Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
PC macht probleme...fährt nicht runter usw.

PC macht probleme...fährt nicht runter usw.


Log-Analyse und Auswertung: PC macht probleme...fährt nicht runter usw.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 31.01.2014, 00:41   #1
Kittball
 
PC macht probleme...fährt nicht runter usw. - Unglücklich

PC macht probleme...fährt nicht runter usw.


edit: Mache gerade einen Quick-Scan mit Malewarebytes...logfiles folgen gleich


Hallo!
1. Heute fuhr mein PC nicht mehr runter...er hing bei "Wird Heruntergefahren".
2. Einige Einstellungen können nicht mehr gemacht werden z.B. Netzwekradapter: Wenn ich da einen Rechtsklick drauf mache und auf Eigenschaften drücke kommt" Ein unerwarteter Fehler ist aufgetreten"
Noch viele komische Sachen treten immer mal wieder auf!
Könnt ihr mal meine Logfiles kontrollieren ob ihr soweit was erkennen könnt?

Liebe Grüße

Zitat:
Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.30.07

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
Bela :: BELA-PC [Administrator]

Schutz: Aktiviert

31.01.2014 00:51:53
mbam-log-2014-01-31 (00-51-53).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 250562
Laufzeit: 3 Minute(n), 9 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 2
HKCR\Typelib\{DCABB943-792E-44C4-9029-ECBEE6265AF9} (PUP.Optional.OutBrowse) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} (PUP.Optional.OutBrowse) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Bela\Downloads\HijackThis - CHIP-Downloader.exe (PUP.Optional.ChipXonio) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
Geändert von Kittball (31.01.2014 um 00:57 Uhr)

Alt 31.01.2014, 07:35   #2
schrauber
/// the machine
/// TB-Ausbilder
 
PC macht probleme...fährt nicht runter usw. - Standard

PC macht probleme...fährt nicht runter usw.


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 31.01.2014, 13:41   #3
Kittball
 
PC macht probleme...fährt nicht runter usw. - Standard

PC macht probleme...fährt nicht runter usw.


Danke schon mal

FRST-Scan

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Bela (administrator) on BELA-PC on 31-01-2014 13:37:22
Running from C:\Users\Bela\Desktop
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Dirk Sarodnick) C:\Program Files (x86)\Dirk Sarodnick\TeamSpeak 3 Bot\TS3-Bot.Service.exe
() C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
() C:\Program Files (x86)\HIS iTurbo\iTurbo.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
() C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(TeamSpeak Systems GmbH) E:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2412616 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4725320 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [415816 2010-08-03] (Logitech Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480 2012-05-30] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-04] (AVAST Software)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [OscarEditor] - C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [3340288 2012-03-20] ()
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Bela\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-25] (Spotify Ltd)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3598680 2014-01-29] (Electronic Arts)
MountPoints2: {40d6c958-527a-11e3-beae-bc5ff45ce26d} - "F:\HTC_Sync_Manager_PC.exe" 
MountPoints2: {73c2d61f-aff6-11e2-aca2-bc5ff45ce26d} - "H:\LaunchU3.exe" -a
Startup: C:\Users\Bela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.8,en-US;q=0.5,en;q=0.3
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC522D3B667D6CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
SearchScopes: HKCU - {88F6E157-4955-45AC-9724-D81918680A15} URL = 
SearchScopes: HKCU - {C74E1C74-04F0-4057-88CF-F8CA86993D7B} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10557
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Extension: (Google Docs) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-06]
CHR Extension: (Google Drive) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-06]
CHR Extension: (YouTube) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-06]
CHR Extension: (Google-Suche) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-06]
CHR Extension: (bloomind ct deepdark) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd [2013-11-15]
CHR Extension: (GFACE Experience Plugin) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol [2013-03-16]
CHR Extension: (AdBlock) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-03-22]
CHR Extension: (avast! Online Security) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-10-27]
CHR Extension: (hxxp://battlelog.battlefield.com/bf3/de) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhboddnmfgijfhfelpahfbclifncnnhb [2013-03-11]
CHR Extension: (Google Wallet) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\Bela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-10-27]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-04] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-05-29] ()
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [25600 2013-10-18] (Microsoft Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-08-22] (Overwolf Ltd)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2014-01-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 TS3-Bot; C:\Program Files (x86)\Dirk Sarodnick\TeamSpeak 3 Bot\TS3-Bot.Service.exe [43008 2013-05-23] (Dirk Sarodnick)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-10-18] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [546304 2013-10-18] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 WSWNA3100; C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [307488 2012-09-03] ()

