Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: HILFE Youtube und google gegen Schuhwebsite ausgetauscht

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 01.02.2014, 08:51   #1
Manhhao
 
HILFE Youtube und google gegen Schuhwebsite ausgetauscht - Frage

HILFE Youtube und google gegen Schuhwebsite ausgetauscht



Seit heute wenn ich Google und Youtube öffnen will kommt eine Schuhwebsite
AUF JAPANISCH oder Chinesisch jenachdem

Alt 01.02.2014, 09:25   #2
schrauber
/// the machine
/// TB-Ausbilder
 

HILFE Youtube und google gegen Schuhwebsite ausgetauscht - Standard

HILFE Youtube und google gegen Schuhwebsite ausgetauscht



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 01.02.2014, 12:46   #3
Manhhao
 
HILFE Youtube und google gegen Schuhwebsite ausgetauscht - Standard

HILFE Youtube und google gegen Schuhwebsite ausgetauscht



Hier Der FRST.log
FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 03
Ran by Hausaufgaben (administrator) on MANHHAO-PC on 01-02-2014 10:06:15
Running from C:\Users\Hausaufgaben\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345312 2013-03-30] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Olympus DSS] - C:\ProgramData\AppleDev0\rzsbkotiu.exe [596992 2013-10-26] (Elite Bypassers)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [YouCam Service] - C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [255208 2011-11-29] (CyberLink Corp.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813200 2014-01-23] (LogMeIn Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-2823766941-1517505164-3398274235-1008\...\Run: [ꢋ⺑v澼Ὄᚇ汉ᴭ䠳䃦ମᱩ纩ₘ忩䴪谄毉Ჶ떩ꡲﱱḶⷭ暶꿠﫧肟鞵琔엵捍︣횡鎟蟼ꇐ⺫ꮵ�ᴯ䒪�料⵱㻾᳁鉖슕ꌼ⹉칙噔ᘟ貀鷄ۥ] - C:\ProgramData\AppleDev0\rzsbkotiu.exe [596992 2013-10-26] (Elite Bypassers)
HKU\S-1-5-21-2823766941-1517505164-3398274235-1008\...\Run: [Olympus DSS] - C:\ProgramData\AppleDev0\rzsbkotiu.exe [596992 2013-10-26] (Elite Bypassers)
HKU\S-1-5-21-2823766941-1517505164-3398274235-1008\...\Run: [iFunBoxConnector] - C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe [812544 2012-11-20] ()
IFEO\hijackthis.exe: [Debugger] rs_.exe
IFEO\housecalllauncher.exe: [Debugger] zl_.exe
IFEO\rstrui.exe: [Debugger] xs_.exe
IFEO\spybotsd.exe: [Debugger] zb_.exe
SecurityProviders: credssp.dll, ObzinkEblanc.dll
Startup: C:\Users\Mama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\blueincarnations.vbs ()
Startup: C:\Users\Manh hao\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\blueincarnations.vbs ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yandex.ru/?win=103&clid=1995482
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=tugumsd&cd=2XzuyEtN2Y1L1QzuyB0AyBzytCzyyEtCzytB0D0FtB0AtC0BtN0D0Tzu0CyDtCtDtN1L2XzutBtFtBtFtCtFyCtCzztN1L1Czu2Z2Y1N2Y1H1B1Q&cr=1742042479&ir=
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=42820&st=bs&tid=3347&q={searchTerms}
SearchScopes: HKCU - DefaultScope DD28B20CCB6D8396A4FD0D3A6FB7E1CB URL = hxxp://yandex.ru/yandsearch?win=103&clid=1995483&text={searchTerms}
SearchScopes: HKCU - DD28B20CCB6D8396A4FD0D3A6FB7E1CB URL = hxxp://yandex.ru/yandsearch?win=103&clid=1995483&text={searchTerms}
SearchScopes: HKCU - {3601E731-9D95-95B5-7C7D-629D5426D365} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=42820&st=bs&tid=3347&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: qualitink - {73ad5d47-66e5-4127-80ca-c0eedabafbcc} - C:\Program Files (x86)\qualitink\qualitinkbho.dll (qualitink)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Hausaufgaben\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF DefaultSearchEngine: Yandex
FF SelectedSearchEngine: Yandex
FF Homepage: hxxp://www.yandex.ru/?win=103&clid=1995482
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Users\Hausaufgaben\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-114336.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Hausaufgaben\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\staged [2013-12-21]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-02]
CHR Extension: (Google Drive) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-02]
CHR Extension: (YouTube) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-02]
CHR Extension: (Google-Suche) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-02]
CHR Extension: (qualitink) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljkcijnbckdflhifmbnfnkjacokloacf [2013-12-02]
CHR Extension: (Google Wallet) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-02]
CHR Extension: (Google Mail) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-02]
CHR HKLM-x32\...\Chrome\Extension: [ljkcijnbckdflhifmbnfnkjacokloacf] - C:\Program Files (x86)\qualitink\ljkcijnbckdflhifmbnfnkjacokloacf.crx [2013-10-05]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-03-30] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-03-30] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [565472 2013-03-30] (Avira Operations GmbH & Co. KG)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-12-13] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)

