Win7: PC fremdgesteuert? FVL player von falscher Seite gedownloadet?

cairo · 16.01.2014, 17:35

Hallo,

als ich vorhin meinen PC gestartet habe und erst mal im Internet surfen wollte, hat sich in der Leiste, in der ich die URL eintippen wollte, auf einmal ganz viele Zahlen hintereinandergeschrieben, ohne das ich etwas gedrückt habe. Ich dachte zuerst etwas liegt auf meiner Tastatur. Als ich den Taskmanager geöffnet hatte, war Opera dort 5x geöffnet.
Ich habe die Anleitung in eurem Forum befolgt um die Logs zu generieren, das Programm
GMER ist jedoch immer während des Scans abgestürzt, einmal ist sogar mein Laptop neugestartet. Die anderen Logs habe ich jedoch generieren können.

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2014 03

Ran by Tobe at 2014-01-16 16:46:28

Running from C:\Users\Tobe\Downloads

Boot Mode: Normal

==========================================================

==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

AdblockIE (x32 Version: 1.2 - af0.net)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)

BisonCam (x32 Version: 9.2.1.71.52 - BisonCam)

Call of Duty: Black Ops II - Multiplayer (x32 Version: - )

Counter-Strike: Global Offensive (x32 Version: - Valve)

Counter-Strike: Source (x32 Version: - Valve)

DAEMON Tools Lite (x32 Version: 4.48.1.0347 - Disc Soft Ltd)

Dolby Axon - 1.5.1.1 (x32 Version: 1.5.1.1 - Dolby Laboratories)

Europa Universalis IV (x32 Version: - Paradox Interactive)

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

Google Chrome (x32 Version: 32.0.1700.76 - Google Inc.)

Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden

Heroes of Newerth (x32 Version: 2.3.0 - S2 Games)

Hotkey 3.3020 (x32 Version: 3.3020 - NoteBook)

Hotkey 3.3020 (x32 Version: 3.3020 - NoteBook) Hidden

Intel PROSet Wireless (Version: - ) Hidden

Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.0.0.0454 - Intel Corporation)

Intel(R) PROSet/Wireless WiFi-Software (Version: 14.0.2000 - Intel Corporation)

Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026 - Intel Corporation)

Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)

JMicron Ethernet Adapter NDIS Driver (x32 Version: 6.0.26.6 - JMicron Technology Corp.)

JMicron Flash Media Controller Driver (x32 Version: 1.0.62.0 - JMicron Technology Corp.)

Left 4 Dead 2 (x32 Version: - Valve)

Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden

Logitech Gaming Software 8.51 (Version: 8.51.5 - Logitech Inc.)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)

NVIDIA 3D Vision Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)

NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.140.952 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)

NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden

NVIDIA Update 9.3.21 (Version: 9.3.21 - NVIDIA Corporation) Hidden

NVIDIA Update Components (Version: 9.3.21 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9 - NVIDIA Corporation)

OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)

Opera Stable 18.0.1284.68 (x32 Version: 18.0.1284.68 - Opera Software ASA)

PAYDAY: The Heist (x32 Version: - OVERKILL Software)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6307 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden

SHIELD Streaming (Version: 1.6.53 - NVIDIA Corporation) Hidden

Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)

Steam (x32 Version: - Valve Corporation)

Synaptics Pointing Device Driver (Version: 15.1.14.0 - Synaptics Incorporated)

TeamSpeak 3 Client (Version: 3.0.13 - TeamSpeak Systems GmbH)

THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07 - Creative Technology Limited)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)

Warcraft III (x32 Version: - Blizzard Entertainment)

WebCam Installer (x32 Version: 3.32 - WebCam)

WinRAR 5.01 (64-bit) (Version: 5.01.0 - win.rar GmbH)

==================== Restore Points =========================

23-12-2013 17:46:14 DirectX wurde installiert

24-12-2013 10:49:39 Windows Update

27-12-2013 11:06:17 Windows Update

30-12-2013 03:21:27 Windows Update

02-01-2014 20:36:49 DirectX wurde installiert

03-01-2014 14:36:53 Windows Update

03-01-2014 22:02:46 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

03-01-2014 22:02:53 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

03-01-2014 22:03:18 OpenOffice 4.0.1 wird installiert

07-01-2014 15:21:46 Windows Update

10-01-2014 16:19:31 Windows Update

14-01-2014 15:51:01 Windows Update

15-01-2014 21:44:08 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {4A4F9360-C5CB-4EC1-AC19-E355A96B23C1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-15] (Google Inc.)