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R0 asahci64; C:\Windows\System32\drivers\asahci64.sys [47512 2013-01-10] (Asmedia Technology)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [78648 2014-01-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-10-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-27] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1034464 2014-01-04] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [422216 2014-01-04] (AVAST Software)
R3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [79672 2014-01-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-04] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2013-09-24] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17088 2014-01-06] (Glarysoft Ltd)
S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] ()
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-10-14] (DT Soft Ltd)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-09-30] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [173568 2013-10-18] (Microsoft Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 NPF; C:\Windows\system32\DRIVERS\npf.sys [47632 2010-02-03] (CACE Technologies, Inc.)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R0 SCMNdisP; C:\Windows\System32\DRIVERS\scmndisp.sys [29472 2012-09-05] (SerComm Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 tap0901_openvpn_accl; C:\Windows\system32\DRIVERS\tap0901_openvpn_accl.sys [37912 2012-08-21] (The OpenVPN Project)
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2013-09-17] (Anchorfree Inc.)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2013-08-22] (Microsoft Corporation)
S3 idsvc; 
R3 iTurbo; \??\C:\Users\Bela\AppData\Local\Temp\iTurbo.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-31 13:37 - 2014-01-31 13:37 - 00017452 _____ C:\Users\Bela\Desktop\FRST.txt
2014-01-31 13:37 - 2014-01-31 13:37 - 00000000 ____D C:\FRST
2014-01-31 13:36 - 2014-01-31 13:36 - 02079744 _____ (Farbar) C:\Users\Bela\Downloads\FRST64.exe
2014-01-31 13:36 - 2014-01-31 13:36 - 02079744 _____ (Farbar) C:\Users\Bela\Desktop\FRST64.exe
2014-01-31 00:58 - 2014-01-31 00:58 - 00000356 _____ C:\WINDOWS\PFRO.log
2014-01-31 00:49 - 2014-01-31 00:49 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Bela\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-31 00:49 - 2014-01-31 00:49 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-31 00:49 - 2014-01-31 00:49 - 00000000 ____D C:\Users\Bela\AppData\Roaming\Malwarebytes
2014-01-31 00:49 - 2014-01-31 00:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-31 00:49 - 2014-01-31 00:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-31 00:49 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-01-31 00:31 - 2014-01-31 00:32 - 00010354 _____ C:\Users\Bela\Downloads\hijackthis.log
2014-01-31 00:30 - 2014-01-31 00:30 - 00388608 _____ (Trend Micro Inc.) C:\Users\Bela\Downloads\HiJackThis204.exe
2014-01-31 00:27 - 2014-01-31 00:27 - 00000277 _____ C:\WINDOWS\setupact.log
2014-01-31 00:27 - 2014-01-31 00:27 - 00000000 ___HD C:\$WINDOWS.~BT
2014-01-31 00:27 - 2014-01-31 00:27 - 00000000 _____ C:\WINDOWS\setuperr.log
2014-01-30 22:13 - 2014-01-30 22:13 - 00069632 _____ C:\WINDOWS\system32\config\SAM.gu
2014-01-30 22:13 - 2014-01-30 22:13 - 00045056 _____ C:\WINDOWS\system32\config\SOFTWARE.gu
2014-01-30 22:13 - 2014-01-30 22:13 - 00032768 _____ C:\WINDOWS\system32\config\SECURITY.gu
2014-01-30 22:10 - 2014-01-30 22:10 - 04721920 _____ (Piriform Ltd) C:\Users\Bela\Downloads\ccsetup410.exe
2014-01-30 22:04 - 2014-01-30 22:04 - 00039558 _____ C:\WINDOWS\system32\energy-report.html
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____D C:\Program Files (x86)\Driver-Soft
2014-01-29 14:41 - 2014-01-29 14:47 - 18799189 _____ C:\Users\Bela\Downloads\Driver Genius v14.0.0.323.rar
2014-01-29 14:07 - 2014-01-29 14:15 - 60368250 _____ C:\Users\Bela\Downloads\ME(v9.5.15.1730_1.5M) (1).zip
2014-01-29 13:45 - 2014-01-29 13:45 - 00000000 ____D C:\Users\Bela\AppData\Roaming\ATI
2014-01-29 13:45 - 2014-01-29 13:45 - 00000000 ____D C:\Users\Bela\AppData\Local\ATI
2014-01-29 13:45 - 2014-01-29 13:45 - 00000000 ____D C:\ProgramData\ATI
2014-01-29 13:42 - 2014-01-29 13:42 - 00061389 _____ C:\WINDOWS\SysWOW64\CCCInstall_201401291342358228.log
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 ____D C:\ProgramData\AMD
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2014-01-29 13:41 - 2014-01-29 13:42 - 00000000 ____D C:\Program Files\ATI Technologies
2014-01-29 13:41 - 2014-01-29 13:41 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2014-01-29 13:40 - 2014-01-29 13:40 - 00000000 ____D C:\Program Files\ATI
2014-01-29 13:39 - 2014-01-29 13:39 - 00000000 ____D C:\AMD
