015-04-01 18:25 - 2014-11-05 21:15 - 00000000 ____D () C:\Users\Clemens\AppData\Local\LooksBuilder
2015-04-01 18:23 - 2014-01-11 11:36 - 00000000 ____D () C:\Users\Clemens\AppData\Local\CrashDumps
2015-04-01 16:58 - 2015-02-02 15:42 - 00000000 ____D () C:\Users\Clemens\Desktop\shadowplay
2015-04-01 16:57 - 2014-07-05 11:09 - 00000000 ____D () C:\Users\Clemens\Desktop\Mods
2015-04-01 16:04 - 2012-07-26 07:26 - 00000167 _____ () C:\Windows\win.ini
2015-03-31 22:36 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-03-31 18:21 - 2013-12-07 12:17 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-957755645-4260464881-2478257714-1001
2015-03-29 21:03 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp
2015-03-24 22:18 - 2014-11-05 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Giant
2015-03-24 22:16 - 2014-11-05 21:13 - 00000000 ____D () C:\ProgramData\RedGiant
2015-03-24 22:10 - 2014-11-05 21:14 - 00004198 _____ () C:\Windows\System32\Tasks\Red Giant Link
2015-03-24 22:06 - 2014-11-05 21:14 - 00000000 ____D () C:\Program Files (x86)\LooksBuilder
2015-03-22 16:54 - 2014-09-23 18:59 - 00026624 ____H () C:\Users\Clemens\Desktop\photothumb.db
2015-03-19 16:01 - 2015-01-31 11:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-19 16:01 - 2015-01-26 22:14 - 00001133 _____ () C:\Windows\setupact.log
2015-03-19 16:00 - 2013-12-09 19:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-13 21:41 - 2015-01-31 11:21 - 17258024 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-03-13 21:41 - 2015-01-31 11:21 - 03303448 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-03-13 21:41 - 2015-01-27 04:59 - 02906928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-03-13 21:41 - 2014-12-25 17:57 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-03-13 21:41 - 2014-11-19 20:56 - 18580512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41 - 2013-12-09 19:02 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-03-13 21:41 - 2013-12-09 19:02 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 06861968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 03526856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16 - 2013-12-09 19:02 - 00386248 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-11 15:10 - 2014-06-08 20:22 - 04246327 _____ () C:\Windows\system32\nvcoproc.bin
2015-03-07 15:40 - 2013-12-09 18:32 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-07 15:37 - 2013-12-09 18:32 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-06 18:47 - 2014-06-28 13:47 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Apple Computer
2015-03-06 18:25 - 2014-06-28 13:47 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Apple Computer
2015-03-05 20:20 - 2013-12-09 21:49 - 00756736 ___SH () C:\Users\Clemens\Downloads\Thumbs.db
2015-03-04 23:24 - 2014-07-10 16:19 - 00791496 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-04 23:24 - 2014-07-10 16:19 - 00177608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2014-01-18 00:14 - 2014-10-17 01:02 - 2260992 _____ () C:\Program Files (x86)\Thumbs.db
2014-01-13 23:23 - 2014-10-22 11:23 - 0003584 _____ () C:\Users\Clemens\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-13 20:54 - 2014-11-02 17:33 - 0007598 _____ () C:\Users\Clemens\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Clemens\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Clemens\AppData\Local\Temp\drm_dyndata_7390006.dll
C:\Users\Clemens\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Clemens\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Clemens\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Clemens\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Clemens\AppData\Local\Temp\nvStInst.exe
C:\Users\Clemens\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Clemens\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Clemens\AppData\Local\Temp\SecuExp.exe
C:\Users\Clemens\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Clemens\AppData\Local\Temp\SRLDetectionLibrary8579360246823144772.dll
C:\Users\Clemens\AppData\Local\Temp\Uninstall.exe
C:\Users\Clemens\AppData\Local\Temp\_is5520.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-01 18:58

==================== End Of Log ============================
--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Clemens at 2015-04-03 14:35:57
Running from C:\Users\Clemens\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Belkin N600 DB USB Wireless Adapter (HKLM-x32\...\{B20F9D1C-A0A5-4CD8-8306-DA03872311B1}) (Version: 1.00.0184.2 - Belkin International, Inc.)
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version:  - Irrational Games)
Borderlands (HKLM-x32\...\{52B65911-1559-4ED5-9461-46957FDD48CD}) (Version: 1.0.295 - 2K Games)
Bulletstorm (HKLM-x32\...\GFWL_{45410935-3E72-472B-8C35-AB1000008200}) (Version: 1.0.0000.130 - EA)
Bulletstorm (x32 Version: 1.0.0000.130 - EA) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version:  - ) Hidden
Call of Duty: Black Ops - Multiplayer (HKLM-x32\...\Steam App 42710) (Version:  - Treyarch)
Call of Duty: Black Ops (HKLM-x32\...\Steam App 42700) (Version:  - Treyarch)
Call of Juarez Gunslinger (HKLM-x32\...\Steam App 204450) (Version:  - Techland)
Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation)
Color Suite v11.1.4 (HKLM-x32\...\{99487911-8011-42BC-B594-8B02BFD32B1D}_is1) (Version: 11.1.4 - Red Giant, LLC)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Condition Zero (HKLM-x32\...\Steam App 80) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dyscourse (HKLM-x32\...\Dyscourse_is1) (Version:  - )
Effects Suite v11.1.3 (HKLM-x32\...\{4DD8EE5E-F571-4EC8-9526-E7C62FE39B19}_is1) (Version: 11.1.3 - Red Giant, LLC)
EXPERTool v9.1 (HKLM-x32\...\{551D9481-9487-4D0C-9A1D-6BC3E7B6D991}_is1) (Version: 9.1.0.2 - Gainward Co. Ltd.)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.00 - Ubisoft)
Far Cry 3 Blood Dragon (HKLM-x32\...\{A071F478-73E0-4143-AE55-4DD6BABD74F5}) (Version: 1.00 - Ubisoft)
Far Cry 3 Deutsch Patch Fix-TokZic 1.00 (HKLM-x32\...\Far Cry 3 Deutsch Patch Fix-TokZic 1.00) (Version: 1.00 - TokZic)
Far Cry 3 Deutsch Patch-TokZic 1.00 (HKLM-x32\...\Far Cry 3 Deutsch Patch-TokZic 1.00) (Version: 1.00 - TokZic)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0003.135 - Rockstar Games Inc.) Hidden
Hitman Absolution (HKLM-x32\...\Hitman Absolution_is1) (Version:  - )
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Keying Suite v11.1.3 (HKLM-x32\...\{21AD9423-3C17-43E2-AFD7-8305C965500F}_is1) (Version: 11.1.3 - Red Giant, LLC)
Mafia II (HKLM-x32\...\Mafia II_is1) (Version: 1.0 - Take-Two Interactive Software, Inc.)
Magic Bullet Suite (HKLM\...\Magic Bullet Suite_is1) (Version: 12.0.2 - Team V.R)
Magic Bullet Suite 64-bit (HKLM-x32\...\InstallShield_{26055432-339E-4776-803B-F22240B91864}) (Version: 11.1.2 - Red Giant Software)
Magic Bullet Suite 64-bit (Version: 11.1.2 - Red Giant Software) Hidden
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MTA:SA v1.3.5 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3.5 - Multi Theft Auto)
MTA:SA v1.4.0 (HKLM-x32\...\MTA:SA 1.4) (Version: v1.4.0 - Multi Theft Auto)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.6 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.3.10.37 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.3.10.37 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Orcs Must Die! (HKLM-x32\...\Orcs Must Die!_is1) (Version:  - )
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Plantronics® GameCom 780/788 Software for Dolby® Headphone (HKLM-x32\...\{EB3C9064-9140-4279-9E51-965119402151}) (Version: 3.20.0001 - Plantronics)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Red Giant Link (HKLM-x32\...\{10F82E5B-B611-4C65-8F29-666A9EC5680A}_is1) (Version: 1.9.2.19 - Red Giant, LLC)
SHARKOON Skiller (HKLM-x32\...\{91C25547-9534-41A5-823A-1E54BA16EA3F}) (Version: 1.00.0000 - )
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
Shooter Suite (HKLM\...\Shooter Suite_is1) (Version: 12.6.2 - Team V.R)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sniper Elite: Zombie Army 2 (HKLM-x32\...\Steam App 247930) (Version:  - Rebellion)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version:  - Obsidian Entertainment)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
SWF Opener (HKLM-x32\...\{01386D1F-ADE7-43B4-A4E9-312FC5BC726F}_is1) (Version: 1.3 - UnH Solutions)
Tales of Monkey Island - Launch of the Screaming Narwhal (HKLM-x32\...\Launch of the Screaming Narwhal) (Version: 1.0.0.15 - Daedalic Entertainment)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Trapcode Suite v12.1.7 (HKLM-x32\...\{DFD2DC6B-C634-4C1C-81CC-5EF852E71CEE}_is1) (Version: 12.1.7 - Red Giant, LLC)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
Universe (HKLM\...\Universe_is1) (Version: 1.4.0.0 CE - Team V.R)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Vegas Pro 13.0 (64-bit) (HKLM\...\{386F5740-091D-11E4-B13E-F04DA23A5C58}) (Version: 13.0.373 - Sony)
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

24-03-2015 22:06:58 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
29-03-2015 20:56:57 Windows Update
01-04-2015 14:30:46 Removed Nero BurnRights 10.
01-04-2015 14:31:12 Removed Nero StartSmart 10.
01-04-2015 22:50:38 Wiederherstellungsvorgang