Task: {DC671B12-D265-438A-B35B-EDC1B4E5F4E6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-14] (Adobe Systems Incorporated)

Task: {E0F6D70C-5F03-4056-9491-D0224339344F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-15] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-01-05 12:53 - 2011-01-05 12:53 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll

2013-12-14 13:29 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL

2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll

2013-12-14 13:28 - 2010-11-01 17:34 - 00159744 ____N () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll

2013-12-17 20:01 - 2013-12-17 20:01 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f60b3ee2de3f41a024920486d46d49f2\IsdiInterop.ni.dll

2013-12-14 13:30 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2013-12-16 15:37 - 2013-12-12 10:15 - 00886624 _____ () C:\Program Files (x86)\Opera\18.0.1284.68\libglesv2.dll

2013-12-16 15:37 - 2013-12-12 10:15 - 00108896 _____ () C:\Program Files (x86)\Opera\18.0.1284.68\libegl.dll

2013-12-16 15:37 - 2013-12-12 10:15 - 00879968 _____ () C:\Program Files (x86)\Opera\18.0.1284.68\ffmpegsumo.dll

2013-12-14 15:01 - 2013-12-14 15:01 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========

==================== Safe Mode (whitelisted) ===================

==================== Faulty Device Manager Devices =============

Name: Fingerprint Sensor

Description: Fingerprint Sensor

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:

==================

Error: (01/16/2014 04:33:00 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/16/2014 04:32:22 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 06:14:33 PM) (Source: MsiInstaller) (User: Tobe-PC)

Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011006}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/15/2014 06:11:11 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 02:29:55 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 08:35:25 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 04:47:00 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/13/2014 10:15:55 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/13/2014 02:23:00 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/12/2014 05:30:25 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:

=============

Error: (01/09/2014 05:15:28 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:

%%1053

Error: (01/09/2014 05:15:28 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (01/07/2014 06:49:32 PM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ‎07.‎01.‎2014 um 18:47:35 unerwartet heruntergefahren.

Error: (12/25/2013 11:42:49 PM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ‎25.‎12.‎2013 um 23:40:24 unerwartet heruntergefahren.

Error: (12/20/2013 11:09:07 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/20/2013 11:09:06 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/20/2013 11:09:05 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/20/2013 03:54:20 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/20/2013 03:47:59 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/18/2013 06:52:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Update für Windows 7 für x64-Systeme (KB2515325)

Microsoft Office Sessions:

=========================

Error: (01/16/2014 04:33:00 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/16/2014 04:32:22 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 06:14:33 PM) (Source: MsiInstaller)(User: Tobe-PC)

Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011006}1625(NULL)(NULL)(NULL)

Error: (01/15/2014 06:11:11 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 02:29:55 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 08:35:25 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 04:47:00 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/13/2014 10:15:55 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/13/2014 02:23:00 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/12/2014 05:30:25 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

==================== Memory info ===========================

Percentage of memory in use: 24%

Total physical RAM: 8169.6 MB

Available physical RAM: 6177.23 MB

Total Pagefile: 16337.38 MB

Available Pagefile: 13898.61 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:223.47 GB) (Free:118.47 GB) NTFS

Drive f: (Europa Universalis IV) (CDROM) (Total:0.62 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 224 GB) (Disk ID: 73BE2F0A)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Frst.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 03
Ran by Tobe (administrator) on TOBE-PC on 16-01-2014 16:46:10
Running from C:\Users\Tobe\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Opera Software) C:\Program Files (x86)\Opera\18.0.1284.68\opera.exe
() C:\Program Files (x86)\Opera\18.0.1284.68\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\18.0.1284.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\18.0.1284.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\18.0.1284.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\18.0.1284.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\18.0.1284.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\18.0.1284.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\18.0.1284.68\opera.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2328360 2010-09-17] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11776104 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10228224 2010-11-03] (Intel Corporation)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [25600 2010-09-14] (Creative Technology Ltd.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1064224 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
MountPoints2: {6ce5b3c7-64b8-11e3-87ac-806e6f6e6963} - D:\autorun.exe
MountPoints2: {8198a52b-6761-11e3-a427-0090f5c49066} - F:\setup.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x318F28F5C6F9CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Tobe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 [2013-12-15]
CHR Extension: (Google Drive) - C:\Users\Tobe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 [2013-12-15]
CHR Extension: (YouTube) - C:\Users\Tobe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 [2013-12-15]
CHR Extension: (Google Search) - C:\Users\Tobe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 [2013-12-15]
CHR Extension: (Google Wallet) - C:\Users\Tobe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-30]
CHR Extension: (Gmail) - C:\Users\Tobe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 [2013-12-15]

==================== Services (Whitelisted) =================

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] ()
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation)
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [33280 2011-01-17] ()