2014-01-29 13:32 - 2014-01-29 13:32 - 00060544 _____ C:\WINDOWS\SysWOW64\CCCInstall_201401291332146884.log
2014-01-29 13:31 - 2014-01-29 13:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-29 13:30 - 2014-01-29 13:30 - 02325160 _____ C:\Users\Bela\Downloads\amd_cleanup_util_1.2.1.0.exe
2014-01-22 17:43 - 2014-01-22 17:43 - 00921000 _____ (Oracle Corporation) C:\Users\Bela\Downloads\chromeinstall-7u51.exe
2014-01-20 13:30 - 2014-01-20 13:30 - 00005327 _____ C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 13:30 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-01-20 13:30 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-01-20 13:30 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-01-20 13:30 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-01-16 16:11 - 2014-01-16 16:11 - 00061389 _____ C:\WINDOWS\SysWOW64\CCCInstall_201401161611556615.log
2014-01-16 09:34 - 2014-01-16 09:34 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2014-01-16 09:34 - 2014-01-16 09:34 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2014-01-16 09:20 - 2014-01-16 09:20 - 00000000 ____D C:\ProgramData\McAfee
2014-01-15 16:47 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 16:46 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 16:46 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 16:46 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 16:46 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 16:46 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 16:46 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 16:46 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 16:46 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 16:46 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 16:46 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-15 15:09 - 2014-01-15 15:09 - 00121056 _____ C:\Users\Bela\Downloads\bf4_pbbans (2).dat
2014-01-12 20:53 - 2014-01-14 11:47 - 00000000 ____D C:\Users\Bela\Documents\Euro Truck Simulator 2
2014-01-12 20:53 - 2014-01-12 20:53 - 00000000 ____D C:\Users\Bela\AppData\Local\SKIDROW
2014-01-12 20:49 - 2014-01-12 20:49 - 00000000 ____D C:\Program Files (x86)\SCS Software
2014-01-08 14:39 - 2014-01-08 14:41 - 00000012 _____ C:\Users\Bela\Desktop\Neues Textdokument.txt
2014-01-08 14:37 - 2014-01-09 16:12 - 00000000 ____D C:\Users\Bela\AppData\Local\LogMeIn Rescue Applet
2014-01-07 23:38 - 2014-01-07 23:36 - 00450639 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20140107-233826.backup
2014-01-07 23:36 - 2013-10-09 21:14 - 00450639 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20140107-233601.backup
2014-01-07 23:33 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2014-01-07 23:29 - 2014-01-06 09:38 - 00024352 _____ (Glarysoft Ltd) C:\WINDOWS\system32\RegBootDefrag.exe
2014-01-07 23:28 - 2014-01-07 23:28 - 06167800 _____ (Intel Corporation) C:\Users\Bela\Downloads\infinst94_autol.exe
2014-01-07 23:20 - 2014-01-31 01:12 - 01217460 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-07 22:21 - 2014-01-07 22:21 - 00000000 ____D C:\Program Files (x86)\Six Networks
2014-01-07 22:18 - 2014-01-07 22:40 - 00000000 ____D C:\Users\Bela\AppData\Local\SIX Networks
2014-01-07 22:18 - 2014-01-07 22:21 - 00000093 _____ C:\Users\Bela\Downloads\debug.log
2014-01-07 22:18 - 2014-01-07 22:18 - 00000000 ____D C:\Users\Bela\AppData\Roaming\SIX Networks
2014-01-07 22:18 - 2014-01-07 22:18 - 00000000 ____D C:\ProgramData\SIX Networks
2014-01-07 22:16 - 2014-01-07 22:16 - 02940407 _____ C:\Users\Bela\Downloads\DAPINS-A3_v1.75.7z
2014-01-07 21:27 - 2014-01-07 21:27 - 40658208 _____ (Safer-Networking Ltd.                                       ) C:\Users\Bela\Downloads\spybot-2.2.exe
2014-01-07 21:04 - 2014-01-31 13:35 - 00000348 _____ C:\WINDOWS\Tasks\GlaryInitialize 4.job
2014-01-07 21:04 - 2014-01-07 21:04 - 00002968 _____ C:\WINDOWS\System32\Tasks\GU4SkipUAC
2014-01-07 21:04 - 2014-01-07 21:04 - 00002620 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 4
2014-01-07 21:04 - 2014-01-07 21:04 - 00000000 ____D C:\ProgramData\GlarySoft
2014-01-07 21:04 - 2014-01-06 09:38 - 00117024 _____ (Glarysoft Ltd) C:\WINDOWS\system32\BootDefrag.exe
2014-01-07 21:04 - 2014-01-06 04:28 - 00017088 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\BootDefragDriver.sys
2014-01-07 21:03 - 2014-01-30 22:12 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 4
2014-01-07 21:01 - 2014-01-07 21:01 - 04645232 _____ (Piriform Ltd) C:\Users\Bela\Downloads\ccsetup409.exe
2014-01-07 19:03 - 2014-01-07 19:03 - 00578181 _____ C:\Users\Bela\Downloads\injector BF4 Free.rar
2014-01-07 19:02 - 2014-01-07 19:02 - 02930339 _____ C:\Users\Bela\Downloads\BF4 Settings Update.rar
2014-01-04 15:08 - 2014-01-04 15:08 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys