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 07:26 - 2014-09-14 12:40 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {481C19A1-102C-43DC-A602-8642E6182F7A} - System32\Tasks\{C3CCE56B-4CF4-4681-92C4-2B356B38826D} => Chrome.exe hxxp://ui.skype.com/ui/0/7.0.0.102/de/abandoninstall?source=lightinstaller&amp;page=tsPlugin
Task: {4E89B4B0-CC85-46ED-B4E8-3F3CA78FCCC4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-07] (Google Inc.)
Task: {722F2DA5-3D75-4B8B-A706-616B7C64A5E9} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe
Task: {744E0A84-6F53-48A1-8682-6CD9292E97D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-07] (Google Inc.)
Task: {74726EC3-B4FB-426A-AB83-FEBA960459AA} - System32\Tasks\Java(TM) Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17] (Oracle Corporation)
Task: {8063572F-4A3D-4740-BAAA-BC079BF24584} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-07] (Adobe Systems Incorporated)
Task: {836ABE6E-E11C-4E82-96A8-985A05C32049} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
Task: {B2E04C41-7488-45B4-9E93-63F92F34E09A} - System32\Tasks\Red Giant Link => C:\Program Files (x86)\Red Giant Link\Red Giant Link.exe [2014-11-17] ()
Task: {C4A2FA10-F036-4824-9D0C-1800F17E6AB9} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
Task: {E3D08399-F6D1-413C-AAEE-568117C22390} - System32\Tasks\EXPERTool => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2014-02-17] (Gainward Co. Ltd.)
Task: {E7E019DE-3C30-4F6B-8D4B-B2295BBA490D} - System32\Tasks\{721847FC-0767-4E70-B413-9234752B3796} => Chrome.exe hxxp://ui.skype.com/ui/0/7.0.0.102/de/abandoninstall?source=lightinstaller&amp;page=tsInstall
Task: {F2C8AF16-C834-4966-BB93-A6A48D7BED41} - System32\Tasks\{B72324A2-F78C-4EAB-89BF-B34CBA8A14AC} => pcalua.exe -a "C:\Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2 PSG\Uninstaller.exe"
Task: {F5D21611-7835-4B61-AD24-78E267431EE3} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-03-07] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-12-09 19:02 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-12-09 19:20 - 2014-06-23 15:49 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-01-10 12:19 - 2014-01-21 17:41 - 00817440 ____N () C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
2014-02-28 11:14 - 2014-02-28 11:14 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2014-08-04 15:43 - 2014-08-04 15:43 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2014-08-04 15:43 - 2014-08-04 15:43 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-08-04 15:46 - 2014-08-04 15:46 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-11-16 22:04 - 2014-11-16 22:04 - 00486912 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\soundboard.dll
2014-08-04 15:46 - 2014-08-04 15:46 - 00579016 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2015-01-31 15:08 - 2015-01-16 08:41 - 00714896 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2015-01-31 15:08 - 2015-01-16 08:41 - 00854160 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2015-02-25 23:01 - 2015-02-24 11:50 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-01-10 12:19 - 2014-01-21 17:41 - 00149792 ____N () C:\Program Files\Plantronics\GameCom 780 & 788\VmixPLGC.dll
2015-03-21 13:31 - 2015-03-14 12:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll
2015-03-21 13:31 - 2015-03-14 12:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll
2015-03-21 13:31 - 2015-03-14 12:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData:$SS_DESCRIPTOR_NBVUV6PKDVBGTLPHJKBUK1R0WTPLY2LB3W2PHDEX6J5T4BW9V4DLNNH2V1UY71VU5VVVVVJVTVVJVT
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:$SS_DESCRIPTOR_NBVUV6PKDVBGTLPHJKBUK1R0WTPLY2LB3W2PHDEX6J5T4BW9V4DLNNH2V1UY71VU5VVVVVJVTVVJVT
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:$SS_DESCRIPTOR_NBVUV6PKDVBGTLPHJKBUK1R0WTPLY2LB3W2PHDEX6J5T4BW9V4DLNNH2V1UY71VU5VVVVVJVTVVJVT
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT2
AlternateDataStreams: C:\ProgramData\Application Data:$SS_DESCRIPTOR_NBVUV6PKDVBGTLPHJKBUK1R0WTPLY2LB3W2PHDEX6J5T4BW9V4DLNNH2V1UY71VU5VVVVVJVTVVJVT
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\Users\Clemens\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Clemens\Anwendungsdaten:NT2
AlternateDataStreams: C:\Users\Clemens\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Clemens\AppData\Roaming:NT2

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-957755645-4260464881-2478257714-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Clemens\Desktop\Für Videos\font_preview.png
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Aeria Ignite"
HKLM\...\StartupApproved\Run32: => "GamingKeyboard"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\StartupApproved\StartupFolder: => "MFBot.url"
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\StartupApproved\Run: => "EA Core"
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\StartupApproved\Run: => "Overwolf"

==================== Accounts: =============================

Administrator (S-1-5-21-957755645-4260464881-2478257714-500 - Administrator - Disabled)
Clemens (S-1-5-21-957755645-4260464881-2478257714-1001 - Administrator - Enabled) => C:\Users\Clemens
Gast (S-1-5-21-957755645-4260464881-2478257714-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-957755645-4260464881-2478257714-1003 - Limited - Enabled)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/01/2015 11:08:22 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1584) SRUJet: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\Windows\system32\SRU\SRU008F5.log.

Error: (04/01/2015 10:50:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary GEAR ASPI Filter Driver.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (04/01/2015 06:22:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: BulletProof.exe, Version: 1.2.3.0, Zeitstempel: 0x54de78ad
Name des fehlerhaften Moduls: BulletProof.exe, Version: 1.2.3.0, Zeitstempel: 0x54de78ad
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00124e04
ID des fehlerhaften Prozesses: 0x1324
Startzeit der fehlerhaften Anwendung: 0xBulletProof.exe0
Pfad der fehlerhaften Anwendung: BulletProof.exe1
Pfad des fehlerhaften Moduls: BulletProof.exe2
Berichtskennung: BulletProof.exe3
Vollständiger Name des fehlerhaften Pakets: BulletProof.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: BulletProof.exe5

Error: (04/01/2015 06:22:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: BulletProof.exe, Version: 1.2.3.0, Zeitstempel: 0x54de78ad
Name des fehlerhaften Moduls: BulletProof.exe, Version: 1.2.3.0, Zeitstempel: 0x54de78ad
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00124e04
ID des fehlerhaften Prozesses: 0x12c0
Startzeit der fehlerhaften Anwendung: 0xBulletProof.exe0
Pfad der fehlerhaften Anwendung: BulletProof.exe1
Pfad des fehlerhaften Moduls: BulletProof.exe2
Berichtskennung: BulletProof.exe3
Vollständiger Name des fehlerhaften Pakets: BulletProof.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: BulletProof.exe5

Error: (04/01/2015 04:22:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm mmc.exe, Version 6.2.9200.16496 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1368

Startzeit: 01d06c86a7e250dd

Endzeit: 4294967295

Anwendungspfad: C:\Windows\system32\mmc.exe

Berichts-ID: 9169dbba-d87a-11e4-8062-60a44c3287ba

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/01/2015 04:05:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm setup.exe, Version 15.0.0.498 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 12d4

Startzeit: 01d06c84bd345999

Endzeit: 4294967295

Anwendungspfad: C:\Users\Clemens\AppData\Local\Temp\HZ$D.572.2428\setup.exe

Berichts-ID: 335e06ca-d878-11e4-8062-60a44c3287ba

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/01/2015 02:17:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ts3client_win64.exe, Version 3.0.16.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 104c

Startzeit: 01d06c75ca597e12

Endzeit: 4

Anwendungspfad: C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

Berichts-ID: 1963a86e-d869-11e4-8061-60a44c3287ba

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (03/26/2015 07:56:08 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm vegas130.exe, Version 13.0.0.373 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 106c

Startzeit: 01d067ecc1366b29

Endzeit: 57

Anwendungspfad: C:\Program Files\Sony\Vegas Pro 13.0\vegas130.exe

Berichts-ID: 5f4ef7ef-d3e1-11e4-805b-60a44c3287ba

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (03/26/2015 07:46:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm vegas130.exe, Version 13.0.0.373 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1784

Startzeit: 01d067e8e2df08ee

Endzeit: 77

Anwendungspfad: C:\Program Files\Sony\Vegas Pro 13.0\vegas130.exe

Berichts-ID: e26c13c9-d3df-11e4-805b-60a44c3287ba

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (03/25/2015 05:06:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SWFOPE~1.EXE, Version: 1.3.0.0, Zeitstempel: 0x426f26cb
Name des fehlerhaften Moduls: combase.dll, Version: 6.2.9200.16420, Zeitstempel: 0x505a976e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0004a29c
ID des fehlerhaften Prozesses: 0xf18
Startzeit der fehlerhaften Anwendung: 0xSWFOPE~1.EXE0
Pfad der fehlerhaften Anwendung: SWFOPE~1.EXE1
Pfad des fehlerhaften Moduls: SWFOPE~1.EXE2
Berichtskennung: SWFOPE~1.EXE3
Vollständiger Name des fehlerhaften Pakets: SWFOPE~1.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SWFOPE~1.EXE5


System errors:
=============
Error: (04/03/2015 02:30:57 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (04/02/2015 03:12:12 PM) (Source: DCOM) (EventID: 10010) (User: CLEMENS-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (04/01/2015 11:19:37 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (04/01/2015 11:06:10 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (04/01/2015 10:51:10 PM) (Source: DCOM) (EventID: 10010) (User: CLEMENS-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (04/01/2015 10:51:10 PM) (Source: DCOM) (EventID: 10010) (User: CLEMENS-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (04/01/2015 10:51:10 PM) (Source: DCOM) (EventID: 10010) (User: CLEMENS-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (04/01/2015 04:20:37 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (04/01/2015 04:04:46 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (04/01/2015 03:52:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126


Microsoft Office Sessions:
=========================
Error: (04/01/2015 11:08:22 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost1584SRUJet: C:\Windows\system32\SRU\SRU008F5.log-1811 (0xfffff8ed)

Error: (04/01/2015 10:50:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary GEAR ASPI Filter Driver.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (04/01/2015 06:22:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: BulletProof.exe1.2.3.054de78adBulletProof.exe1.2.3.054de78adc000000500124e04132401d06c9816a69745C:\Program Files (x86)\Red Giant\BulletProof\BulletProof.exeC:\Program Files (x86)\Red Giant\BulletProof\BulletProof.exe5add9f14-d88b-11e4-8062-60a44c3287ba

Error: (04/01/2015 06:22:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: BulletProof.exe1.2.3.054de78adBulletProof.exe1.2.3.054de78adc000000500124e0412c001d06c981260d714C:\Program Files (x86)\Red Giant\BulletProof\BulletProof.exeC:\Program Files (x86)\Red Giant\BulletProof\BulletProof.exe5ad88133-d88b-11e4-8062-60a44c3287ba

Error: (04/01/2015 04:22:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: mmc.exe6.2.9200.16496136801d06c86a7e250dd4294967295C:\Windows\system32\mmc.exe9169dbba-d87a-11e4-8062-60a44c3287ba

Error: (04/01/2015 04:05:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: setup.exe15.0.0.49812d401d06c84bd3459994294967295C:\Users\Clemens\AppData\Local\Temp\HZ$D.572.2428\setup.exe335e06ca-d878-11e4-8062-60a44c3287ba

Error: (04/01/2015 02:17:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: ts3client_win64.exe3.0.16.0104c01d06c75ca597e124C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe1963a86e-d869-11e4-8061-60a44c3287ba

Error: (03/26/2015 07:56:08 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: vegas130.exe13.0.0.373106c01d067ecc1366b2957C:\Program Files\Sony\Vegas Pro 13.0\vegas130.exe5f4ef7ef-d3e1-11e4-805b-60a44c3287ba

Error: (03/26/2015 07:46:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: vegas130.exe13.0.0.373178401d067e8e2df08ee77C:\Program Files\Sony\Vegas Pro 13.0\vegas130.exee26c13c9-d3df-11e4-805b-60a44c3287ba