==================== Drivers (Whitelisted) ====================

R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-16] (DT Soft Ltd)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-03] (Anchorfree Inc.)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-01 10:06 - 2014-02-01 10:06 - 00014267 _____ () C:\Users\Hausaufgaben\Desktop\FRST.txt
2014-02-01 10:05 - 2014-02-01 10:05 - 02080256 _____ (Farbar) C:\Users\Hausaufgaben\Downloads\FRST64.exe
2014-02-01 10:05 - 2014-02-01 10:05 - 02080256 _____ (Farbar) C:\Users\Hausaufgaben\Desktop\FRST64.exe
2014-02-01 08:48 - 2014-02-01 08:49 - 00000000 ____D () C:\Users\Manh hao\Documents\Bandicam
2014-01-31 21:19 - 2014-01-31 21:19 - 02321335 _____ () C:\Users\Hausaufgaben\Downloads\MineCraft Cracker.zip
2014-01-31 19:54 - 2014-01-31 19:56 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\BigDigServer-v1.3.9
2014-01-31 19:54 - 2014-01-31 19:54 - 49740104 _____ () C:\Users\Hausaufgaben\Desktop\BigDigServer-v1.3.9.zip
2014-01-31 19:51 - 2014-01-31 19:54 - 49740104 _____ () C:\Users\Hausaufgaben\Downloads\BigDigServer-v1.3.9.zip
2014-01-31 19:43 - 2014-01-31 19:43 - 01666994 _____ () C:\Users\Hausaufgaben\Downloads\Hack-slash-Mine---Server.zip
2014-01-31 19:43 - 2014-01-31 19:43 - 01666994 _____ () C:\Users\Hausaufgaben\Desktop\Hack-slash-Mine---Server.zip
2014-01-31 19:36 - 2014-01-31 19:49 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\Hexxit_Server_v1.0.10 (1)
2014-01-31 19:35 - 2014-01-31 19:35 - 48168194 _____ () C:\Users\Hausaufgaben\Desktop\Hexxit_Server_v1.0.10 (1).zip
2014-01-31 19:33 - 2014-01-31 19:35 - 48168194 _____ () C:\Users\Hausaufgaben\Downloads\Hexxit_Server_v1.0.10 (1).zip
2014-01-30 19:05 - 2014-01-30 19:05 - 00533690 _____ () C:\Users\Hausaufgaben\Downloads\GemsPlus_Forge_1.6.4v2.zip
2014-01-30 19:05 - 2014-01-30 19:05 - 00533690 _____ () C:\Users\Hausaufgaben\Desktop\GemsPlus_Forge_1.6.4v2.zip
2014-01-30 17:55 - 2014-01-30 17:55 - 02269863 _____ () C:\Users\Hausaufgaben\Downloads\forge-1.6.4-9.11.1.965-installer.jar
2014-01-30 17:55 - 2014-01-30 17:55 - 02269863 _____ () C:\Users\Hausaufgaben\Desktop\forge-1.6.4-9.11.1.965-installer.jar
2014-01-30 17:55 - 2014-01-30 17:55 - 00044309 _____ () C:\Users\Hausaufgaben\Downloads\Animated_Player_v1.3.0_mc1.6.4.zip
2014-01-29 19:13 - 2014-01-29 19:17 - 163518455 _____ () C:\Users\Hausaufgaben\Downloads\Minecraft_Texture_Pack.zip
2014-01-29 19:02 - 2014-01-29 19:02 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-01-29 19:00 - 2014-01-29 19:00 - 00278584 _____ () C:\Windows\Minidump\012914-35895-01.dmp
2014-01-28 19:41 - 2014-01-28 19:41 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Hausaufgaben\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-01-28 19:41 - 2014-01-28 19:41 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Hausaufgaben\Desktop\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-01-27 17:48 - 2014-01-27 17:48 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Apple
2014-01-26 00:04 - 2014-01-26 00:04 - 00000000 ____D () C:\Users\Papa2\AppData\Local\Google
2014-01-25 23:59 - 2014-01-25 23:59 - 00065872 _____ () C:\Users\Papa2\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 23:59 - 2014-01-25 23:59 - 00000000 ____D () C:\Users\Papa2\Documents\Youcam
2014-01-25 23:59 - 2014-01-25 23:59 - 00000000 ____D () C:\Users\Papa2\AppData\Local\CyberLink
2014-01-25 23:58 - 2014-01-28 02:18 - 00000000 ____D () C:\Users\Papa2\AppData\Local\LogMeIn Hamachi