==================== One Month Modified Files and Folders =======

2014-01-31 13:37 - 2014-01-31 13:37 - 00017452 _____ C:\Users\Bela\Desktop\FRST.txt
2014-01-31 13:37 - 2014-01-31 13:37 - 00000000 ____D C:\FRST
2014-01-31 13:36 - 2014-01-31 13:36 - 02079744 _____ (Farbar) C:\Users\Bela\Downloads\FRST64.exe
2014-01-31 13:36 - 2014-01-31 13:36 - 02079744 _____ (Farbar) C:\Users\Bela\Desktop\FRST64.exe
2014-01-31 13:35 - 2014-01-07 21:04 - 00000348 _____ C:\WINDOWS\Tasks\GlaryInitialize 4.job
2014-01-31 13:35 - 2013-03-06 21:07 - 00000000 ____D C:\Users\Bela\AppData\Roaming\TS3Client
2014-01-31 13:34 - 2013-10-18 12:44 - 00000000 __RDO C:\Users\Bela\SkyDrive
2014-01-31 13:34 - 2013-03-06 21:36 - 00001102 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-31 13:32 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-31 01:13 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2014-01-31 01:12 - 2014-01-07 23:20 - 01217460 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-31 01:11 - 2013-10-14 17:06 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2476549310-2960106068-695657798-1000
2014-01-31 01:11 - 2013-03-06 21:36 - 00001106 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-31 01:06 - 2013-03-06 21:21 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-31 01:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-31 00:58 - 2014-01-31 00:58 - 00000356 _____ C:\WINDOWS\PFRO.log
2014-01-31 00:49 - 2014-01-31 00:49 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Bela\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-31 00:49 - 2014-01-31 00:49 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-31 00:49 - 2014-01-31 00:49 - 00000000 ____D C:\Users\Bela\AppData\Roaming\Malwarebytes
2014-01-31 00:49 - 2014-01-31 00:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-31 00:49 - 2014-01-31 00:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-31 00:32 - 2014-01-31 00:31 - 00010354 _____ C:\Users\Bela\Downloads\hijackthis.log
2014-01-31 00:31 - 2013-03-06 20:48 - 00000000 ____D C:\Users\Bela\AppData\Local\VirtualStore
2014-01-31 00:30 - 2014-01-31 00:30 - 00388608 _____ (Trend Micro Inc.) C:\Users\Bela\Downloads\HiJackThis204.exe
2014-01-31 00:29 - 2013-03-06 21:32 - 00000000 ____D C:\Users\Bela\Desktop\Programme
2014-01-31 00:28 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2014-01-31 00:27 - 2014-01-31 00:27 - 00000277 _____ C:\WINDOWS\setupact.log
2014-01-31 00:27 - 2014-01-31 00:27 - 00000000 ___HD C:\$WINDOWS.~BT
2014-01-31 00:27 - 2014-01-31 00:27 - 00000000 _____ C:\WINDOWS\setuperr.log
2014-01-31 00:27 - 2013-10-18 12:28 - 00001908 _____ C:\WINDOWS\diagwrn.xml
2014-01-31 00:27 - 2013-10-18 12:28 - 00001908 _____ C:\WINDOWS\diagerr.xml
2014-01-31 00:25 - 2013-03-07 16:03 - 00007601 _____ C:\Users\Bela\AppData\Local\resmon.resmoncfg
2014-01-30 22:13 - 2014-01-30 22:13 - 00069632 _____ C:\WINDOWS\system32\config\SAM.gu
2014-01-30 22:13 - 2014-01-30 22:13 - 00045056 _____ C:\WINDOWS\system32\config\SOFTWARE.gu
2014-01-30 22:13 - 2014-01-30 22:13 - 00032768 _____ C:\WINDOWS\system32\config\SECURITY.gu
2014-01-30 22:13 - 2013-10-18 12:28 - 00000000 ____D C:\Users\Bela
2014-01-30 22:13 - 2013-08-22 14:25 - 73924608 _____ C:\WINDOWS\system32\config\SOFTWARE.gu.bak
2014-01-30 22:13 - 2013-08-22 14:25 - 13369344 _____ C:\WINDOWS\system32\config\SYSTEM.gu.bak
2014-01-30 22:13 - 2013-08-22 14:25 - 04980736 _____ C:\WINDOWS\system32\config\DEFAULT.gu.bak
2014-01-30 22:12 - 2014-01-07 21:03 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 4
2014-01-30 22:11 - 2013-03-23 16:22 - 00000000 ____D C:\Users\Bela\AppData\Roaming\uTorrent
2014-01-30 22:11 - 2013-03-14 18:47 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-30 22:10 - 2014-01-30 22:10 - 04721920 _____ (Piriform Ltd) C:\Users\Bela\Downloads\ccsetup410.exe
2014-01-30 22:10 - 2013-03-23 15:54 - 00000000 ____D C:\Program Files\CCleaner
2014-01-30 22:04 - 2014-01-30 22:04 - 00039558 _____ C:\WINDOWS\system32\energy-report.html
2014-01-30 21:25 - 2013-10-10 11:00 - 00214392 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2014-01-30 21:24 - 2013-03-06 21:31 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-30 21:22 - 2013-10-20 13:37 - 00003922 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{CF7406AC-B4EE-4A22-A80E-4724E6171D0F}
2014-01-30 20:30 - 2013-03-06 22:34 - 00214392 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2014-01-29 22:17 - 2013-03-07 12:36 - 00000000 ____D C:\Users\Bela\AppData\Local\ArmA 2 OA
2014-01-29 15:14 - 2013-11-19 12:34 - 00000000 ____D C:\ProgramData\DriverGenius
2014-01-29 15:10 - 2009-07-14 06:09 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____D C:\Program Files (x86)\Driver-Soft
2014-01-29 14:47 - 2014-01-29 14:41 - 18799189 _____ C:\Users\Bela\Downloads\Driver Genius v14.0.0.323.rar
2014-01-29 14:15 - 2014-01-29 14:07 - 60368250 _____ C:\Users\Bela\Downloads\ME(v9.5.15.1730_1.5M) (1).zip
2014-01-29 13:45 - 2014-01-29 13:45 - 00000000 ____D C:\Users\Bela\AppData\Roaming\ATI
2014-01-29 13:45 - 2014-01-29 13:45 - 00000000 ____D C:\Users\Bela\AppData\Local\ATI
2014-01-29 13:45 - 2014-01-29 13:45 - 00000000 ____D C:\ProgramData\ATI
2014-01-29 13:42 - 2014-01-29 13:42 - 00061389 _____ C:\WINDOWS\SysWOW64\CCCInstall_201401291342358228.log
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 ____D C:\ProgramData\AMD
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2014-01-29 13:42 - 2014-01-29 13:42 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2014-01-29 13:42 - 2014-01-29 13:41 - 00000000 ____D C:\Program Files\ATI Technologies
2014-01-29 13:41 - 2014-01-29 13:41 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2014-01-29 13:40 - 2014-01-29 13:40 - 00000000 ____D C:\Program Files\ATI
2014-01-29 13:39 - 2014-01-29 13:39 - 00000000 ____D C:\AMD
2014-01-29 13:33 - 2014-01-29 13:31 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-29 13:32 - 2014-01-29 13:32 - 00060544 _____ C:\WINDOWS\SysWOW64\CCCInstall_201401291332146884.log