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-12-17] (Disc Soft Ltd)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-16 16:46 - 2014-01-16 16:46 - 00008449 _____ C:\Users\Tobe\Downloads\FRST.txt
2014-01-16 16:45 - 2014-01-16 16:45 - 00000000 ____D C:\FRST
2014-01-16 16:44 - 2014-01-16 16:44 - 02076160 _____ (Farbar) C:\Users\Tobe\Downloads\FRST64.exe
2014-01-16 16:43 - 2014-01-16 16:43 - 00050477 _____ C:\Users\Tobe\Downloads\Defogger.exe
2014-01-16 16:43 - 2014-01-16 16:43 - 00000540 _____ C:\Users\Tobe\Downloads\defogger_disable.log
2014-01-16 16:43 - 2014-01-16 16:43 - 00000168 _____ C:\Users\Tobe\defogger_reenable
2014-01-15 14:36 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:36 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:36 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:36 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:36 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:36 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:36 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:36 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:36 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-09 21:01 - 2014-01-09 23:05 - 02668955 _____ C:\Users\Tobe\Desktop\marxismus.odp
2014-01-09 17:50 - 2014-01-09 17:49 - 04794758 _____ C:\Users\Tobe\Desktop\Set.jar
2014-01-05 17:36 - 2014-01-05 17:36 - 00025498 _____ C:\Users\Tobe\Desktop\Poetry Slam Schule.odt
2014-01-05 14:13 - 2014-01-05 18:00 - 00023961 _____ C:\Users\Tobe\Desktop\präsentationskonzept.odt
2014-01-04 16:14 - 2014-01-04 16:14 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\OpenOffice
2014-01-03 23:03 - 2014-01-03 23:03 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-03 23:03 - 2014-01-03 23:03 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-03 23:02 - 2014-01-03 23:02 - 00000000 ____D C:\Users\Tobe\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-01-03 22:54 - 2014-01-03 23:02 - 163606685 _____ C:\Users\Tobe\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-03 20:43 - 2014-01-03 23:15 - 00000095 _____ C:\Users\Tobe\Desktop\g.txt
2014-01-02 21:37 - 2014-01-11 16:37 - 00000000 ____D C:\Users\Tobe\AppData\Local\PAYDAY
2014-01-02 18:45 - 2014-01-02 18:45 - 00000221 _____ C:\Users\Tobe\Desktop\PAYDAY The Heist.url
2014-01-01 15:41 - 2014-01-01 15:41 - 00106700 _____ C:\Users\Tobe\Downloads\tbb.zip
2014-01-01 15:41 - 2014-01-01 15:41 - 00000000 ____D C:\Users\Tobe\Downloads\tbb
2014-01-01 15:40 - 2014-01-01 15:40 - 00181473 _____ C:\Users\Tobe\Downloads\lua5.1.zip
2014-01-01 15:40 - 2014-01-01 15:40 - 00000000 ____D C:\Users\Tobe\Downloads\lua5.1
2014-01-01 15:39 - 2014-01-01 15:39 - 00004831 _____ C:\Users\Tobe\Downloads\lua51.zip
2014-01-01 15:39 - 2014-01-01 15:39 - 00000000 ____D C:\Users\Tobe\Downloads\lua51
2013-12-30 21:37 - 2013-12-30 21:37 - 00936616 _____ C:\Users\Tobe\Downloads\FLVPlayerSetup.exe
2013-12-30 21:37 - 2013-12-30 21:37 - 00936616 _____ C:\Users\Tobe\Downloads\FLVPlayerSetup (2).exe
2013-12-30 21:37 - 2013-12-30 21:37 - 00936616 _____ C:\Users\Tobe\Downloads\FLVPlayerSetup (1).exe
2013-12-30 19:25 - 2013-12-30 19:25 - 00000000 _____ C:\Users\Tobe\Desktop\osterstrasse 12.txt
2013-12-30 19:11 - 2013-12-30 19:11 - 00390401 _____ C:\Users\Tobe\Downloads\marius.kaiser.htm
2013-12-29 02:19 - 2013-12-29 02:19 - 00000000 ____D C:\Users\Tobe\Documents\Empire Earth II
2013-12-29 02:19 - 2013-12-29 02:19 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Sierra
2013-12-29 02:18 - 2013-12-29 02:18 - 00000000 ____D C:\Users\Tobe\Desktop\EE2 [FreeGame4All]
2013-12-29 02:16 - 2012-06-12 17:28 - 265551542 _____ C:\Users\Tobe\Desktop\EE2 [FreeGame4All].rar
2013-12-29 01:02 - 2013-12-29 01:03 - 00000000 ____D C:\Program Files (x86)\Age of Empires II
2013-12-28 23:17 - 2013-12-28 23:44 - 00000000 ____D C:\Users\Tobe\Desktop\Star Wars Battlefront II
2013-12-28 16:07 - 2014-01-01 15:41 - 00000000 ____D C:\Program Files (x86)\Europa Universalis IV v.1.2.2 [3DM] [REVOLT]
2013-12-28 16:01 - 2013-12-28 16:01 - 00000000 ____D C:\Users\Tobe\AppData\Local\PunkBuster
2013-12-28 15:57 - 2013-12-28 15:59 - 00000000 ____D C:\Program Files (x86)\Call of duty 4 Multiplayer
2013-12-27 13:43 - 2013-12-27 13:43 - 00000219 _____ C:\Users\Tobe\Desktop\Left 4 Dead 2.url
2013-12-25 23:40 - 2013-12-25 23:40 - 00000000 ____D C:\Users\Tobe\AppData\Local\NVIDIA
2013-12-23 18:51 - 2014-01-11 17:14 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\TS3Client
2013-12-23 18:51 - 2013-12-23 18:51 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-12-23 18:51 - 2013-12-23 18:51 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-12-23 18:45 - 2013-12-23 18:50 - 32520760 _____ (TeamSpeak Systems GmbH) C:\Users\Tobe\Downloads\TeamSpeak3-Client-win64-3.0.13.1.exe
2013-12-23 17:51 - 2013-12-23 17:51 - 00000222 _____ C:\Users\Tobe\Desktop\Call of Duty Black Ops II - Multiplayer.url
2013-12-22 17:56 - 2013-12-22 17:57 - 00000000 ____D C:\ProgramData\Adobe
2013-12-22 17:56 - 2013-12-22 17:56 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-12-22 17:56 - 2013-12-22 17:56 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-21 17:47 - 2013-12-21 17:47 - 00000924 _____ C:\Users\Public\Desktop\Dolby Axon.lnk
2013-12-21 17:47 - 2013-08-02 14:05 - 02262960 _____ (Codejock Software) C:\Windows\SysWOW64\Codejock.CommandBars.v13.0.0.ocx
2013-12-21 17:47 - 2013-08-02 14:05 - 00571312 _____ (Codejock Software) C:\Windows\SysWOW64\Codejock.SkinFramework.Unicode.v13.0.0.ocx
2013-12-21 17:46 - 2013-12-21 17:46 - 10836296 _____ (Dolby Laboratories                                          ) C:\Users\Tobe\Downloads\DolbyAxonSetup_v1.5.1.1.exe
2013-12-21 12:29 - 2013-12-21 12:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-21 12:29 - 2013-12-21 12:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-21 12:29 - 2013-12-21 12:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-21 12:29 - 2013-12-21 12:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-21 12:29 - 2013-12-21 12:29 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Set
2013-12-21 12:29 - 2013-12-21 12:29 - 00000000 ____D C:\ProgramData\Oracle
2013-12-21 12:29 - 2013-12-21 12:29 - 00000000 ____D C:\Program Files\Java
2013-12-21 12:28 - 2013-12-21 12:29 - 30694824 _____ (Oracle Corporation) C:\Users\Tobe\Downloads\jre-7u45-windows-x64.exe