Error: (03/25/2015 05:06:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: SWFOPE~1.EXE1.3.0.0426f26cbcombase.dll6.2.9200.16420505a976ec00000050004a29cf1801d0670cd960819dC:\PROGRA~2\UNHSOL~1\SWFOPE~1\SWFOPE~1.EXEC:\Windows\SYSTEM32\combase.dll76960b68-d300-11e4-805a-60a44c3287ba


CodeIntegrity Errors:
===================================
  Date: 2014-12-30 02:47:03.426
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\Clemens\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-12-30 02:47:03.339
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-12-30 01:54:41.921
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\Clemens\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-12-30 01:54:41.841
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-09-14 12:39:53.357
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-22 01:09:17.420
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\Clemens\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-22 01:09:17.264
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-05-18 18:01:37.838
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\Clemens\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-05-18 18:01:37.784
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz
Percentage of memory in use: 15%
Total physical RAM: 12224.28 MB
Available physical RAM: 10378.34 MB
Total Pagefile: 13952.28 MB
Available Pagefile: 11730.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.51 GB) (Free:719.62 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 2DF6D47D)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 03.04.2015 21:22
hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

clemicool 03.04.2015 21:56
Code:
ComboFix 15-04-01.01 - Clemens 03.04.2015  22:49:11.1.4 - x64
Microsoft Windows 8  6.2.9200.0.1252.49.1031.18.12224.9997 [GMT 2:00]
ausgeführt von:: c:\users\Clemens\Desktop\ComboFix.exe
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\root
c:\users\Clemens\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
c:\windows\msdownld.tmp
.
.
(((((((((((((((((((((((  Dateien erstellt von 2015-03-03 bis 2015-04-03  ))))))))))))))))))))))))))))))
.
.
2015-04-03 13:01 . 2015-04-03 13:01        --------        d-----w-        c:\programdata\SystemRequirementsLab
2015-04-03 13:01 . 2015-04-03 13:01        --------        d-----w-        c:\program files (x86)\SystemRequirementsLab
2015-04-03 12:57 . 2015-03-23 09:40        1187344        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{7E516CC0-CC53-42E4-99A9-CD6C05C75FFF}\gapaengine.dll
2015-04-03 12:49 . 2015-03-14 10:02        12002392        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{F553CC7E-09A5-4DD6-96B2-D603DE0ED5D9}\mpengine.dll
2015-04-03 12:35 . 2015-04-03 12:37        --------        dc----w-        C:\FRST
2015-04-01 18:55 . 2015-04-01 21:14        --------        d-----w-        c:\program files (x86)\Owlchemy Labs
2015-04-01 14:41 . 2015-04-01 21:16        --------        d-----w-        c:\users\Clemens\AppData\Local\Intel
2015-04-01 14:04 . 2015-04-01 21:14        --------        d-----w-        c:\program files (x86)\Belkin
2015-04-01 14:04 . 2012-02-23 09:01        451072        ----a-w-        c:\windows\SysWow64\ISSRemoveSP.exe
2015-03-29 19:03 . 2015-03-04 07:26        596480        ----a-w-        c:\windows\system32\AutoUpdate.exe
2015-03-29 19:03 . 2015-03-04 07:26        467952        ----a-w-        c:\windows\system32\NotificationUI.exe
2015-03-29 19:03 . 2015-03-04 06:41        695808        ----a-w-        c:\windows\system32\WSShared.dll
2015-03-29 19:03 . 2015-03-04 06:41        163840        ----a-w-        c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-29 19:03 . 2015-03-04 04:53        568832        ----a-w-        c:\windows\SysWow64\WSShared.dll
2015-03-29 19:03 . 2015-03-04 04:53        124928        ----a-w-        c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-29 18:52 . 2015-03-11 05:21        677888        ----a-w-        c:\windows\system32\generaltel.dll
2015-03-29 18:52 . 2015-03-11 05:20        760320        ----a-w-        c:\windows\system32\invagent.dll
2015-03-29 18:52 . 2015-03-11 05:20        414208        ----a-w-        c:\windows\system32\devinv.dll
2015-03-29 18:52 . 2015-03-11 05:20        943104        ----a-w-        c:\windows\system32\appraiser.dll
2015-03-29 18:52 . 2015-03-11 05:20        227328        ----a-w-        c:\windows\system32\aepdu.dll
2015-03-29 18:52 . 2015-03-11 05:20        30720        ----a-w-        c:\windows\system32\acmigration.dll
2015-03-29 18:52 . 2015-03-10 22:04        1107456        ----a-w-        c:\windows\system32\aeinv.dll
2015-03-29 18:50 . 2015-03-14 08:07        1120256        ----a-w-        c:\windows\system32\msctf.dll
2015-03-29 18:50 . 2015-03-14 06:33        891904        ----a-w-        c:\windows\SysWow64\msctf.dll
2015-03-24 20:30 . 2015-03-24 20:30        --------        d-----w-        c:\users\Clemens\AppData\Local\PluralEyes 3
2015-03-24 20:30 . 2015-03-24 20:30        --------        d-----w-        c:\users\Clemens\AppData\Local\Red_Giant
2015-03-24 20:24 . 2015-03-24 20:31        --------        d-----w-        c:\users\Clemens\AppData\Local\Red Giant
2015-03-24 20:17 . 2015-03-24 20:18        --------        d-----w-        c:\program files (x86)\Red Giant Link
2015-03-24 20:15 . 2015-03-24 20:15        --------        d-----w-        c:\programdata\rgt
2015-03-24 20:10 . 2015-03-24 20:10        --------        d-----w-        c:\users\Clemens\AppData\Roaming\Red Giant
2015-03-24 20:10 . 2015-03-24 20:16        --------        d-----w-        c:\programdata\Red Giant
2015-03-24 20:10 . 2015-03-24 20:17        --------        d-----w-        c:\program files (x86)\Red Giant
2015-03-24 20:06 . 2015-02-27 11:39        5849600        ----a-w-        c:\windows\system32\Noesis.dll
2015-03-24 20:06 . 2013-11-21 09:38        4168704        ----a-w-        c:\windows\SysWow64\PhotoLooksRenderer.dll
2015-03-24 20:06 . 2013-11-21 09:38        4893184        ----a-w-        c:\windows\system32\PhotoLooksRenderer_x64.dll
2015-03-24 20:06 . 2015-03-09 09:36        41522176        ----a-w-        c:\windows\system32\MBLooksUI_x64.dll
2015-03-24 20:06 . 2015-02-27 11:39        13485056        ----a-w-        c:\windows\system32\Gpu_Shader_Engine_x64.dll
2015-03-24 20:06 . 2015-03-24 20:16        --------        d-----w-        c:\program files\Red Giant
2015-03-23 15:46 . 2015-03-23 15:46        --------        d-----w-        c:\users\Clemens\AppData\Roaming\RenPy
2015-03-22 15:37 . 2015-03-22 15:37        --------        d-----w-        c:\program files (x86)\UnH Solutions
2015-03-19 14:01 . 2015-03-13 15:38        622224        ----a-w-        c:\windows\SysWow64\nvStreaming.exe
2015-03-13 16:34 . 2015-01-24 06:42        325632        ----a-w-        c:\windows\system32\ubpm.dll
2015-03-13 16:34 . 2015-01-24 05:00        243712        ----a-w-        c:\windows\SysWow64\ubpm.dll
2015-03-11 21:14 . 2015-01-29 08:45        6973248        ----a-w-        c:\windows\system32\ntoskrnl.exe
2015-03-11 21:08 . 2015-02-17 06:54        19777536        ----a-w-        c:\windows\system32\shell32.dll
2015-03-11 21:06 . 2015-01-29 08:05        1627648        ----a-w-        c:\windows\system32\WindowsCodecs.dll
2015-03-11 21:06 . 2015-01-29 06:19        1339392        ----a-w-        c:\windows\SysWow64\WindowsCodecs.dll
2015-03-11 21:05 . 2015-03-06 07:39        588800        ----a-w-        c:\windows\system32\SHCore.dll
2015-03-11 21:05 . 2015-03-06 07:39        412672        ----a-w-        c:\windows\system32\schannel.dll
2015-03-11 21:05 . 2015-03-06 05:48        452608        ----a-w-        c:\windows\SysWow64\SHCore.dll
2015-03-11 21:05 . 2015-03-06 05:48        318464        ----a-w-        c:\windows\SysWow64\schannel.dll
2015-03-11 21:05 . 2015-02-02 23:18        569712        ----a-w-        c:\windows\system32\drivers\cng.sys
2015-03-11 21:01 . 2015-02-26 04:35        4063232        ----a-w-        c:\windows\system32\win32k.sys
2015-03-11 21:00 . 2015-02-20 13:59        46080        ----a-w-        c:\windows\system32\atmlib.dll
2015-03-11 21:00 . 2015-02-20 11:56        366592        ----a-w-        c:\windows\system32\atmfd.dll
2015-03-11 21:00 . 2015-02-20 08:10        35328        ----a-w-        c:\windows\SysWow64\atmlib.dll
2015-03-11 21:00 . 2015-02-20 07:24        304128        ----a-w-        c:\windows\SysWow64\atmfd.dll
2015-03-11 21:00 . 2015-01-24 04:31        235520        ----a-w-        c:\windows\system32\rdpudd.dll
2015-03-11 21:00 . 2015-01-24 06:43        420864        ----a-w-        c:\windows\system32\WMPhoto.dll
2015-03-11 21:00 . 2015-01-24 05:00        368640        ----a-w-        c:\windows\SysWow64\WMPhoto.dll
2015-03-11 15:00 . 2015-03-11 15:00        --------        d-----w-        c:\users\Clemens\AppData\Roaming\11bitstudios
2015-03-08 12:36 . 2015-03-08 12:36        --------        d-----w-        c:\users\Clemens\AppData\Roaming\MMFApplications
2015-03-08 12:35 . 2015-03-08 12:35        --------        d-----w-        c:\programdata\SkidRow
2015-03-06 16:25 . 2015-04-01 21:15        --------        dc----w-        c:\windows\system32\DRVSTORE
2015-03-06 16:25 . 2015-04-01 21:01        --------        d-----w-        c:\programdata\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-03-06 16:24 . 2015-04-01 21:18        --------        d-----w-        c:\program files\Common Files\Apple
2015-03-06 16:23 . 2015-04-01 21:15        --------        d-----w-        c:\program files (x86)\Common Files\Apple
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-23 09:40 . 2014-02-21 14:18        1187344        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\NISBackup\gapaengine.dll
2015-03-13 19:41 . 2015-01-31 09:21        17258024        ----a-w-        c:\windows\system32\nvd3dumx.dll
2015-03-13 19:41 . 2015-01-31 09:21        3303448        ----a-w-        c:\windows\system32\nvapi64.dll
2015-03-13 19:41 . 2015-01-27 02:59        2906928        ----a-w-        c:\windows\SysWow64\nvapi.dll
2015-03-13 19:41 . 2014-11-19 18:56        18580512        ----a-w-        c:\windows\system32\nvwgf2umx.dll
2015-03-13 19:41 . 2013-12-09 17:02        73872        ----a-w-        c:\windows\system32\OpenCL.dll
2015-03-13 19:41 . 2013-12-09 17:02        60560        ----a-w-        c:\windows\SysWow64\OpenCL.dll
2015-03-13 16:16 . 2013-12-09 17:02        6861968        ----a-w-        c:\windows\system32\nvcpl.dll
2015-03-13 16:16 . 2013-12-09 17:02        3526856        ----a-w-        c:\windows\system32\nvsvc64.dll
2015-03-13 16:16 . 2013-12-09 17:02        935056        ----a-w-        c:\windows\system32\nvvsvc.exe
2015-03-13 16:16 . 2013-12-09 17:02        62608        ----a-w-        c:\windows\system32\nvshext.dll
2015-03-13 16:16 . 2013-12-09 17:02        386248        ----a-w-        c:\windows\system32\nvmctray.dll
2015-03-13 16:16 . 2013-12-09 17:02        2559808        ----a-w-        c:\windows\system32\nvsvcr.dll
2015-03-11 13:10 . 2014-06-08 18:22        4246327        ----a-w-        c:\windows\system32\nvcoproc.bin
2015-03-07 13:37 . 2013-12-09 16:32        122905848        ----a-w-        c:\windows\system32\MRT.exe
2015-03-04 21:24 . 2014-07-10 14:19        791496        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-04 21:24 . 2014-07-10 14:19        177608        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-03 13:17 . 2013-12-09 17:17        295552        ------w-        c:\windows\system32\MpSigStub.exe
2015-02-05 21:01 . 2015-02-15 03:33        1895240        ----a-w-        c:\windows\system32\nvdispco6434752.dll
2015-02-05 21:01 . 2015-02-15 03:33        1557648        ----a-w-        c:\windows\system32\nvdispgenco6434752.dll
2015-01-26 20:29 . 2014-10-20 20:18        98216        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-01-16 06:40 . 2015-01-31 13:08        1316184        ----a-w-        c:\windows\SysWow64\nvspbridge.dll
2015-01-16 06:40 . 2015-01-31 13:08        1278920        ----a-w-        c:\windows\SysWow64\nvspcap.dll
2015-01-16 06:39 . 2015-01-31 13:08        1756424        ----a-w-        c:\windows\system32\nvspbridge64.dll
2015-01-16 06:39 . 2015-01-31 13:08        1514528        ----a-w-        c:\windows\system32\nvspcap64.dll
2015-01-15 11:44 . 2015-02-17 18:13        1043968        ----a-w-        c:\windows\system32\usercpl.dll
2015-01-15 11:43 . 2015-02-17 18:13        1282560        ----a-w-        c:\windows\system32\lsasrv.dll
2015-01-15 10:00 . 2015-02-17 18:13        961536        ----a-w-        c:\windows\SysWow64\usercpl.dll
2015-01-15 09:38 . 2015-02-17 18:13        717824        ----a-w-        c:\windows\system32\adtschema.dll
2015-01-15 09:09 . 2015-02-17 18:13        717824        ----a-w-        c:\windows\SysWow64\adtschema.dll
2015-01-13 04:15 . 2015-02-04 09:52        1540240        ----a-w-        c:\windows\system32\nvhdagenco6420103.dll
2015-01-10 08:07 . 2015-02-04 09:52        1895240        ----a-w-        c:\windows\system32\nvdispco6434725.dll
2015-01-10 08:07 . 2015-02-04 09:52        1556808        ----a-w-        c:\windows\system32\nvdispgenco6434725.dll
2015-01-09 06:43 . 2015-02-25 21:15        951808        ----a-w-        c:\windows\system32\Windows.Globalization.dll
2015-01-09 05:03 . 2015-02-25 21:15        601088        ----a-w-        c:\windows\SysWow64\Windows.Globalization.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2015-02-26 2886848]
"Akamai NetSession Interface"="c:\users\Clemens\AppData\Local\Akamai\netsession_win.exe" [2014-04-17 4672920]
"TBPanel"="c:\program files (x86)\EXPERTool\TBPanel.exe" [2014-02-17 2195240]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GamingKeyboard"="c:\program files (x86)\SHARKOON Skiller\GameMon.exe" [2012-06-07 1803264]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableSecureUIAPath"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys;c:\windows\SYSNATIVE\drivers\Apowersoft_AudioDevice.sys [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x]
R3 FairplayKD;FairplayKD;c:\programdata\MTA San Andreas All\Common\temp\FairplayKD.sys;c:\programdata\MTA San Andreas All\Common\temp\FairplayKD.sys [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\System32\drivers\point64.sys;c:\windows\SYSNATIVE\drivers\point64.sys [x]
R3 RTL8168;Realtek 8168 NT-Treiber;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8187B.sys [x]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 wolfkr;wolfkr;c:\aeriagames\WolfTeam-DE\avital\wolfk64.sys;c:\aeriagames\WolfTeam-DE\avital\wolfk64.sys [x]
R3 XFDriver64;XFDriver64;c:\program files (x86)\Xfire2\XFDriver64.sys;c:\program files (x86)\Xfire2\XFDriver64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 AU8168;AU 8168 NT Driver;c:\windows\system32\DRIVERS\au630x64.sys;c:\windows\SYSNATIVE\DRIVERS\au630x64.sys [x]
S3 GameKB;SHARKOON Skiller;c:\windows\system32\drivers\GameKB.sys;c:\windows\SYSNATIVE\drivers\GameKB.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 PlantronicsGC;PLTGC Interface;c:\windows\system32\drivers\PLTGC.sys;c:\windows\SYSNATIVE\drivers\PLTGC.sys [x]
S3 RtlWlanu;Realtek Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtwlanu.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlanu.sys [x]
S3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-03-21 11:31        1061704        ----a-w-        c:\program files (x86)\Google\Chrome\Application\41.0.2272.101\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-02-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-31 22:38]
.
2015-04-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-07 10:35]
.
2015-04-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-07 10:35]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GamecomSound"="c:\program files\Plantronics\GameCom 780 & 788\GameCom780.exe" [2014-01-21 817440]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-02-24 2601104]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-01-16 1514528]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
Trusted Zone: aeriagames.com
TCP: DhcpNameServer = 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
AddRemove-{B20F9D1C-A0A5-4CD8-8306-DA03872311B1} - c:\program files (x86)\\InstallShield Installation Information\{B20F9D1C-A0A5-4CD8-8306-DA03872311B1}\Install.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-957755645-4260464881-2478257714-1001CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:13,62,20,97,03,c3,c5,59,a1,04,17,5f,a7,29,99,49,a6,9b,4b,c0,34,
  e1,39,f2,11,13,8e,fb,ee,3f,ae,1c,fa,03,32,7c,06,a8,77,78,d7,d8,84,7f,66,c1,\
"rkeysecu"=hex:9b,a8,c3,5a,cd,fc,49,88,47,c7,81,53,ca,d1,e5,e0
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Zeit der Fertigstellung: 2015-04-03  22:55:42
ComboFix-quarantined-files.txt  2015-04-03 20:55
.
Vor Suchlauf: 15 Verzeichnis(se), 774.419.808.256 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 775.380.791.296 Bytes frei
.
- - End Of File - - 49127AC27CBCC4D9DF3C921E24FFFE58
A36C5E4F47E84449FF07ED3517B43A31