2014-01-29 13:32 - 2013-10-18 12:25 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2014-01-29 13:30 - 2014-01-29 13:30 - 02325160 _____ C:\Users\Bela\Downloads\amd_cleanup_util_1.2.1.0.exe
2014-01-27 12:34 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-22 17:43 - 2014-01-22 17:43 - 00921000 _____ (Oracle Corporation) C:\Users\Bela\Downloads\chromeinstall-7u51.exe
2014-01-20 13:30 - 2014-01-20 13:30 - 00005327 _____ C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 13:30 - 2013-10-18 12:51 - 00000000 ____D C:\ProgramData\Oracle
2014-01-20 13:30 - 2013-10-18 12:50 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-16 16:11 - 2014-01-16 16:11 - 00061389 _____ C:\WINDOWS\SysWOW64\CCCInstall_201401161611556615.log
2014-01-16 16:10 - 2013-09-05 19:27 - 00000000 ____D C:\ProgramData\Package Cache
2014-01-16 13:05 - 2013-03-06 21:32 - 00000000 ____D C:\Users\Bela\Desktop\Spiele
2014-01-16 09:34 - 2014-01-16 09:34 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2014-01-16 09:34 - 2014-01-16 09:34 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2014-01-16 09:23 - 2013-04-30 15:14 - 00000000 ____D C:\Users\Bela\Documents\My Games
2014-01-16 09:21 - 2013-07-01 02:55 - 00000000 ____D C:\Users\Bela\AppData\Local\Adobe
2014-01-16 09:20 - 2014-01-16 09:20 - 00000000 ____D C:\ProgramData\McAfee
2014-01-16 09:20 - 2013-03-06 21:21 - 00003796 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-01-15 22:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-15 19:12 - 2013-12-29 22:24 - 00000000 ____D C:\Users\Bela\Documents\BFBC2
2014-01-15 19:06 - 2013-03-07 11:57 - 00215128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-15 17:03 - 2013-07-12 01:57 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-15 17:02 - 2013-03-06 22:06 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-15 16:11 - 2013-03-14 18:57 - 00000000 ____D C:\Users\Bela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-15 15:09 - 2014-01-15 15:09 - 00121056 _____ C:\Users\Bela\Downloads\bf4_pbbans (2).dat
2014-01-14 12:59 - 2013-03-06 21:39 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2014-01-14 11:47 - 2014-01-12 20:53 - 00000000 ____D C:\Users\Bela\Documents\Euro Truck Simulator 2
2014-01-14 10:19 - 2013-06-25 18:34 - 00000000 ____D C:\Users\Bela\AppData\Local\Arma 3
2014-01-14 09:37 - 2013-03-06 22:34 - 00076888 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-01-13 15:46 - 2013-06-25 18:34 - 00000000 ____D C:\Users\Bela\Documents\Arma 3
2014-01-13 11:56 - 2013-04-19 14:31 - 00000000 ____D C:\Users\Bela\AppData\Roaming\DAEMON Tools Lite
2014-01-12 20:53 - 2014-01-12 20:53 - 00000000 ____D C:\Users\Bela\AppData\Local\SKIDROW
2014-01-12 20:49 - 2014-01-12 20:49 - 00000000 ____D C:\Program Files (x86)\SCS Software
2014-01-09 16:12 - 2014-01-08 14:37 - 00000000 ____D C:\Users\Bela\AppData\Local\LogMeIn Rescue Applet
2014-01-08 14:41 - 2014-01-08 14:39 - 00000012 _____ C:\Users\Bela\Desktop\Neues Textdokument.txt
2014-01-07 23:36 - 2014-01-07 23:38 - 00450639 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20140107-233826.backup
2014-01-07 23:33 - 2013-09-30 10:29 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-07 23:32 - 2013-09-30 10:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-07 23:29 - 2013-08-22 14:25 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.gu.bak
2014-01-07 23:29 - 2013-08-22 14:25 - 00262144 _____ C:\WINDOWS\system32\config\SAM.gu.bak
2014-01-07 23:28 - 2014-01-07 23:28 - 06167800 _____ (Intel Corporation) C:\Users\Bela\Downloads\infinst94_autol.exe
2014-01-07 22:40 - 2014-01-07 22:18 - 00000000 ____D C:\Users\Bela\AppData\Local\SIX Networks
2014-01-07 22:21 - 2014-01-07 22:21 - 00000000 ____D C:\Program Files (x86)\Six Networks
2014-01-07 22:21 - 2014-01-07 22:18 - 00000093 _____ C:\Users\Bela\Downloads\debug.log
2014-01-07 22:19 - 2013-03-07 12:44 - 00000000 ____D C:\Users\Bela\Documents\ArmA 2
2014-01-07 22:18 - 2014-01-07 22:18 - 00000000 ____D C:\Users\Bela\AppData\Roaming\SIX Networks
2014-01-07 22:18 - 2014-01-07 22:18 - 00000000 ____D C:\ProgramData\SIX Networks
2014-01-07 22:16 - 2014-01-07 22:16 - 02940407 _____ C:\Users\Bela\Downloads\DAPINS-A3_v1.75.7z
2014-01-07 21:29 - 2013-09-30 18:25 - 00000594 _____ C:\WINDOWS\wininit.ini
2014-01-07 21:27 - 2014-01-07 21:27 - 40658208 _____ (Safer-Networking Ltd.                                       ) C:\Users\Bela\Downloads\spybot-2.2.exe
2014-01-07 21:04 - 2014-01-07 21:04 - 00002968 _____ C:\WINDOWS\System32\Tasks\GU4SkipUAC
2014-01-07 21:04 - 2014-01-07 21:04 - 00002620 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 4
2014-01-07 21:04 - 2014-01-07 21:04 - 00000000 ____D C:\ProgramData\GlarySoft
2014-01-07 21:04 - 2013-04-16 20:33 - 00000000 ____D C:\Users\Bela\AppData\Roaming\GlarySoft
2014-01-07 21:01 - 2014-01-07 21:01 - 04645232 _____ (Piriform Ltd) C:\Users\Bela\Downloads\ccsetup409.exe
2014-01-07 19:03 - 2014-01-07 19:03 - 00578181 _____ C:\Users\Bela\Downloads\injector BF4 Free.rar
2014-01-07 19:02 - 2014-01-07 19:02 - 02930339 _____ C:\Users\Bela\Downloads\BF4 Settings Update.rar
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 09:38 - 2014-01-07 23:29 - 00024352 _____ (Glarysoft Ltd) C:\WINDOWS\system32\RegBootDefrag.exe
2014-01-06 09:38 - 2014-01-07 21:04 - 00117024 _____ (Glarysoft Ltd) C:\WINDOWS\system32\BootDefrag.exe
2014-01-06 04:28 - 2014-01-07 21:04 - 00017088 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\BootDefragDriver.sys
2014-01-05 17:34 - 2013-03-06 22:47 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-01-04 15:08 - 2014-01-04 15:08 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-01-04 15:08 - 2013-10-27 18:38 - 01034464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-04 15:08 - 2013-10-27 18:38 - 00422216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-01-04 15:08 - 2013-10-27 18:38 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-04 15:08 - 2013-10-27 18:38 - 00207904 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-04 15:08 - 2013-10-27 18:38 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-04 15:08 - 2013-10-27 18:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-31 01:11