2013-12-19 19:26 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-19 19:26 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-19 19:26 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-19 19:26 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-19 19:26 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-19 19:26 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-19 19:26 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-19 19:26 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-19 19:26 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-19 19:26 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-19 19:26 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-19 19:26 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-19 19:26 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-19 19:26 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-19 19:26 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-19 19:26 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-19 19:26 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-19 19:26 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-19 19:26 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-19 19:26 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-19 19:26 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-19 19:26 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-19 19:26 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-19 19:26 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-19 19:26 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-19 19:26 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-19 19:26 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-19 19:26 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-19 19:26 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-19 19:26 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-19 19:26 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-18 22:39 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-18 22:37 - 2013-12-18 22:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-18 22:37 - 2013-12-18 22:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-18 22:37 - 2013-12-18 22:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-18 22:37 - 2013-12-18 22:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-18 22:37 - 2013-12-18 22:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-18 22:37 - 2013-12-18 22:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-18 22:37 - 2013-12-18 22:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-18 19:21 - 2013-12-18 19:21 - 00000000 ____D C:\Users\Tobe\Documents\Paradox Interactive
2013-12-18 19:20 - 2013-12-18 19:20 - 00375182 _____ C:\Users\Tobe\Downloads\msvcr100.zip
2013-12-18 19:20 - 2013-12-18 19:20 - 00000000 ____D C:\Users\Tobe\Downloads\msvcr100
2013-12-18 19:11 - 2013-12-18 19:11 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-18 18:52 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-18 18:52 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-18 18:52 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2013-12-18 18:52 - 2011-03-11 07:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2013-12-18 18:52 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2013-12-18 18:52 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2013-12-18 18:52 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2013-12-18 18:52 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2013-12-18 18:52 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-12-18 18:52 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2013-12-18 18:52 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-12-18 18:52 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2013-12-18 18:52 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-12-18 18:52 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-12-18 18:52 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-12-18 18:51 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-12-18 18:51 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-12-18 18:51 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-12-18 18:51 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-12-18 18:50 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-12-18 18:50 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-12-18 18:50 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-12-18 18:50 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-12-18 18:02 - 2013-12-18 18:05 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\PCFix
2013-12-18 15:18 - 2013-12-21 19:58 - 00000000 ____D C:\Users\Tobe\Documents\DolbyAxon
2013-12-18 15:18 - 2013-12-21 17:47 - 00000000 ____D C:\Program Files (x86)\DolbyAxon
2013-12-18 14:59 - 2012-07-06 21:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2013-12-18 14:59 - 2011-04-28 04:54 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2013-12-17 22:40 - 2013-12-17 22:40 - 00001210 _____ C:\Users\Public\Desktop\Europa Universalis IV.lnk
2013-12-17 22:39 - 2014-01-07 17:39 - 00000000 ____D C:\Program Files (x86)\Europa Universalis IV
2013-12-17 22:38 - 2013-12-17 22:38 - 00001950 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2013-12-17 22:37 - 2013-12-17 22:38 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\DAEMON Tools Lite
2013-12-17 22:37 - 2013-12-17 22:38 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-12-17 22:37 - 2013-12-17 22:37 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-12-17 22:37 - 2013-12-17 22:37 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-12-17 22:35 - 2013-01-01 01:00 - 670990336 _____ C:\Users\Tobe\Desktop\flt-euiv.iso
2013-12-17 22:31 - 2013-12-17 22:31 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\WinRAR
2013-12-17 22:31 - 2013-12-17 22:31 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-12-17 22:30 - 2013-12-17 22:31 - 00000000 ____D C:\Program Files\WinRAR
2013-12-17 22:28 - 2013-12-17 22:29 - 00000000 ____D C:\Program Files (x86)\Europa_Universalis_IV-FLT
2013-12-17 22:26 - 2013-12-17 22:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-17 21:56 - 2013-12-17 21:56 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\NVIDIA
2013-12-17 21:56 - 2013-12-17 21:56 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Leadertech
2013-12-17 21:56 - 2013-12-17 21:56 - 00000000 ____D C:\Users\Tobe\AppData\Local\Logitech
2013-12-17 21:56 - 2013-12-17 21:56 - 00000000 ____D C:\ProgramData\LogiShrd
2013-12-17 21:55 - 2013-12-17 21:55 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Logitech
2013-12-17 21:55 - 2013-12-17 21:55 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Logishrd
2013-12-17 21:55 - 2013-12-17 21:55 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2013-12-17 19:28 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-17 19:28 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-17 19:28 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-17 19:28 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-17 18:50 - 2013-12-18 22:39 - 00018093 _____ C:\Windows\IE11_main.log
2013-12-17 17:37 - 2013-12-17 17:37 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-12-17 17:32 - 2013-12-17 17:32 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-12-17 17:31 - 2013-12-17 17:55 - 00014015 _____ C:\Windows\IE10_main.log
2013-12-17 17:19 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-12-17 17:16 - 2013-12-17 17:19 - 00004293 _____ C:\Windows\IE9_main.log
2013-12-17 16:56 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-12-17 16:56 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-12-17 16:56 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-12-17 16:56 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-12-17 16:56 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-12-17 16:56 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-12-17 16:56 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-12-17 16:56 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-12-17 16:37 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-12-17 16:37 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-12-17 16:37 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll

==================== One Month Modified Files and Folders =======

2014-01-16 16:46 - 2014-01-16 16:46 - 00008449 _____ C:\Users\Tobe\Downloads\FRST.txt
2014-01-16 16:45 - 2014-01-16 16:45 - 00000000 ____D C:\FRST
2014-01-16 16:44 - 2014-01-16 16:44 - 02076160 _____ (Farbar) C:\Users\Tobe\Downloads\FRST64.exe
2014-01-16 16:43 - 2014-01-16 16:43 - 00050477 _____ C:\Users\Tobe\Downloads\Defogger.exe
2014-01-16 16:43 - 2014-01-16 16:43 - 00000540 _____ C:\Users\Tobe\Downloads\defogger_disable.log
2014-01-16 16:43 - 2014-01-16 16:43 - 00000168 _____ C:\Users\Tobe\defogger_reenable
2014-01-16 16:43 - 2013-12-14 13:13 - 00000000 ____D C:\Users\Tobe
2014-01-16 16:40 - 2013-12-14 13:12 - 01617094 _____ C:\Windows\WindowsUpdate.log
2014-01-16 16:40 - 2009-07-14 05:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-16 16:40 - 2009-07-14 05:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-16 16:39 - 2013-12-14 15:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-16 16:37 - 2011-04-12 08:43 - 00696870 _____ C:\Windows\system32\perfh007.dat
2014-01-16 16:37 - 2011-04-12 08:43 - 00148134 _____ C:\Windows\system32\perfc007.dat
2014-01-16 16:37 - 2009-07-14 06:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-16 16:33 - 2013-12-15 20:42 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-16 16:33 - 2009-07-14 05:51 - 00040564 _____ C:\Windows\setupact.log
2014-01-16 16:32 - 2013-12-14 13:16 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-16 16:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-16 16:32 - 2009-07-14 05:45 - 00294712 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 22:33 - 2013-12-14 13:44 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Skype
2014-01-15 21:53 - 2013-12-15 20:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-15 21:16 - 2013-12-14 13:40 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-15 16:32 - 2013-12-14 14:50 - 00000000 ____D C:\Program Files (x86)\Heroes of Newerth
2014-01-15 14:56 - 2013-12-15 20:44 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-11 17:14 - 2013-12-23 18:51 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\TS3Client
2014-01-11 16:37 - 2014-01-02 21:37 - 00000000 ____D C:\Users\Tobe\AppData\Local\PAYDAY
2014-01-09 23:05 - 2014-01-09 21:01 - 02668955 _____ C:\Users\Tobe\Desktop\marxismus.odp
2014-01-09 17:49 - 2014-01-09 17:50 - 04794758 _____ C:\Users\Tobe\Desktop\Set.jar
2014-01-07 17:39 - 2013-12-17 22:39 - 00000000 ____D C:\Program Files (x86)\Europa Universalis IV
2014-01-05 18:00 - 2014-01-05 14:13 - 00023961 _____ C:\Users\Tobe\Desktop\präsentationskonzept.odt
2014-01-05 17:36 - 2014-01-05 17:36 - 00025498 _____ C:\Users\Tobe\Desktop\Poetry Slam Schule.odt
2014-01-04 16:14 - 2014-01-04 16:14 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\OpenOffice
2014-01-04 11:41 - 2013-12-14 13:31 - 00064024 _____ C:\Users\Tobe\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 23:15 - 2014-01-03 20:43 - 00000095 _____ C:\Users\Tobe\Desktop\g.txt
2014-01-03 23:03 - 2014-01-03 23:03 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-03 23:03 - 2014-01-03 23:03 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-03 23:02 - 2014-01-03 23:02 - 00000000 ____D C:\Users\Tobe\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-01-03 23:02 - 2014-01-03 22:54 - 163606685 _____ C:\Users\Tobe\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-02 21:37 - 2013-12-14 14:50 - 00062438 _____ C:\Windows\DirectX.log
2014-01-02 18:45 - 2014-01-02 18:45 - 00000221 _____ C:\Users\Tobe\Desktop\PAYDAY The Heist.url
2014-01-01 15:41 - 2014-01-01 15:41 - 00106700 _____ C:\Users\Tobe\Downloads\tbb.zip
2014-01-01 15:41 - 2014-01-01 15:41 - 00000000 ____D C:\Users\Tobe\Downloads\tbb
2014-01-01 15:41 - 2013-12-28 16:07 - 00000000 ____D C:\Program Files (x86)\Europa Universalis IV v.1.2.2 [3DM] [REVOLT]
2014-01-01 15:40 - 2014-01-01 15:40 - 00181473 _____ C:\Users\Tobe\Downloads\lua5.1.zip
2014-01-01 15:40 - 2014-01-01 15:40 - 00000000 ____D C:\Users\Tobe\Downloads\lua5.1
2014-01-01 15:39 - 2014-01-01 15:39 - 00004831 _____ C:\Users\Tobe\Downloads\lua51.zip