2014-01-25 23:58 - 2014-01-25 23:58 - 00001425 _____ () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-25 23:58 - 2014-01-25 23:58 - 00000020 ___SH () C:\Users\Papa2\ntuser.ini
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Vorlagen
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Startmenü
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Netzwerkumgebung
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Lokale Einstellungen
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Eigene Dateien
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Druckumgebung
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Documents\Eigene Musik
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Documents\Eigene Bilder
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Local\Verlauf
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Local\Anwendungsdaten
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Anwendungsdaten
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Roaming\Apple Computer
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Roaming\Adobe
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\VirtualStore
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\LogMeIn
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\Adobe
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2
2014-01-25 23:58 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-25 23:58 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-25 22:00 - 2014-01-25 22:00 - 01462548 _____ () C:\Users\Hausaufgaben\Desktop\Intro Für   TodayPlays By ItsZerCrash.mp4
2014-01-25 21:59 - 2014-01-25 22:00 - 01462548 _____ () C:\Users\Hausaufgaben\Downloads\Intro Für   TodayPlays By ItsZerCrash.mp4
2014-01-25 18:37 - 2014-01-25 18:43 - 293186046 _____ () C:\Users\Hausaufgaben\Desktop\javaw 2014-01-25 18-37-53-869.avi
2014-01-25 18:29 - 2014-01-28 17:44 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\Bandicam
2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Selina\Desktop\Bandicam.lnk
2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Manh hao\Desktop\Bandicam.lnk
2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Mama\Desktop\Bandicam.lnk
2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Hausaufgaben\Desktop\Bandicam.lnk
2014-01-25 18:29 - 2014-01-25 18:29 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\BANDISOFT
2014-01-25 18:29 - 2014-01-25 18:29 - 00000000 ____D () C:\Program Files (x86)\Bandicam
2014-01-25 18:28 - 2014-01-25 18:28 - 07377680 _____ (Bandisoft) C:\Users\Hausaufgaben\Downloads\bdcamsetup193.exe
2014-01-18 20:51 - 2014-01-18 20:51 - 00004535 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamStudio.cfg
2014-01-18 20:51 - 2014-01-18 20:51 - 00000408 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamShapes.ini
2014-01-18 20:51 - 2014-01-18 20:51 - 00000408 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamLayout.ini
2014-01-18 20:51 - 2014-01-18 20:51 - 00000046 _____ () C:\Users\Hausaufgaben\AppData\Roaming\Camdata.ini
2014-01-18 20:02 - 2014-01-18 20:07 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\My CamStudio Temp Files
2014-01-18 19:52 - 2014-01-18 19:52 - 00000096 _____ () C:\Users\Hausaufgaben\AppData\Roaming\version2.xml
2014-01-18 19:21 - 2014-01-18 19:21 - 03577897 _____ () C:\Users\Hausaufgaben\Downloads\Template.rar
2014-01-18 19:21 - 2014-01-18 19:21 - 03577897 _____ () C:\Users\Hausaufgaben\Desktop\Template.rar