==================== End Of Log ============================
--- --- ---


Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2014 01
Ran by Bela at 2014-01-31 13:37:53
Running from C:\Users\Bela\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

µTorrent (x32 Version: 3.3.0.29342 - BitTorrent Inc.)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
ARMA 2 Operation Arrowhead Uninstall (x32 Version:  - )
ArmA 2 Uninstall (x32 Version:  - )
Arma 3 Alpha (x32 Version:  - Bohemia Interactive)
ArmA II Launcher (x32 Version: 1.4.1.0 - Spirited Machine)
Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.4.001 - Asmedia Technology)
Auslogics DiskDefrag (x32 Version: 4.4.1.0 - Auslogics Labs Pty Ltd)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
AwesomiumSetup (x32 Version: 1.00.0000 - SIX Networks GmbH)
Battlefield 3™ (x32 Version: 1.0.0.0 - Electronic Arts)
Battlefield 4™ (x32 Version: 1.0.0.1 - Electronic Arts)
Battlefield: Bad Company™ 2 (x32 Version: 1.0.1.0 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 2.3.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (x32 Version:  - )
Broadcom NetLink Controller (Version: 14.8.5.1 - Broadcom Corporation)
Canon MG5100 series Benutzerregistrierung (x32 Version:  - )
Canon MG5100 series MP Drivers (Version:  - )
Canon MP Navigator EX 4.0 (x32 Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0226.1355.24951 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0226.1355.24951 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0226.1355.24951 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 4.10 - Piriform)
CPUID CPU-Z 1.67 (Version:  - )
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
DayZ (x32 Version:  - Bohemia Interactive)
DayZ Commander (x32 Version: 0.92.69 - Dotjosh Studios)
DayZero Launcher (x32 Version: 01.00.003 - ZOMBIES.NU)
Die Sims™ 3 (x32 Version: 1.50.56 - Electronic Arts)
Die Sims™ 3 70er, 80er & 90er Accessoires (x32 Version: 17.0.77 - Electronic Arts)
Die Sims™ 3 Design-Garten-Accessoires (x32 Version: 7.3.2 - Electronic Arts)
Die Sims™ 3 Diesel Accessoires (x32 Version: 14.0.48 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (x32 Version: 10.0.96 - Electronic Arts)
Die Sims™ 3 Gib Gas-Accessoires (x32 Version: 5.0.44 - Electronic Arts)
Die Sims™ 3 Jahreszeiten (x32 Version: 16.0.136 - Electronic Arts)
Die Sims™ 3 Katy Perry Süße Welt (x32 Version: 13.0.62 - Electronic Arts)
Die Sims™ 3 Late Night (x32 Version: 6.0.81 - Electronic Arts)
Die Sims™ 3 Lebensfreude (x32 Version: 8.0.152 - Electronic Arts)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38 - Electronic Arts)
Die Sims™ 3 Reiseabenteuer (x32 Version: 2.0.86 - Electronic Arts)
Die Sims™ 3 Showtime (x32 Version: 12.0.273 - Electronic Arts)
Die Sims™ 3 Stadt-Accessoires (x32 Version: 9.0.73 - Electronic Arts)
Die Sims™ 3 Supernatural (x32 Version: 15.0.135 - Electronic Arts)
Die Sims™ 3 Traumkarrieren (x32 Version: 4.0.87 - Electronic Arts)
Die Sims™ 3 Traumsuite-Accessoires (x32 Version: 11.0.84 - Electronic Arts)
Die Sims™ 3 Wildes Studentenleben (x32 Version: 18.0.126 - Electronic Arts)
Driver Genius (x32 Version: 14.0 - Driver-Soft Inc.)
Euro Truck Simulator 2 v1.7.0 Update incl DLC (x32 Version:  - )
FIFA 13 (x32 Version: 1.7.0.0 - Electronic Arts)
Fraps (remove only) (x32 Version:  - )
GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team)
Glary Utilities 4.4 (x32 Version: 4.4.0.86 - Glarysoft Ltd)
Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HIS iTurbo (x32 Version:  - )
HTC Driver Installer (x32 Version: 4.1.0.001 - HTC Corporation)
HTC Sync Manager (x32 Version: 2.0.52.0 - HTC)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.1.0.36960 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.17.10.3347 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 11.2.0.1006 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden
IPTInstaller (x32 Version: 4.0.8 - HTC)
IsoBuster 3.1 (x32 Version: 3.1 - Smart Projects)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kits Configuration Installer (x32 Version: 8.100.25984 - Microsoft) Hidden
Landwirtschafts Simulator 2013 (x32 Version: 1.0 - GIANTS Software)
Left 4 Dead 2 (x32 Version:  - Valve)
Logitech GamePanel Software 3.06.109 (Version: 3.06.109 - Logitech Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (x32 Version: 4.5.50930 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (x32 Version: 4.5.51641 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (x32 Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
NETGEAR WNA3100 wireless USB 2.0 adapter (x32 Version: 2.1.0.4 - NETGEAR)
Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.37 - WindSolutions)
Open Broadcaster Software (x32 Version:  - )
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)
Origin (x32 Version: 9.3.10.4710 - Electronic Arts, Inc.)
OSCAR Editor (x32 Version: 12.03.0004 - A4TECH) Hidden
Overwolf (x32 Version: 0.44.256 - Overwolf)
PlanetSide 2 (HKCU Version:  - Sony Online Entertainment)
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
Rainmeter (x32 Version: 3.0.2 r2161 - )
Raptr (x32 Version:  - )
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6559 - Realtek Semiconductor Corp.)
Secure Download Manager (x32 Version: 3.1.10 - Kivuto Solutions Inc.)
Spotify (HKCU Version: 0.9.6.81.gd359a796 - Spotify AB)
Spybot - Search & Destroy (x32 Version: 2.2.25 - Safer-Networking Ltd.)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab for Intel (x32 Version: 4.5.15.0 - Husdawg, LLC)
TeamSpeak 3 Bot (x32 Version: 1.0.14 - Dirk Sarodnick)
TeamSpeak 3 Client (x32 Version: 3.0.13 - TeamSpeak Systems GmbH)
War Thunder (x32 Version:  - Gaijin Entertainment)
Windows Software Development Kit EULA (x32 Version: 8.100.25984 - Microsoft Corporations) Hidden
Windows Software Development Kit for Windows 8.1 (x32 Version: 8.100.25984 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
X7 Oscar Editor (x32 Version: 12.03.0004 - A4TECH)
XMedia Recode Version 3.1.5.8 (x32 Version: 3.1.5.8 - XMedia Recode)