schrauber 04.04.2015 11:27
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

clemicool 06.04.2015 13:19
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 06.04.2015
Suchlauf-Zeit: 13:54:25
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.4.1018
Malware Datenbank: v2015.04.06.04
Rootkit Datenbank: v2015.03.31.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8
CPU: x64
Dateisystem: NTFS
Benutzer: Clemens

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 355486
Verstrichene Zeit: 7 Min, 5 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 1
PUP.Optional.Trovi.A, C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences, Gut: (), Schlecht: (  "homepage": "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M18CEBFDC-E1D6-4F55-A93D-1C20C3016816&SearchSource=55&CUI=&UM=6&UP=SP7A3DCEFA-5B80-459B-8FDB-C5C7F2D6883D&SSPV=",), Ersetzt,[4418b3b6bbcf2214494850e6cf3711ef]

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
Code:
# AdwCleaner v4.200 - Bericht erstellt 06/04/2015 um 14:07:44
# Aktualisiert 29/03/2015 von Xplode
# Datenbank : 2015-03-29.1 [Server]
# Betriebssystem : Windows 8  (x64)
# Benutzername : Clemens - CLEMENS-PC
# Gestarted von : C:\Users\Clemens\Desktop\AdwCleaner_4.200.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Internetbrowser ] *****

-\\ Internet Explorer v10.0.9200.17267


-\\ Google Chrome v41.0.2272.118

[C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M18CEBFDC-E1D6-4F55-A93D-1C20C3016816&SearchSource=58&CUI=&UM=6&UP=SP7A3DCEFA-5B80-459B-8FDB-C5C7F2D6883D&q={searchTerms}&SSPV=
[C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Homepage] : hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M18CEBFDC-E1D6-4F55-A93D-1C20C3016816&SearchSource=55&CUI=&UM=6&UP=SP7A3DCEFA-5B80-459B-8FDB-C5C7F2D6883D&SSPV=

*************************

AdwCleaner[R0].txt - [1083 Bytes] - [06/04/2015 14:05:09]
AdwCleaner[R1].txt - [1433 Bytes] - [06/04/2015 14:06:53]
AdwCleaner[S0].txt - [1353 Bytes] - [06/04/2015 14:07:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1412  Bytes] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.5.2 (04.06.2015:1)
OS: Windows 8 x64
Ran by Clemens on 06.04.2015 at 14:13:57,33
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\prefetch\DRIVERUPDATEUI.EXE-127C19C8.pf



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.04.2015 at 14:16:02,17
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Clemens (administrator) on CLEMENS-PC on 06-04-2015 14:16:45
Running from C:\Users\Clemens\Downloads
Loaded Profiles: Clemens (Available profiles: Clemens)
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Gainward Co. Ltd.) C:\Program Files (x86)\EXPERTool\TBPanel.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Microsoft Corporation) C:\Windows\System32\AutoUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GamecomSound] => C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe [817440 2014-01-21] ()
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2601104 2015-02-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [GamingKeyboard] => C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2886848 2015-02-26] (Valve Corporation)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Clemens\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [TBPanel] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2195240 2014-02-17] (Gainward Co. Ltd.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-957755645-4260464881-2478257714-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Clemens\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: redgiant.com/RGMediaPlayer -> C:\Program Files (x86)\Red Giant\BulletProof\npRGMediaPlayer.dll [2014-06-18] (Red Giant)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-03-08] ()