2014-01-01 15:39 - 2014-01-01 15:39 - 00000000 ____D C:\Users\Tobe\Downloads\lua51
2013-12-30 21:37 - 2013-12-30 21:37 - 00936616 _____ C:\Users\Tobe\Downloads\FLVPlayerSetup.exe
2013-12-30 21:37 - 2013-12-30 21:37 - 00936616 _____ C:\Users\Tobe\Downloads\FLVPlayerSetup (2).exe
2013-12-30 21:37 - 2013-12-30 21:37 - 00936616 _____ C:\Users\Tobe\Downloads\FLVPlayerSetup (1).exe
2013-12-30 19:25 - 2013-12-30 19:25 - 00000000 _____ C:\Users\Tobe\Desktop\osterstrasse 12.txt
2013-12-30 19:11 - 2013-12-30 19:11 - 00390401 _____ C:\Users\Tobe\Downloads\marius.kaiser.htm
2013-12-29 02:19 - 2013-12-29 02:19 - 00000000 ____D C:\Users\Tobe\Documents\Empire Earth II
2013-12-29 02:19 - 2013-12-29 02:19 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Sierra
2013-12-29 02:18 - 2013-12-29 02:18 - 00000000 ____D C:\Users\Tobe\Desktop\EE2 [FreeGame4All]
2013-12-29 01:28 - 2013-12-14 15:04 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-29 01:03 - 2013-12-29 01:02 - 00000000 ____D C:\Program Files (x86)\Age of Empires II
2013-12-28 23:44 - 2013-12-28 23:17 - 00000000 ____D C:\Users\Tobe\Desktop\Star Wars Battlefront II
2013-12-28 16:01 - 2013-12-28 16:01 - 00000000 ____D C:\Users\Tobe\AppData\Local\PunkBuster
2013-12-28 16:01 - 2013-12-14 13:13 - 00000000 ____D C:\Users\Tobe\AppData\Local\VirtualStore
2013-12-28 15:59 - 2013-12-28 15:57 - 00000000 ____D C:\Program Files (x86)\Call of duty 4 Multiplayer
2013-12-28 11:46 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-27 13:43 - 2013-12-27 13:43 - 00000219 _____ C:\Users\Tobe\Desktop\Left 4 Dead 2.url
2013-12-26 17:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-25 23:40 - 2013-12-25 23:40 - 00000000 ____D C:\Users\Tobe\AppData\Local\NVIDIA
2013-12-25 23:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2013-12-23 18:51 - 2013-12-23 18:51 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-12-23 18:51 - 2013-12-23 18:51 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-12-23 18:50 - 2013-12-23 18:45 - 32520760 _____ (TeamSpeak Systems GmbH) C:\Users\Tobe\Downloads\TeamSpeak3-Client-win64-3.0.13.1.exe
2013-12-23 17:51 - 2013-12-23 17:51 - 00000222 _____ C:\Users\Tobe\Desktop\Call of Duty Black Ops II - Multiplayer.url
2013-12-22 17:57 - 2013-12-22 17:56 - 00000000 ____D C:\ProgramData\Adobe
2013-12-22 17:57 - 2013-12-14 15:01 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Adobe
2013-12-22 17:57 - 2013-12-14 15:00 - 00000000 ____D C:\Users\Tobe\AppData\Local\Adobe
2013-12-22 17:56 - 2013-12-22 17:56 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-12-22 17:56 - 2013-12-22 17:56 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-21 19:58 - 2013-12-18 15:18 - 00000000 ____D C:\Users\Tobe\Documents\DolbyAxon
2013-12-21 17:47 - 2013-12-21 17:47 - 00000924 _____ C:\Users\Public\Desktop\Dolby Axon.lnk
2013-12-21 17:47 - 2013-12-18 15:18 - 00000000 ____D C:\Program Files (x86)\DolbyAxon
2013-12-21 17:46 - 2013-12-21 17:46 - 10836296 _____ (Dolby Laboratories                                          ) C:\Users\Tobe\Downloads\DolbyAxonSetup_v1.5.1.1.exe
2013-12-21 12:29 - 2013-12-21 12:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-21 12:29 - 2013-12-21 12:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-21 12:29 - 2013-12-21 12:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-21 12:29 - 2013-12-21 12:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-21 12:29 - 2013-12-21 12:29 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Set
2013-12-21 12:29 - 2013-12-21 12:29 - 00000000 ____D C:\ProgramData\Oracle
2013-12-21 12:29 - 2013-12-21 12:29 - 00000000 ____D C:\Program Files\Java
2013-12-21 12:29 - 2013-12-21 12:28 - 30694824 _____ (Oracle Corporation) C:\Users\Tobe\Downloads\jre-7u45-windows-x64.exe
2013-12-19 16:11 - 2013-12-14 13:13 - 00001421 _____ C:\Users\Tobe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-19 16:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-18 22:39 - 2013-12-17 18:50 - 00018093 _____ C:\Windows\IE11_main.log