==================== Restore Points  =========================

28-01-2014 19:21:54 Geplanter Prüfpunkt
29-01-2014 20:08:29 DirectX wurde installiert

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-01-07 23:38 - 00450639 ____R C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {01C8B887-ED80-4ECC-9D09-C13057CAA170} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {05FDB51A-B5DE-4FBC-87F6-2D6A64B4372F} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0F09A253-5F46-4BD5-B5B2-44603E87B9E2} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2B7372F6-7A51-47ED-B21F-196DFDB96386} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {2D3E350B-1072-4540-A60C-EADA751548AD} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {36C75B9A-BE43-4EA2-B67B-2770BF186A04} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3E3EC008-3453-46F9-AB92-B39C8148B59B} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4A5E9C66-87C6-484F-9178-6F96D85DE33E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {501C8616-30CF-4335-8E7D-6C4FF9AB3800} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-04] (AVAST Software)
Task: {564FE38F-2049-455F-8B30-E4EECEEB3409} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {5ACBDFB6-1654-4C07-A1F3-B07A77079FF3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)
Task: {5BB36D9A-D88D-45F7-89A8-C57235B23A31} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {5F6B7663-95DA-4C04-B438-152C9CB5836E} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6E984E65-927B-438A-ACD8-EFF19EC72522} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {79BB570D-FE28-4E99-AE7A-5FB5BFEB2870} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {7ED8FA56-1AF7-4A33-A500-C90D4C77D969} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {866859DF-6D54-43E6-B2E8-F5D825565CE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9A196B22-9216-4FAA-B0E5-8EAE9828CEDE} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {9E3E0F30-03E1-4D57-B64A-4207ACEC896D} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {9F1166C4-7F5A-4052-91CB-3CC50C9E8CA6} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A1EBDA74-15F4-406D-97B1-4B652CC3FC80} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {A27E31CF-F755-49F5-A4DE-D12A1D6A00E1} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {A60C7A48-C958-4DC1-9DAF-514C81B32535} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {A70F0C01-15CC-4BE9-BD0D-3253F53CB1DC} - System32\Tasks\GU4SkipUAC => C:\Program Files (x86)\Glary Utilities 4\Integrator.exe [2014-01-06] (Glarysoft Ltd)
Task: {A867F05D-5E59-415C-AB3E-2886097E1322} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-16] (Adobe Systems Incorporated)
Task: {B7FC1009-78CD-49F6-BD85-1F81AEC184B2} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {BD46BEC8-B777-47BC-95E6-EFEE81012592} - System32\Tasks\HIS iTurbo => C:\Program Files (x86)\HIS iTurbo\iTurbo.exe [2013-08-09] ()
Task: {C22AB732-D574-4692-B01C-2CBF49C9C65A} - System32\Tasks\GlaryInitialize 4 => C:\Program Files (x86)\Glary Utilities 4\Initialize.exe [2014-01-06] (Glarysoft Ltd)
Task: {CF35E5AE-82CD-4BEF-BC79-A1B1CDAA7DAF} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D50895C9-D04E-4934-8E23-925A09513FDF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {D7C27E7E-FAE2-4995-BF26-552CE4DFC680} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-01-15] (Microsoft Corporation)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {D941AA1C-D609-4A57-BCDD-F41D01AC5C41} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E0DFB166-076D-4BA9-ABFE-BDB68D327A9A} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {E3CE6268-D617-40DF-8207-2DE02DE234E4} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {ECB33D8A-0660-4F5A-89BB-8457424AC271} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {F8842DE2-04B4-4F6A-8978-8DCB5C00CC48} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {FCC600F5-1F7D-4BBA-ACA3-5DA075808C3D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GlaryInitialize 4.job => C:\Program Files (x86)\Glary Utilities 4\Initialize.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-10-29 21:45 - 2013-10-29 21:45 - 00798392 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2013-10-29 21:41 - 2013-10-29 21:41 - 00058880 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2014-01-30 21:58 - 2014-01-30 17:52 - 02168320 _____ () C:\Program Files\AVAST Software\Avast\defs\14013001\algo.dll
2014-01-07 23:32 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-09-30 10:29 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-09-30 10:29 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-09-30 10:29 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-01-07 23:32 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-12-03 13:23 - 2012-09-28 10:04 - 00380928 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WifiLib.dll
2010-12-02 16:56 - 2010-12-02 16:56 - 00815104 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\OSD_Text\OSD_Text.dll
2011-01-09 19:45 - 2011-01-09 19:45 - 00088064 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_MouseDeviceManager.dll
2012-02-07 10:20 - 2012-02-07 10:20 - 02413568 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\ScreenCapture\ScreenCapture.dll
2011-03-21 18:33 - 2011-03-21 18:33 - 00999424 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2010-09-20 13:18 - 2010-09-20 13:18 - 00085504 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_ZoomControl.dll
2010-09-20 13:18 - 2010-09-20 13:18 - 00054272 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_ScrollbarControl.dll
2011-04-12 14:14 - 2011-04-12 14:14 - 00063488 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_AnalyzeGesturesInRight.dll
2010-11-01 19:16 - 2010-11-01 19:16 - 00062976 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_AnalyzeGesturesInOne.dll
2011-08-10 12:43 - 2011-08-10 12:43 - 00118272 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_Wheel4D.dll
2013-02-27 16:15 - 2013-10-27 16:16 - 00230376 _____ () E:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2013-02-27 16:15 - 2013-10-27 16:16 - 00237032 _____ () E:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2013-02-27 16:15 - 2013-10-27 16:16 - 00159208 _____ () E:\Program Files (x86)\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
2013-02-27 16:15 - 2013-10-27 16:16 - 00431080 _____ () E:\Program Files (x86)\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-09-09 14:37 - 2013-10-27 16:16 - 00555496 _____ () E:\Program Files (x86)\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2013-02-27 16:15 - 2013-10-27 16:16 - 00098792 _____ () E:\Program Files (x86)\TeamSpeak 3 Client\plugins\ts3g15.dll
2013-10-27 18:38 - 2013-10-27 18:38 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-10-22 12:51 - 2013-10-22 12:51 - 00172544 _____ () C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IsdiInterop\23ba50d6b9f484763b66e607e9066c8b\IsdiInterop.ni.dll
2013-03-06 21:54 - 2012-05-30 13:55 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-11-19 12:48 - 2013-09-16 12:19 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-01-28 21:12 - 2014-01-23 06:56 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libglesv2.dll
2014-01-28 21:12 - 2014-01-23 06:56 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libegl.dll
2014-01-28 21:12 - 2014-01-23 06:56 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll
2014-01-28 21:12 - 2014-01-23 06:57 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll
2014-01-28 21:12 - 2014-01-23 06:55 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Microsoft:CvqUflceTwOxfcleid4Fh
AlternateDataStreams: C:\ProgramData\Microsoft:gfa9CitOfDMIetiXBne8hQvjcLM1
AlternateDataStreams: C:\Users\Bela\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Bela\Downloads\Bewerbung um einen Nebenjob + Bewerbungsfoto.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Could not start eventlog service, could not read events.