Chrome:
=======
CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M18CEBFDC-E1D6-4F55-A93D-1C20C3016816&SearchSource=55&CUI=&UM=6&UP=SP7A3DCEFA-5B80-459B-8FDB-C5C7F2D6883D&SSPV=
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-09-14]
CHR Extension: (Google Slides) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-14]
CHR Extension: (Google Docs) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-07]
CHR Extension: (Google Drive) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-07]
CHR Extension: (YouTube) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-07]
CHR Extension: (Adblock Plus) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-14]
CHR Extension: (Google Search) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-07]
CHR Extension: (Google Play Music) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-09-14]
CHR Extension: (Google Sheets) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-14]
CHR Extension: (AdBlock) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-14]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-04]
CHR Extension: (Google Wallet) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-14]
CHR Extension: (Gmail) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-07]
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Slides) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-16]
CHR Extension: (Google Docs) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-16]
CHR Extension: (Google Drive) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-16]
CHR Extension: (YouTube) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-16]
CHR Extension: (Google Search) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-16]
CHR Extension: (Google Play Music) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-11-16]
CHR Extension: (Google Sheets) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-16]
CHR Extension: (Google Wallet) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-16]
CHR Extension: (Gmail) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-02-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-01-16] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-23] ()
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Apowersoft_AudioDevice; C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek                                            )
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-06-08] (Disc Soft Ltd)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 PlantronicsGC; C:\Windows\system32\drivers\PLTGC.sys [1327104 2013-04-12] (C-Media Electronics Inc)
S3 RTL8187B; C:\Windows\system32\DRIVERS\RTL8187B.sys [458384 2012-05-31] (Realtek Semiconductor Corporation                          )
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1577104 2012-09-27] (Realtek Semiconductor Corporation                          )
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-01-15] (Anchorfree Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 wolfkr; \??\C:\AeriaGames\WolfTeam-DE\avital\wolfk64.sys [X]
S3 XFDriver64; \??\C:\Program Files (x86)\Xfire2\XFDriver64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-06 14:16 - 2015-04-06 14:16 - 00000697 _____ () C:\Users\Clemens\Desktop\JRT.txt
2015-04-06 14:14 - 2015-04-06 14:14 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-CLEMENS-PC-Windows-8-(64-bit).dat
2015-04-06 14:13 - 2015-04-06 14:13 - 00000000 ___DC () C:\RegBackup
2015-04-06 14:13 - 2015-04-06 14:12 - 02691312 _____ (Thisisu) C:\Users\Clemens\Desktop\JRT.exe
2015-04-06 14:11 - 2015-04-06 14:12 - 02691312 _____ (Thisisu) C:\Users\Clemens\Downloads\JRT.exe
2015-04-06 14:04 - 2015-04-06 14:07 - 00000000 ___DC () C:\AdwCleaner
2015-04-06 14:03 - 2015-04-06 14:03 - 00001528 _____ () C:\Users\Clemens\Desktop\mbam.txt
2015-04-06 13:58 - 2015-04-06 13:58 - 02208768 _____ () C:\Users\Clemens\Desktop\AdwCleaner_4.200.exe
2015-04-06 13:57 - 2015-04-06 13:58 - 02208768 _____ () C:\Users\Clemens\Downloads\AdwCleaner_4.200.exe
2015-04-06 13:45 - 2015-04-06 13:53 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-06 13:45 - 2015-04-06 13:45 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-06 13:45 - 2015-04-06 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-06 13:45 - 2015-04-06 13:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-06 13:45 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-06 13:45 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-06 13:45 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-06 13:44 - 2015-04-06 13:42 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Clemens\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-06 13:32 - 2015-04-06 13:42 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Clemens\Downloads\mbam-setup-2.1.4.1018.exe
2015-04-03 22:55 - 2015-04-03 22:55 - 00017184 ____C () C:\ComboFix.txt
2015-04-03 22:47 - 2015-04-03 22:55 - 00000000 ___DC () C:\Qoobox
2015-04-03 22:47 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-04-03 22:47 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-04-03 22:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-04-03 22:46 - 2015-04-03 22:46 - 05617096 ____R (Swearware) C:\Users\Clemens\Desktop\ComboFix.exe
2015-04-03 22:43 - 2015-04-03 22:46 - 05617096 _____ (Swearware) C:\Users\Clemens\Downloads\ComboFix.exe
2015-04-03 22:42 - 2015-04-03 22:42 - 00027527 _____ () C:\Users\Clemens\Downloads\1e035a17-26a8-4fad-aace-7739ee27a807.aac
2015-04-03 22:33 - 2015-04-03 22:33 - 00533280 _____ () C:\Users\Clemens\Downloads\PTT-20150403-WA0131.aac
2015-04-03 15:01 - 2015-04-03 15:01 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2015-04-03 15:01 - 2015-04-03 15:01 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2015-04-03 14:35 - 2015-04-06 14:16 - 00015219 _____ () C:\Users\Clemens\Downloads\FRST.txt
2015-04-03 14:35 - 2015-04-06 14:16 - 00000000 ___DC () C:\FRST
2015-04-03 14:35 - 2015-04-03 14:36 - 00036313 _____ () C:\Users\Clemens\Downloads\Addition.txt
2015-04-03 14:33 - 2015-04-03 14:34 - 02095616 _____ (Farbar) C:\Users\Clemens\Downloads\FRST64.exe
2015-04-02 12:12 - 2015-04-02 13:27 - 00000000 ____D () C:\Users\Clemens\Desktop\silv
2015-04-02 11:40 - 2015-04-02 14:28 - 437588156 _____ () C:\Users\Clemens\Downloads\SnieElieIIUtmtEitionMLT9EAmgo.part13.rar
2015-04-02 08:23 - 2015-04-02 14:28 - 00000000 ____D () C:\Users\Clemens\Desktop\sniper elite 3
2015-04-02 00:08 - 2015-04-02 06:00 - 1000000000 _____ () C:\Users\Clemens\Downloads\SnieElieIIUtmtEitionMLT9EAmgo.part01.rar
2015-04-01 20:56 - 2015-04-01 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Owlchemy Labs
2015-04-01 20:55 - 2015-04-01 23:14 - 00000000 ____D () C:\Program Files (x86)\Owlchemy Labs
2015-04-01 18:06 - 2015-04-01 20:23 - 377019938 _____ () C:\Users\Clemens\Downloads\DYO0215C31XBI1737.rar
2015-04-01 17:11 - 2015-04-01 17:11 - 00000098 _____ () C:\Users\Clemens\Downloads\1e035a17-26a8-4fad-aace-7739ee27a807.htm
2015-04-01 17:08 - 2015-04-01 17:08 - 00018256 _____ () C:\Users\Clemens\Downloads\Download (1).htm
2015-04-01 17:07 - 2015-04-01 17:07 - 00008390 _____ () C:\Users\Clemens\Downloads\Download.htm
2015-04-01 16:41 - 2015-04-01 23:16 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Intel
2015-04-01 16:04 - 2015-04-01 23:14 - 00000000 ____D () C:\Program Files (x86)\Belkin
2015-04-01 16:04 - 2012-02-23 11:01 - 00451072 _____ () C:\Windows\SysWOW64\ISSRemoveSP.exe
2015-03-30 20:56 - 2015-03-30 20:56 - 00000000 ____D () C:\Users\Clemens\Documents\My Cheat Tables
2015-03-29 21:03 - 2015-03-04 09:26 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2015-03-29 21:03 - 2015-03-04 09:26 - 00467952 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2015-03-29 21:03 - 2015-03-04 09:26 - 00011105 _____ () C:\Windows\system32\AutoconfigV2.cab
2015-03-29 21:03 - 2015-03-04 08:41 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-03-29 21:03 - 2015-03-04 08:41 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-29 21:03 - 2015-03-04 06:53 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-03-29 21:03 - 2015-03-04 06:53 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-29 20:52 - 2015-03-11 07:21 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00943104 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-03-29 20:52 - 2015-03-11 00:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-03-29 20:50 - 2015-03-14 10:07 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-29 20:50 - 2015-03-14 08:33 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\Documents\PluralEyes
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Red_Giant
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\AppData\Local\PluralEyes 3
2015-03-24 22:24 - 2015-03-24 22:31 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Red Giant
2015-03-24 22:24 - 2015-03-24 22:24 - 00000000 ____D () C:\Users\Clemens\Documents\Red Giant
2015-03-24 22:17 - 2015-03-24 22:18 - 00000000 ____D () C:\Program Files (x86)\Red Giant Link
2015-03-24 22:15 - 2015-03-24 22:15 - 00000000 ____D () C:\ProgramData\rgt
2015-03-24 22:10 - 2015-03-24 22:17 - 00000000 ____D () C:\Program Files (x86)\Red Giant
2015-03-24 22:10 - 2015-03-24 22:16 - 00000000 ____D () C:\ProgramData\Red Giant
2015-03-24 22:10 - 2015-03-24 22:10 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Red Giant
2015-03-24 22:06 - 2015-03-24 22:16 - 00000000 ____D () C:\Program Files\Red Giant
2015-03-24 22:06 - 2015-03-09 11:36 - 41522176 _____ (Red Giant LLC) C:\Windows\system32\MBLooksUI_x64.dll
2015-03-24 22:06 - 2015-02-27 13:39 - 13485056 _____ (Red Giant Software) C:\Windows\system32\Gpu_Shader_Engine_x64.dll
2015-03-24 22:06 - 2015-02-27 13:39 - 05849600 _____ (Noesis Technologies) C:\Windows\system32\Noesis.dll
2015-03-24 22:06 - 2013-11-21 11:38 - 04893184 _____ () C:\Windows\system32\PhotoLooksRenderer_x64.dll
2015-03-24 22:06 - 2013-11-21 11:38 - 04168704 _____ () C:\Windows\SysWOW64\PhotoLooksRenderer.dll
2015-03-23 17:46 - 2015-03-23 17:46 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\RenPy
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnH Solutions
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnH Solutions
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\Program Files (x86)\UnH Solutions
2015-03-22 12:57 - 2011-10-21 17:48 - 00000000 ___HD () C:\Users\Clemens\Desktop\flashgames
2015-03-19 16:01 - 2015-03-13 17:38 - 00622224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-03-19 16:00 - 2015-03-13 21:41 - 32114888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 24775368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 20466376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 16022016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 14121624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 13297144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 13210080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10775080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10715864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10262160 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-03-19 16:00 - 2015-03-13 21:41 - 03611792 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 03249352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434788.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434788.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00997856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00970384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00944784 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00930448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00909512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00878328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00400584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00390288 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00354112 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00346824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00306208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00178512 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-03-18 23:12 - 2015-03-19 01:19 - 309143408 _____ (NVIDIA Corporation) C:\Users\Clemens\Downloads\347.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-03-13 18:34 - 2015-01-24 08:42 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-13 18:34 - 2015-01-24 07:00 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-12 07:48 - 2015-03-12 07:48 - 00288352 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 23:15 - 2015-02-23 12:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 23:15 - 2015-02-23 12:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 23:15 - 2015-02-23 12:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 23:15 - 2015-02-23 12:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 23:15 - 2015-02-23 11:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 23:15 - 2015-02-23 11:15 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2015-03-11 23:15 - 2015-02-23 10:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 23:15 - 2015-02-21 07:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00737280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 23:15 - 2015-02-21 07:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 23:15 - 2015-02-21 07:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 23:15 - 2015-02-21 07:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 23:15 - 2015-02-21 07:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 23:15 - 2015-02-21 07:07 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2015-03-11 23:15 - 2015-02-21 06:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 23:15 - 2015-02-21 05:00 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2015-03-11 23:14 - 2015-01-29 10:45 - 06973248 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 23:08 - 2015-02-17 08:54 - 19777536 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 23:08 - 2015-02-17 07:13 - 17561600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 23:06 - 2015-01-29 10:05 - 01627648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 23:06 - 2015-01-29 08:19 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 23:05 - 2015-03-06 09:39 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2015-03-11 23:05 - 2015-03-06 09:39 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 23:05 - 2015-03-06 07:48 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2015-03-11 23:05 - 2015-03-06 07:48 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 23:05 - 2015-02-03 01:18 - 00569712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 23:04 - 2015-01-31 15:48 - 00044024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-03-11 23:04 - 2015-01-31 07:55 - 00275712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-03-11 23:01 - 2015-02-26 06:35 - 04063232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 23:00 - 2015-02-20 15:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 23:00 - 2015-02-20 13:56 - 00366592 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 23:00 - 2015-02-20 10:10 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 23:00 - 2015-02-20 09:24 - 00304128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 23:00 - 2015-02-13 01:18 - 00396419 _____ () C:\Windows\system32\ApnDatabase.xml
2015-03-11 23:00 - 2015-01-24 08:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 23:00 - 2015-01-24 07:00 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-11 23:00 - 2015-01-24 06:31 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 17:00 - 2015-03-11 17:00 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\11bitstudios
2015-03-08 14:36 - 2015-03-08 14:36 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\MMFApplications
2015-03-08 14:35 - 2015-03-08 14:35 - 00000000 ____D () C:\ProgramData\SkidRow