2013-12-18 22:37 - 2013-12-18 22:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-18 22:37 - 2013-12-18 22:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-18 22:37 - 2013-12-18 22:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-18 22:37 - 2013-12-18 22:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-18 22:37 - 2013-12-18 22:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-18 22:37 - 2013-12-18 22:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-18 22:37 - 2013-12-18 22:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-18 22:37 - 2013-12-18 22:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-18 22:37 - 2013-12-18 22:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-18 19:21 - 2013-12-18 19:21 - 00000000 ____D C:\Users\Tobe\Documents\Paradox Interactive
2013-12-18 19:20 - 2013-12-18 19:20 - 00375182 _____ C:\Users\Tobe\Downloads\msvcr100.zip
2013-12-18 19:20 - 2013-12-18 19:20 - 00000000 ____D C:\Users\Tobe\Downloads\msvcr100
2013-12-18 19:11 - 2013-12-18 19:11 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-18 18:46 - 2009-07-14 04:20 - 00000000 __RSD C:\Windows\Media
2013-12-18 18:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-18 18:46 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-18 18:05 - 2013-12-18 18:02 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\PCFix
2013-12-17 22:40 - 2013-12-17 22:40 - 00001210 _____ C:\Users\Public\Desktop\Europa Universalis IV.lnk
2013-12-17 22:38 - 2013-12-17 22:38 - 00001950 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2013-12-17 22:38 - 2013-12-17 22:37 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\DAEMON Tools Lite
2013-12-17 22:38 - 2013-12-17 22:37 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-12-17 22:37 - 2013-12-17 22:37 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-12-17 22:37 - 2013-12-17 22:37 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-12-17 22:31 - 2013-12-17 22:31 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\WinRAR
2013-12-17 22:31 - 2013-12-17 22:31 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-12-17 22:31 - 2013-12-17 22:30 - 00000000 ____D C:\Program Files\WinRAR
2013-12-17 22:29 - 2013-12-17 22:28 - 00000000 ____D C:\Program Files (x86)\Europa_Universalis_IV-FLT
2013-12-17 22:26 - 2013-12-17 22:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-17 21:56 - 2013-12-17 21:56 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\NVIDIA
2013-12-17 21:56 - 2013-12-17 21:56 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Leadertech
2013-12-17 21:56 - 2013-12-17 21:56 - 00000000 ____D C:\Users\Tobe\AppData\Local\Logitech
2013-12-17 21:56 - 2013-12-17 21:56 - 00000000 ____D C:\ProgramData\LogiShrd
2013-12-17 21:55 - 2013-12-17 21:55 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Logitech
2013-12-17 21:55 - 2013-12-17 21:55 - 00000000 ____D C:\Users\Tobe\AppData\Roaming\Logishrd
2013-12-17 21:55 - 2013-12-17 21:55 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2013-12-17 19:50 - 2013-12-14 13:13 - 00000000 ___RD C:\Users\Tobe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-17 19:50 - 2013-12-14 13:13 - 00000000 ___RD C:\Users\Tobe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-17 19:50 - 2010-11-21 04:47 - 00005666 _____ C:\Windows\PFRO.log
2013-12-17 19:49 - 2011-04-12 08:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-12-17 19:49 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-17 19:49 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-17 19:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-12-17 19:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-12-17 19:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-12-17 19:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-12-17 19:49 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-17 19:10 - 2013-12-15 22:32 - 01589650 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-17 17:55 - 2013-12-17 17:31 - 00014015 _____ C:\Windows\IE10_main.log
2013-12-17 17:37 - 2013-12-17 17:37 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-12-17 17:32 - 2013-12-17 17:32 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-12-17 17:32 - 2013-12-17 17:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-12-17 17:19 - 2013-12-17 17:16 - 00004293 _____ C:\Windows\IE9_main.log