Der angeforderte Dienst wurde bereits gestartet.

Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.


==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 16263.58 MB
Available physical RAM: 13754.48 MB
Total Pagefile: 32647.58 MB
Available Pagefile: 29536.59 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:535.04 GB) NTFS
Drive e: (Volume) (Fixed) (Total:298.08 GB) (Free:280.5 GB) NTFS
Drive g: (Sims3EP09) (CDROM) (Total:5.21 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 16332DC0)
Partition 1: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=8 MB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: CDA5BC5E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
__________________
Alt 01.02.2014, 11:06   #4
schrauber
/// the machine
/// TB-Ausbilder
 
PC macht probleme...fährt nicht runter usw. - Standard

PC macht probleme...fährt nicht runter usw.


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu PC macht probleme...fährt nicht runter usw.
adobe, adobe flash player, antivirus, avast, bho, defender, einstellungen, explorer, fehler, flash player, google, helper, hijack, hijackthis, internet, internet explorer, microsoft, netgear, scan, security, software, tcp, teamspeak, windows, wmp


« Infizierter Registrierungschlüssel "PUP.Optional.InstallCore.A"; Chrome lädt Seiten nicht richtig | CPU Auslastung bei 100% im Desktopbetrieb »


Ähnliche Themen: PC macht probleme...fährt nicht runter usw.


  1. PC fährt nicht mehr runter, kann explorer nicht beenden
    Log-Analyse und Auswertung - 15.04.2015 (12)
  2. Nach bka 2.0.7 fährt PC nicht mehr runter
    Plagegeister aller Art und deren Bekämpfung - 05.09.2012 (3)
  3. Rechner fährt nicht runter,fährt sehr langsam hoch und laggt zwischendurch
    Log-Analyse und Auswertung - 29.12.2009 (1)
  4. Window fährt nicht runter
    Alles rund um Windows - 20.01.2009 (7)
  5. Window fährt nicht runter
    Mülltonne - 26.12.2008 (1)
  6. Pc fährt nicht runter
    Mülltonne - 05.11.2008 (0)
  7. pc fährt nicht runter
    Log-Analyse und Auswertung - 05.11.2008 (0)
  8. Notebook fährt nicht mehr runter ....
    Log-Analyse und Auswertung - 12.09.2008 (10)
  9. Windows fährt nicht runter
    Mülltonne - 04.08.2008 (1)
  10. Pc fährt sich nicht normal runter!
    Alles rund um Windows - 18.11.2007 (0)
  11. Pc fährt nicht runter, virenscan bricht ab
    Log-Analyse und Auswertung - 20.08.2007 (2)
  12. Rechner fährt nicht mehr runter!
    Log-Analyse und Auswertung - 21.06.2007 (1)
  13. PC fährt nicht runter
    Alles rund um Windows - 10.06.2007 (3)
  14. BITTE UM SUPPORT! PC FÄHRT NICHT RUNTER! PROBLEME MIT DEM "ABGESICHERTEN MODUS!
    Log-Analyse und Auswertung - 24.08.2005 (5)
  15. !!! Rechner Fährt Nicht Mehr Runter !!!
    Alles rund um Windows - 30.01.2005 (6)
  16. Svc32????Comp. fährt nicht runter
    Alles rund um Windows - 15.08.2004 (1)
  17. Computer fährt nicht mehr runter....
    Alles rund um Windows - 31.08.2003 (10)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema PC macht probleme...fährt nicht runter usw. - edit: Mache gerade einen Quick-Scan mit Malewarebytes...logfiles folgen gleich Hallo! 1. Heute fuhr mein PC nicht mehr runter...er hing bei "Wird Heruntergefahren". 2. Einige Einstellungen können nicht mehr gemacht werden - PC macht probleme...fährt nicht runter usw....
Archiv
Du betrachtest: PC macht probleme...fährt nicht runter usw. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54