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-06 14:14 - 2012-07-26 12:27 - 00828878 _____ () C:\Windows\system32\perfh007.dat
2015-04-06 14:14 - 2012-07-26 12:27 - 00188018 _____ () C:\Windows\system32\perfc007.dat
2015-04-06 14:14 - 2012-07-26 09:28 - 01949496 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-06 14:12 - 2014-01-15 16:28 - 01888539 _____ () C:\Windows\WindowsUpdate.log
2015-04-06 14:09 - 2013-12-07 12:35 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-06 14:08 - 2014-12-01 15:50 - 00018480 _____ () C:\Windows\PFRO.log
2015-04-06 14:08 - 2013-12-09 19:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-06 14:08 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-06 14:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2015-04-06 13:36 - 2013-12-07 13:47 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\TS3Client
2015-04-06 13:30 - 2013-12-07 12:35 - 00001140 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-03 22:53 - 2012-07-26 07:26 - 00000215 ____C () C:\Windows\system.ini
2015-04-03 22:47 - 2014-09-14 12:35 - 00000000 ____D () C:\Windows\erdnt
2015-04-03 22:01 - 2015-01-26 22:14 - 00001339 _____ () C:\Windows\setupact.log
2015-04-02 15:11 - 2014-01-07 19:48 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\vlc
2015-04-02 11:41 - 2013-12-28 19:57 - 00000000 ____D () C:\Users\Clemens\Desktop\Spiele
2015-04-02 09:51 - 2014-09-26 15:37 - 08009728 ___SH () C:\Users\Clemens\Desktop\Thumbs.db
2015-04-01 23:22 - 2013-12-07 12:09 - 00000000 ____D () C:\Users\Clemens
2015-04-01 23:18 - 2015-03-06 18:24 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-04-01 23:18 - 2014-12-18 23:46 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-01 23:18 - 2014-10-30 14:51 - 00000000 ____D () C:\Windows\system32\AutoUpdateLicense
2015-04-01 23:18 - 2014-07-10 16:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-01 23:18 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\WinStore
2015-04-01 23:17 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Sysprep
2015-04-01 23:16 - 2014-10-01 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-04-01 23:16 - 2014-10-01 21:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-04-01 23:16 - 2014-08-03 01:09 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-04-01 23:16 - 2014-06-08 21:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-04-01 23:16 - 2014-01-18 00:13 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Skype
2015-04-01 23:16 - 2014-01-03 16:22 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-01 23:16 - 2013-12-28 19:58 - 00000000 ___RD () C:\Users\Clemens\Desktop\Tools
2015-04-01 23:16 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache
2015-04-01 23:15 - 2014-06-28 13:44 - 00000000 ____D () C:\ProgramData\Apple
2015-04-01 23:15 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\registration
2015-04-01 23:14 - 2014-03-07 17:57 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-01 23:14 - 2014-02-08 13:38 - 00000000 ____D () C:\Program Files (x86)\Activision
2015-04-01 23:14 - 2013-12-18 19:18 - 00000000 ____D () C:\Users\Clemens\Desktop\Musik
2015-04-01 23:14 - 2013-12-07 12:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-01 23:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-01 23:01 - 2015-03-06 18:25 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-04-01 23:01 - 2015-01-31 17:15 - 00000000 ____D () C:\ProgramData\Nero
2015-04-01 18:25 - 2014-11-05 21:15 - 00000000 ____D () C:\Users\Clemens\AppData\Local\LooksBuilder
2015-04-01 18:23 - 2014-01-11 11:36 - 00000000 ____D () C:\Users\Clemens\AppData\Local\CrashDumps
2015-04-01 16:58 - 2015-02-02 15:42 - 00000000 ____D () C:\Users\Clemens\Desktop\shadowplay
2015-04-01 16:57 - 2014-07-05 11:09 - 00000000 ____D () C:\Users\Clemens\Desktop\Mods
2015-04-01 16:04 - 2012-07-26 07:26 - 00000167 _____ () C:\Windows\win.ini
2015-03-31 22:36 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-03-31 18:21 - 2013-12-07 12:17 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-957755645-4260464881-2478257714-1001
2015-03-29 21:03 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp
2015-03-24 22:18 - 2014-11-05 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Giant
2015-03-24 22:16 - 2014-11-05 21:13 - 00000000 ____D () C:\ProgramData\RedGiant
2015-03-24 22:10 - 2014-11-05 21:14 - 00004198 _____ () C:\Windows\System32\Tasks\Red Giant Link
2015-03-24 22:06 - 2014-11-05 21:14 - 00000000 ____D () C:\Program Files (x86)\LooksBuilder
2015-03-22 16:54 - 2014-09-23 18:59 - 00026624 ____H () C:\Users\Clemens\Desktop\photothumb.db
2015-03-19 16:01 - 2015-01-31 11:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-19 16:00 - 2013-12-09 19:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-13 21:41 - 2015-01-31 11:21 - 17258024 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-03-13 21:41 - 2015-01-31 11:21 - 03303448 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-03-13 21:41 - 2015-01-27 04:59 - 02906928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-03-13 21:41 - 2014-12-25 17:57 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-03-13 21:41 - 2014-11-19 20:56 - 18580512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41 - 2013-12-09 19:02 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-03-13 21:41 - 2013-12-09 19:02 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 06861968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 03526856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16 - 2013-12-09 19:02 - 00386248 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-11 15:10 - 2014-06-08 20:22 - 04246327 _____ () C:\Windows\system32\nvcoproc.bin
2015-03-07 15:40 - 2013-12-09 18:32 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-07 15:37 - 2013-12-09 18:32 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2014-01-18 00:14 - 2014-10-17 01:02 - 2260992 _____ () C:\Program Files (x86)\Thumbs.db
2014-01-13 23:23 - 2014-10-22 11:23 - 0003584 _____ () C:\Users\Clemens\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-13 20:54 - 2014-11-02 17:33 - 0007598 _____ () C:\Users\Clemens\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Clemens\AppData\Local\Temp\Quarantine.exe
C:\Users\Clemens\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-01 18:58

==================== End Of Log ============================
--- --- ---

schrauber 06.04.2015 17:58

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

clemicool 07.04.2015 01:18
Code:
ESETSmartInstaller@High as downloader log:
Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=4e9537cf809303418be6e5825a6acf27
# engine=23256
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-04-07 12:08:33
# local_time=2015-04-07 02:08:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 29862 5685209 0 0
# scanned=257311
# found=1
# cleaned=0
# scan_time=10800
sh=86BF70EC20D5ED287BA9F3A9EBEFA19E532C8798 ft=0 fh=0000000000000000 vn="Variante von Win32/Keygen.HU potenziell unsichere Anwendung" ac=I fn="C:\Users\Clemens\Desktop\Tools\sovepr37.rar"
Code:
Results of screen317's Security Check version 0.99.99 
  x64 (UAC is enabled) 
 Internet Explorer 10 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Windows Defender 
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 Java 8 Update 31 
 Java version 32-bit out of Date!
  Adobe Flash Player        16.0.0.305 Flash Player out of Date! 
 Google Chrome (41.0.2272.101)
 Google Chrome (41.0.2272.118)
````````Process Check: objlist.exe by Laurent```````` 
 Windows Defender MSMpEng.exe
 SoftwareDistribution Download 5ff46bd639cd986ab17b1cf48385c718 windowsstoresetupbox.exe
 Windows Defender MsMpEng.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:  %
````````````````````End of Log``````````````````````

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Clemens (administrator) on CLEMENS-PC on 07-04-2015 02:16:33
Running from C:\Users\Clemens\Downloads
Loaded Profiles: Clemens (Available profiles: Clemens)
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Gainward Co. Ltd.) C:\Program Files (x86)\EXPERTool\TBPanel.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\AutoUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\5ff46bd639cd986ab17b1cf48385c718\windowsstoresetupbox.exe
(Microsoft Corporation) C:\$Windows.~BT\Sources\SetupHost.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GamecomSound] => C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe [817440 2014-01-21] ()
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2601104 2015-02-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [GamingKeyboard] => C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2886848 2015-02-26] (Valve Corporation)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Clemens\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [TBPanel] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2195240 2014-02-17] (Gainward Co. Ltd.)
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-957755645-4260464881-2478257714-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-957755645-4260464881-2478257714-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Clemens\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: redgiant.com/RGMediaPlayer -> C:\Program Files (x86)\Red Giant\BulletProof\npRGMediaPlayer.dll [2014-06-18] (Red Giant)
FF Plugin HKU\S-1-5-21-957755645-4260464881-2478257714-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-03-08] ()