2014-01-18 19:09 - 2014-01-18 19:09 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Publish Providers
2014-01-18 18:59 - 2014-01-18 18:59 - 00000000 ____D () C:\Program Files\CamStudio 2.7
2014-01-18 18:58 - 2014-01-18 18:58 - 00001038 _____ () C:\Users\Public\Desktop\Vegas Pro 12.0 (64-bit).lnk
2014-01-18 18:58 - 2012-09-29 17:37 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\SonyVegasPro.v12
2014-01-18 18:57 - 2014-01-18 19:09 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Sony
2014-01-18 18:57 - 2014-01-18 19:05 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Sony
2014-01-18 18:57 - 2014-01-18 19:01 - 00000000 ____D () C:\ProgramData\Sony
2014-01-18 18:57 - 2014-01-18 18:57 - 00000000 ____D () C:\Program Files\Sony
2014-01-18 18:57 - 2014-01-18 18:57 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-01-18 18:57 - 2014-01-18 18:50 - 28147000 _____ () C:\Users\Hausaufgaben\Desktop\SonyVegasPro.v12.rar
2014-01-18 18:56 - 2014-01-18 18:57 - 11613447 _____ (CamStudio Open Source ) C:\Users\Hausaufgaben\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe
2014-01-18 18:49 - 2014-01-18 18:50 - 28147000 _____ () C:\Users\Hausaufgaben\Downloads\SonyVegasPro.v12.rar
2014-01-18 18:48 - 2014-01-18 18:56 - 243071608 _____ (Sony Creative Software Inc.) C:\Users\Hausaufgaben\Downloads\vegaspro12.0.770.exe
2014-01-18 17:24 - 2014-01-20 19:59 - 00000776 _____ () C:\Users\Hausaufgaben\Desktop\Beschreibung.txt
2014-01-18 17:09 - 2014-01-18 17:10 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Minecraft Skin Viewer
2014-01-18 16:29 - 2014-01-18 16:32 - 48168194 _____ () C:\Users\Hausaufgaben\Downloads\Hexxit_Server_v1.0.10.zip
2014-01-18 15:46 - 2014-01-18 15:47 - 40343735 _____ () C:\Users\Hausaufgaben\Downloads\Sphax PureBDcraft  64x Hexxit Patch 1.5.2 by werri33.zip
2014-01-18 15:45 - 2014-01-18 15:45 - 02295368 _____ () C:\Users\Hausaufgaben\Desktop\Technic Launcher Cracked.exe
2014-01-18 15:44 - 2014-01-18 15:45 - 02295368 _____ () C:\Users\Hausaufgaben\Downloads\Technic Launcher Cracked.exe
2014-01-17 17:19 - 2014-01-17 17:19 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-01-17 17:18 - 2014-01-17 17:18 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-01-17 16:43 - 2014-01-17 16:58 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-01-17 16:43 - 2014-01-17 16:57 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-01-17 15:06 - 2014-01-17 15:06 - 67234966 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 128x.zip
2014-01-17 15:06 - 2014-01-17 15:06 - 36021856 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 64x.zip
2014-01-17 15:01 - 2014-01-17 15:01 - 21042665 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 32x.zip
2014-01-16 18:38 - 2014-01-16 18:40 - 35098272 _____ (Skype Technologies S.A.) C:\Users\Hausaufgaben\Downloads\SkypeSetupFull-6.11.59.exe
2014-01-16 18:34 - 2014-01-16 18:34 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-16 18:34 - 2014-01-16 18:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 18:33 - 2014-01-16 18:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 18:33 - 2014-01-16 18:33 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 18:33 - 2014-01-16 18:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 18:28 - 2014-01-16 18:29 - 29141928 _____ (Oracle Corporation) C:\Users\Hausaufgaben\Downloads\jre-7u51-windows-i586.exe
2014-01-16 18:12 - 2014-01-16 18:17 - 17142553 _____ () C:\Users\Hausaufgaben\Downloads\Template by AdnoArt.rar