Some content of TEMP:
====================
C:\Users\Tobe\AppData\Local\Temp\DIFxAPI.dll
C:\Users\Tobe\AppData\Local\Temp\nvStInst.exe
C:\Users\Tobe\AppData\Local\Temp\sqlite-3.7.151-amd64-sqlitejdbc.dll
C:\Users\Tobe\AppData\Local\Temp\_is8E0C.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 22:19

==================== End Of Log ============================

--- --- ---

Mit dem Programm Malwarebyte antimalware habe ich den PC gescannt, es erschienen 4 infizierte Objekte.

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

Datenbank Version: v2014.01.16.04

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

Tobe :: TOBE-PC [Administrator]

16.01.2014 17:18:56

MBAM-log-2014-01-16 (17-22-00).txt

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 224203

Laufzeit: 1 Minute(n), 15 Sekunde(n)

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 4

C:\Users\Tobe\AppData\Local\Temp\nsk46B2.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

C:\Users\Tobe\Downloads\FLVPlayerSetup (1).exe (PUP.Optional.Cooltech) -> Keine Aktion durchgeführt.

C:\Users\Tobe\Downloads\FLVPlayerSetup (2).exe (PUP.Optional.Cooltech) -> Keine Aktion durchgeführt.

C:\Users\Tobe\Downloads\FLVPlayerSetup.exe (PUP.Optional.Cooltech) -> Keine Aktion durchgeführt.

(Ende)

Ich hatte mal den FLV-Player heruntergeladen, er ist 3x auf der SSD, weil ich beim neuen Opera die Downloads nicht gefunden hatte, deshalb musste ich ihn 3x herunterladen.
Ich befürchte, dass ich ihn nicht auf der Seite des Herstellers geladen hatte sondern auf einer Fake-Seite. Ich habe die Dateien noch nicht entfernen lassen um keiner Spuren zu verwischen. Ich hoffe ich habe alle Angaben korrekt befolgt, eure Anleitung ist ziemlich lang.

Ps: Ich teile mir einen Laptop mit meinem Bruder, wir benutzen das gleiche Benutzerkonto. Ich weiß nicht wo er surft usw..

Auf Hilfe hoffend,
Tobe

schrauber · 16.01.2014, 18:46

hi,

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

cairo · 16.01.2014, 19:52

Scan finished- no malware found.

Ich habe die Datei in der Zwischenzeit einmal bei Virustotal hochgeladen. Das Ergebnis:

17 von 48 Programmen erkannten eine Malware, der Rest nicht.

Komisch...

schrauber · 17.01.2014, 16:30

welche Dateien?

cairo · 18.01.2014, 11:29

Die Dateien, welche malwarebyte als Malware erkannt hatte.

C:\Users\Tobe\AppData\Local\Temp\nsk46B2.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Tobe\Downloads\FLVPlayerSetup (1).exe (PUP.Optional.Cooltech) -> Keine Aktion durchgeführt.
C:\Users\Tobe\Downloads\FLVPlayerSetup (2).exe (PUP.Optional.Cooltech) -> Keine Aktion durchgeführt.

schrauber · 19.01.2014, 09:28

die kannste einfach mit MBAM löschen, das sind nur Downloads und Temps.

17.01.2014, 16:30	#4
schrauber /// the machine /// TB-Ausbilder	Win7: PC fremdgesteuert? FVL player von falscher Seite gedownloadet? welche Dateien? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

19.01.2014, 09:28	#6
schrauber /// the machine /// TB-Ausbilder	Win7: PC fremdgesteuert? FVL player von falscher Seite gedownloadet? die kannste einfach mit MBAM löschen, das sind nur Downloads und Temps. __________________ --> Win7: PC fremdgesteuert? FVL player von falscher Seite gedownloadet?

Win7: PC fremdgesteuert? FVL player von falscher Seite gedownloadet?

Log-Analyse und Auswertung: Win7: PC fremdgesteuert? FVL player von falscher Seite gedownloadet?