Chrome:
=======
CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M18CEBFDC-E1D6-4F55-A93D-1C20C3016816&SearchSource=55&CUI=&UM=6&UP=SP7A3DCEFA-5B80-459B-8FDB-C5C7F2D6883D&SSPV=
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-09-14]
CHR Extension: (Google Slides) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-14]
CHR Extension: (Google Docs) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-07]
CHR Extension: (Google Drive) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-07]
CHR Extension: (YouTube) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-07]
CHR Extension: (Adblock Plus) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-14]
CHR Extension: (Google Search) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-07]
CHR Extension: (Google Play Music) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-09-14]
CHR Extension: (Google Sheets) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-14]
CHR Extension: (AdBlock) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-14]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-04]
CHR Extension: (Google Wallet) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-14]
CHR Extension: (Gmail) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-07]
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Profile: C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Slides) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-16]
CHR Extension: (Google Docs) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-16]
CHR Extension: (Google Drive) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-16]
CHR Extension: (YouTube) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-16]
CHR Extension: (Google Search) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-16]
CHR Extension: (Google Play Music) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-11-16]
CHR Extension: (Google Sheets) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-16]
CHR Extension: (Google Wallet) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-16]
CHR Extension: (Gmail) - C:\Users\Clemens\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-02-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-01-16] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-23] ()
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Apowersoft_AudioDevice; C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek                                            )
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-06-08] (Disc Soft Ltd)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 PlantronicsGC; C:\Windows\system32\drivers\PLTGC.sys [1327104 2013-04-12] (C-Media Electronics Inc)
S3 RTL8187B; C:\Windows\system32\DRIVERS\RTL8187B.sys [458384 2012-05-31] (Realtek Semiconductor Corporation                          )
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1577104 2012-09-27] (Realtek Semiconductor Corporation                          )
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-01-15] (Anchorfree Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 wolfkr; \??\C:\AeriaGames\WolfTeam-DE\avital\wolfk64.sys [X]
S3 XFDriver64; \??\C:\Program Files (x86)\Xfire2\XFDriver64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-07 02:11 - 2015-04-07 02:11 - 08945229 _____ () C:\Users\Clemens\Downloads\Hucci - House Party.mp3.crdownload
2015-04-07 01:15 - 2015-04-07 01:13 - 00852607 _____ () C:\Users\Clemens\Desktop\SecurityCheck.exe
2015-04-07 01:13 - 2015-04-07 01:13 - 00852607 _____ () C:\Users\Clemens\Downloads\SecurityCheck.exe
2015-04-07 00:27 - 2015-04-07 00:55 - 32275835 _____ () C:\Users\Clemens\Desktop\pop_megan_nilah_kf032713_p02_272p_650_mobile (2).mp4
2015-04-06 23:29 - 2015-04-06 23:30 - 03925791 _____ () C:\Users\Clemens\Downloads\07.APR.HQ_MIX_and_more_else.rar
2015-04-06 23:09 - 2015-04-06 23:27 - 42636294 _____ () C:\Users\Clemens\Downloads\FHMSingApril201xfull.rar
2015-04-06 20:44 - 2015-04-06 20:45 - 02347384 _____ (ESET) C:\Users\Clemens\Downloads\esetsmartinstaller_deu.exe
2015-04-06 14:16 - 2015-04-06 14:16 - 00000697 _____ () C:\Users\Clemens\Desktop\JRT.txt
2015-04-06 14:14 - 2015-04-06 14:14 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-CLEMENS-PC-Windows-8-(64-bit).dat
2015-04-06 14:13 - 2015-04-06 14:13 - 00000000 ___DC () C:\RegBackup
2015-04-06 14:13 - 2015-04-06 14:12 - 02691312 _____ (Thisisu) C:\Users\Clemens\Desktop\JRT.exe
2015-04-06 14:11 - 2015-04-06 14:12 - 02691312 _____ (Thisisu) C:\Users\Clemens\Downloads\JRT.exe
2015-04-06 14:04 - 2015-04-06 14:07 - 00000000 ___DC () C:\AdwCleaner
2015-04-06 14:03 - 2015-04-06 14:03 - 00001528 _____ () C:\Users\Clemens\Desktop\mbam.txt
2015-04-06 13:58 - 2015-04-06 13:58 - 02208768 _____ () C:\Users\Clemens\Desktop\AdwCleaner_4.200.exe
2015-04-06 13:57 - 2015-04-06 13:58 - 02208768 _____ () C:\Users\Clemens\Downloads\AdwCleaner_4.200.exe
2015-04-06 13:45 - 2015-04-06 13:53 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-06 13:45 - 2015-04-06 13:45 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-06 13:45 - 2015-04-06 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-06 13:45 - 2015-04-06 13:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-06 13:45 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-06 13:45 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-06 13:45 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-06 13:44 - 2015-04-06 13:42 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Clemens\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-06 13:32 - 2015-04-06 13:42 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Clemens\Downloads\mbam-setup-2.1.4.1018.exe
2015-04-03 22:55 - 2015-04-03 22:55 - 00017184 ____C () C:\ComboFix.txt
2015-04-03 22:47 - 2015-04-03 22:55 - 00000000 ___DC () C:\Qoobox
2015-04-03 22:47 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-04-03 22:47 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-04-03 22:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-04-03 22:47 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-04-03 22:46 - 2015-04-03 22:46 - 05617096 ____R (Swearware) C:\Users\Clemens\Desktop\ComboFix.exe
2015-04-03 22:43 - 2015-04-03 22:46 - 05617096 _____ (Swearware) C:\Users\Clemens\Downloads\ComboFix.exe
2015-04-03 22:42 - 2015-04-03 22:42 - 00027527 _____ () C:\Users\Clemens\Downloads\1e035a17-26a8-4fad-aace-7739ee27a807.aac
2015-04-03 22:33 - 2015-04-03 22:33 - 00533280 _____ () C:\Users\Clemens\Downloads\PTT-20150403-WA0131.aac
2015-04-03 15:01 - 2015-04-03 15:01 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2015-04-03 15:01 - 2015-04-03 15:01 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2015-04-03 14:35 - 2015-04-07 02:16 - 00015566 _____ () C:\Users\Clemens\Downloads\FRST.txt
2015-04-03 14:35 - 2015-04-07 02:16 - 00000000 ___DC () C:\FRST
2015-04-03 14:35 - 2015-04-03 14:36 - 00036313 _____ () C:\Users\Clemens\Downloads\Addition.txt
2015-04-03 14:33 - 2015-04-03 14:34 - 02095616 _____ (Farbar) C:\Users\Clemens\Downloads\FRST64.exe
2015-04-02 12:12 - 2015-04-02 13:27 - 00000000 ____D () C:\Users\Clemens\Desktop\silv
2015-04-02 11:40 - 2015-04-02 14:28 - 437588156 _____ () C:\Users\Clemens\Downloads\SnieElieIIUtmtEitionMLT9EAmgo.part13.rar
2015-04-02 08:23 - 2015-04-02 14:28 - 00000000 ____D () C:\Users\Clemens\Desktop\sniper elite 3
2015-04-02 00:08 - 2015-04-02 06:00 - 1000000000 _____ () C:\Users\Clemens\Downloads\SnieElieIIUtmtEitionMLT9EAmgo.part01.rar
2015-04-01 20:56 - 2015-04-01 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Owlchemy Labs
2015-04-01 20:55 - 2015-04-01 23:14 - 00000000 ____D () C:\Program Files (x86)\Owlchemy Labs
2015-04-01 18:06 - 2015-04-01 20:23 - 377019938 _____ () C:\Users\Clemens\Downloads\DYO0215C31XBI1737.rar
2015-04-01 17:11 - 2015-04-01 17:11 - 00000098 _____ () C:\Users\Clemens\Downloads\1e035a17-26a8-4fad-aace-7739ee27a807.htm
2015-04-01 17:08 - 2015-04-01 17:08 - 00018256 _____ () C:\Users\Clemens\Downloads\Download (1).htm
2015-04-01 17:07 - 2015-04-01 17:07 - 00008390 _____ () C:\Users\Clemens\Downloads\Download.htm
2015-04-01 16:41 - 2015-04-01 23:16 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Intel
2015-04-01 16:04 - 2015-04-01 23:14 - 00000000 ____D () C:\Program Files (x86)\Belkin
2015-04-01 16:04 - 2012-02-23 11:01 - 00451072 _____ () C:\Windows\SysWOW64\ISSRemoveSP.exe
2015-03-30 20:56 - 2015-03-30 20:56 - 00000000 ____D () C:\Users\Clemens\Documents\My Cheat Tables
2015-03-29 21:03 - 2015-03-04 09:26 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2015-03-29 21:03 - 2015-03-04 09:26 - 00467952 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2015-03-29 21:03 - 2015-03-04 09:26 - 00011105 _____ () C:\Windows\system32\AutoconfigV2.cab
2015-03-29 21:03 - 2015-03-04 08:41 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-03-29 21:03 - 2015-03-04 08:41 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-29 21:03 - 2015-03-04 06:53 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-03-29 21:03 - 2015-03-04 06:53 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-29 20:52 - 2015-03-11 07:21 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00943104 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-03-29 20:52 - 2015-03-11 07:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-03-29 20:52 - 2015-03-11 00:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-03-29 20:50 - 2015-03-14 10:07 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-29 20:50 - 2015-03-14 08:33 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\Documents\PluralEyes
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Red_Giant
2015-03-24 22:30 - 2015-03-24 22:30 - 00000000 ____D () C:\Users\Clemens\AppData\Local\PluralEyes 3
2015-03-24 22:24 - 2015-03-24 22:31 - 00000000 ____D () C:\Users\Clemens\AppData\Local\Red Giant
2015-03-24 22:24 - 2015-03-24 22:24 - 00000000 ____D () C:\Users\Clemens\Documents\Red Giant
2015-03-24 22:17 - 2015-03-24 22:18 - 00000000 ____D () C:\Program Files (x86)\Red Giant Link
2015-03-24 22:15 - 2015-03-24 22:15 - 00000000 ____D () C:\ProgramData\rgt
2015-03-24 22:10 - 2015-03-24 22:17 - 00000000 ____D () C:\Program Files (x86)\Red Giant
2015-03-24 22:10 - 2015-03-24 22:16 - 00000000 ____D () C:\ProgramData\Red Giant
2015-03-24 22:10 - 2015-03-24 22:10 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Red Giant
2015-03-24 22:06 - 2015-03-24 22:16 - 00000000 ____D () C:\Program Files\Red Giant
2015-03-24 22:06 - 2015-03-09 11:36 - 41522176 _____ (Red Giant LLC) C:\Windows\system32\MBLooksUI_x64.dll
2015-03-24 22:06 - 2015-02-27 13:39 - 13485056 _____ (Red Giant Software) C:\Windows\system32\Gpu_Shader_Engine_x64.dll
2015-03-24 22:06 - 2015-02-27 13:39 - 05849600 _____ (Noesis Technologies) C:\Windows\system32\Noesis.dll
2015-03-24 22:06 - 2013-11-21 11:38 - 04893184 _____ () C:\Windows\system32\PhotoLooksRenderer_x64.dll
2015-03-24 22:06 - 2013-11-21 11:38 - 04168704 _____ () C:\Windows\SysWOW64\PhotoLooksRenderer.dll
2015-03-23 17:46 - 2015-03-23 17:46 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\RenPy
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnH Solutions
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnH Solutions
2015-03-22 17:37 - 2015-03-22 17:37 - 00000000 ____D () C:\Program Files (x86)\UnH Solutions
2015-03-22 12:57 - 2011-10-21 17:48 - 00000000 ___HD () C:\Users\Clemens\Desktop\flashgames
2015-03-19 16:01 - 2015-03-13 17:38 - 00622224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-03-19 16:00 - 2015-03-13 21:41 - 32114888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 24775368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 20466376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 16022016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 14121624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 13297144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 13210080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10775080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10715864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 10262160 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-03-19 16:00 - 2015-03-13 21:41 - 03611792 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 03249352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434788.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434788.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00997856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00970384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00944784 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00930448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00909512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00878328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00400584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00390288 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00354112 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00346824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00306208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00178512 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-03-19 16:00 - 2015-03-13 21:41 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-03-18 23:12 - 2015-03-19 01:19 - 309143408 _____ (NVIDIA Corporation) C:\Users\Clemens\Downloads\347.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-03-13 18:34 - 2015-01-24 08:42 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-13 18:34 - 2015-01-24 07:00 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-12 07:48 - 2015-03-12 07:48 - 00288352 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 23:15 - 2015-02-23 12:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 23:15 - 2015-02-23 12:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 23:15 - 2015-02-23 12:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 23:15 - 2015-02-23 12:51 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 23:15 - 2015-02-23 12:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 23:15 - 2015-02-23 12:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 23:15 - 2015-02-23 11:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 23:15 - 2015-02-23 11:15 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2015-03-11 23:15 - 2015-02-23 10:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 23:15 - 2015-02-21 07:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 23:15 - 2015-02-21 07:31 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00737280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 23:15 - 2015-02-21 07:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 23:15 - 2015-02-21 07:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 23:15 - 2015-02-21 07:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 23:15 - 2015-02-21 07:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 23:15 - 2015-02-21 07:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 23:15 - 2015-02-21 07:07 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2015-03-11 23:15 - 2015-02-21 06:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 23:15 - 2015-02-21 05:00 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2015-03-11 23:14 - 2015-01-29 10:45 - 06973248 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 23:08 - 2015-02-17 08:54 - 19777536 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 23:08 - 2015-02-17 07:13 - 17561600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 23:06 - 2015-01-29 10:05 - 01627648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 23:06 - 2015-01-29 08:19 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 23:05 - 2015-03-06 09:39 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2015-03-11 23:05 - 2015-03-06 09:39 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 23:05 - 2015-03-06 07:48 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2015-03-11 23:05 - 2015-03-06 07:48 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 23:05 - 2015-02-03 01:18 - 00569712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 23:04 - 2015-01-31 15:48 - 00044024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-03-11 23:04 - 2015-01-31 07:55 - 00275712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-03-11 23:01 - 2015-02-26 06:35 - 04063232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 23:00 - 2015-02-20 15:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 23:00 - 2015-02-20 13:56 - 00366592 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 23:00 - 2015-02-20 10:10 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 23:00 - 2015-02-20 09:24 - 00304128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 23:00 - 2015-02-13 01:18 - 00396419 _____ () C:\Windows\system32\ApnDatabase.xml
2015-03-11 23:00 - 2015-01-24 08:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 23:00 - 2015-01-24 07:00 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-11 23:00 - 2015-01-24 06:31 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 17:00 - 2015-03-11 17:00 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\11bitstudios
2015-03-08 14:36 - 2015-03-08 14:36 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\MMFApplications
2015-03-08 14:35 - 2015-03-08 14:35 - 00000000 ____D () C:\ProgramData\SkidRow

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-07 02:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2015-04-07 01:47 - 2014-01-15 16:28 - 01057753 _____ () C:\Windows\WindowsUpdate.log
2015-04-07 01:30 - 2013-12-07 12:35 - 00001140 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-07 01:26 - 2013-12-07 13:47 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\TS3Client
2015-04-07 01:12 - 2014-01-07 19:48 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\vlc
2015-04-07 00:30 - 2013-12-07 12:35 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-07 00:26 - 2014-09-26 15:37 - 08030720 ___SH () C:\Users\Clemens\Desktop\Thumbs.db
2015-04-06 22:54 - 2014-01-11 11:36 - 00000000 ____D () C:\Users\Clemens\AppData\Local\CrashDumps
2015-04-06 22:35 - 2014-02-08 13:38 - 00000000 ____D () C:\Program Files (x86)\Activision
2015-04-06 22:28 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-06 22:08 - 2014-11-21 23:57 - 00000000 ___HD () C:\$Windows.~BT
2015-04-06 22:03 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2015-04-06 20:45 - 2012-07-26 12:27 - 00828878 _____ () C:\Windows\system32\perfh007.dat
2015-04-06 20:45 - 2012-07-26 12:27 - 00188018 _____ () C:\Windows\system32\perfc007.dat
2015-04-06 20:45 - 2012-07-26 09:28 - 01949496 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-06 20:39 - 2013-12-09 19:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-06 20:39 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-06 14:08 - 2014-12-01 15:50 - 00018480 _____ () C:\Windows\PFRO.log
2015-04-03 22:53 - 2012-07-26 07:26 - 00000215 ____C () C:\Windows\system.ini
2015-04-03 22:47 - 2014-09-14 12:35 - 00000000 ____D () C:\Windows\erdnt
2015-04-03 22:01 - 2015-01-26 22:14 - 00001339 _____ () C:\Windows\setupact.log
2015-04-02 11:41 - 2013-12-28 19:57 - 00000000 ____D () C:\Users\Clemens\Desktop\Spiele
2015-04-01 23:22 - 2013-12-07 12:09 - 00000000 ____D () C:\Users\Clemens
2015-04-01 23:18 - 2015-03-06 18:24 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-04-01 23:18 - 2014-12-18 23:46 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-01 23:18 - 2014-10-30 14:51 - 00000000 ____D () C:\Windows\system32\AutoUpdateLicense
2015-04-01 23:18 - 2014-07-10 16:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-01 23:18 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\WinStore
2015-04-01 23:17 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Sysprep
2015-04-01 23:16 - 2014-10-01 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-04-01 23:16 - 2014-10-01 21:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-04-01 23:16 - 2014-08-03 01:09 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-04-01 23:16 - 2014-06-08 21:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-04-01 23:16 - 2014-01-18 00:13 - 00000000 ____D () C:\Users\Clemens\AppData\Roaming\Skype
2015-04-01 23:16 - 2014-01-03 16:22 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-01 23:16 - 2013-12-28 19:58 - 00000000 ___RD () C:\Users\Clemens\Desktop\Tools
2015-04-01 23:16 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache
2015-04-01 23:15 - 2014-06-28 13:44 - 00000000 ____D () C:\ProgramData\Apple
2015-04-01 23:15 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\registration
2015-04-01 23:14 - 2014-03-07 17:57 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-01 23:14 - 2013-12-18 19:18 - 00000000 ____D () C:\Users\Clemens\Desktop\Musik
2015-04-01 23:14 - 2013-12-07 12:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-01 23:01 - 2015-03-06 18:25 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-04-01 23:01 - 2015-01-31 17:15 - 00000000 ____D () C:\ProgramData\Nero
2015-04-01 18:25 - 2014-11-05 21:15 - 00000000 ____D () C:\Users\Clemens\AppData\Local\LooksBuilder
2015-04-01 16:58 - 2015-02-02 15:42 - 00000000 ____D () C:\Users\Clemens\Desktop\shadowplay
2015-04-01 16:57 - 2014-07-05 11:09 - 00000000 ____D () C:\Users\Clemens\Desktop\Mods
2015-04-01 16:04 - 2012-07-26 07:26 - 00000167 _____ () C:\Windows\win.ini
2015-03-31 22:36 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-03-31 18:21 - 2013-12-07 12:17 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-957755645-4260464881-2478257714-1001
2015-03-29 21:03 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp
2015-03-24 22:18 - 2014-11-05 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Giant
2015-03-24 22:16 - 2014-11-05 21:13 - 00000000 ____D () C:\ProgramData\RedGiant
2015-03-24 22:10 - 2014-11-05 21:14 - 00004198 _____ () C:\Windows\System32\Tasks\Red Giant Link
2015-03-24 22:06 - 2014-11-05 21:14 - 00000000 ____D () C:\Program Files (x86)\LooksBuilder
2015-03-22 16:54 - 2014-09-23 18:59 - 00026624 ____H () C:\Users\Clemens\Desktop\photothumb.db
2015-03-19 16:01 - 2015-01-31 11:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-19 16:00 - 2013-12-09 19:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-13 21:41 - 2015-01-31 11:21 - 17258024 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-03-13 21:41 - 2015-01-31 11:21 - 03303448 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-03-13 21:41 - 2015-01-27 04:59 - 02906928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-03-13 21:41 - 2014-12-25 17:57 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-03-13 21:41 - 2014-11-19 20:56 - 18580512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41 - 2013-12-09 19:02 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-03-13 21:41 - 2013-12-09 19:02 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 06861968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 03526856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16 - 2013-12-09 19:02 - 00386248 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-03-13 18:16 - 2013-12-09 19:02 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-11 23:32 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-11 15:10 - 2014-06-08 20:22 - 04246327 _____ () C:\Windows\system32\nvcoproc.bin

==================== Files in the root of some directories =======

2014-01-18 00:14 - 2014-10-17 01:02 - 2260992 _____ () C:\Program Files (x86)\Thumbs.db
2014-01-13 23:23 - 2014-10-22 11:23 - 0003584 _____ () C:\Users\Clemens\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-13 20:54 - 2014-11-02 17:33 - 0007598 _____ () C:\Users\Clemens\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Clemens\AppData\Local\Temp\Quarantine.exe
C:\Users\Clemens\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-06 17:49

==================== End Of Log ============================
--- --- ---

schrauber 07.04.2015 17:25
Zitat:
C:\Users\Clemens\Desktop\Tools\sovepr37.rar
was is das?

clemicool 07.04.2015 17:40
@schrauber: Weiß nicht genau.

Da steht das ich ein Passwort brauch aber hab das nicht...

Hab es mal gelöscht jetzt.

schrauber 08.04.2015 06:30
Java und Flash updaten. Bestehen aktuell noch probleme?

clemicool 08.04.2015 14:17
@schrauber: Blöde Frage...

Muss ich Java und Flash immer selber updaten? Also manuell?

Naja gestern ging es den ganzen Tag.

schrauber 08.04.2015 19:04
und heute? Nein, wenn du beim Installieren den Haken bei "automatisch updaten" machst SOLLTEN die das alleine machen, is aber deine Aufgabe das zu checken :)


http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

clemicool 09.04.2015 19:09
Danke Schrauber für die ganzen Tipps!

Falls ich wieder irgendwann ein Problem habe melde ich mich...

Habe zurzeit zwar Fehlermeldung beim Windows 8.1 Upgrade und in letzter Zeit häufig Kernel Security Check Failure Meldungen aber das gehört hier nicht hin..


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:52 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131