2014-01-16 18:12 - 2014-01-16 18:12 - 04087248 _____ () C:\Users\Hausaufgaben\Downloads\GreyScaleGorillaLightKitPro1.lib4d
2014-01-16 18:08 - 2014-01-16 18:09 - 37154174 _____ () C:\Users\Hausaufgaben\Downloads\minecraft 2.lib4d
2014-01-16 17:43 - 2014-01-16 17:43 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\MonkeyJam
2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Selina\Desktop\MonkeyJam.lnk
2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Manh hao\Desktop\MonkeyJam.lnk
2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Mama\Desktop\MonkeyJam.lnk
2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Hausaufgaben\Desktop\MonkeyJam.lnk
2014-01-16 17:42 - 2014-01-16 17:42 - 00000000 ____D () C:\Program Files (x86)\MonkeyJam
2014-01-16 17:42 - 2005-02-27 17:11 - 00424960 _____ () C:\Windows\SysWOW64\wavdest.ax
2014-01-16 17:41 - 2014-01-16 17:41 - 01397331 _____ (GiantScreamingRobotMonkeys ) C:\Users\Hausaufgaben\Downloads\MonkeyJamSetup_3.0.exe
2014-01-16 08:40 - 2014-01-16 08:41 - 37739800 _____ (Google Inc.) C:\Users\Hausaufgaben\Downloads\ChromeStandalone32Setup.exe
2014-01-14 18:32 - 2014-01-14 18:50 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Skype
2014-01-14 18:23 - 2014-01-14 18:23 - 01249424 _____ () C:\Users\Mama\Downloads\Minecraftrig-by-skrab-Edited-by-KBDESIGNZ.blend
2014-01-14 18:23 - 2014-01-14 18:23 - 00000792 _____ () C:\Users\Mama\Desktop\Minecraftrig-by-skrab-Edited-by-KBDESIGNZ.lnk
2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Blender Foundation
2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\Mama\.thumbnails
2014-01-14 18:15 - 2014-01-14 18:15 - 00079569 _____ () C:\Users\Mama\Downloads\MinecraftPlayer.zip
2014-01-14 18:00 - 2014-01-14 18:06 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Minecraft Skin Viewer
2014-01-14 18:00 - 2014-01-14 18:00 - 00140332 _____ () C:\Users\Mama\Downloads\Minecraft Skin Viewer.zip
2014-01-14 18:00 - 2014-01-14 18:00 - 00140332 _____ () C:\Users\Mama\Desktop\Minecraft Skin Viewer.zip
2014-01-14 18:00 - 2014-01-14 18:00 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\WinRAR
2014-01-14 18:00 - 2012-06-11 23:38 - 00302592 _____ () C:\Users\Mama\Desktop\Minecraft Skin Viewer.exe
2014-01-14 17:55 - 2014-01-14 18:07 - 00045056 ____H () C:\Users\Mama\Desktop\photothumb.db
2014-01-14 17:55 - 2014-01-14 18:06 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\PhotoScape
2014-01-08 17:04 - 2014-01-16 18:08 - 00009216 ____H () C:\Users\Hausaufgaben\Desktop\photothumb.db
2014-01-08 17:04 - 2014-01-16 08:44 - 00006144 ____H () C:\Users\Hausaufgaben\Downloads\photothumb.db
2014-01-08 17:03 - 2014-01-08 17:07 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\PhotoScape
2014-01-08 17:03 - 2014-01-08 17:03 - 00001035 _____ () C:\Users\Hausaufgaben\Desktop\PhotoScape.lnk
2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D () C:\Program Files (x86)\PhotoScape
2014-01-08 16:46 - 2014-01-08 16:46 - 21331096 _____ (Mooii) C:\Users\Hausaufgaben\Downloads\PhotoScape_V3.6.5.exe
2014-01-07 17:24 - 2014-01-07 17:26 - 43581054 _____ () C:\Users\Hausaufgaben\Downloads\Tropicraft v5.1.6 for MC v1.6.4.zip
2014-01-07 17:24 - 2014-01-07 17:24 - 02231448 _____ () C:\Users\Hausaufgaben\Downloads\minecraftforge-installer-1.6.4-9.11.1.916.jar
2014-01-07 16:53 - 2014-01-07 16:53 - 00035468 _____ () C:\Users\Hausaufgaben\Downloads\RudoPlays Shader.zip
2014-01-07 16:50 - 2013-12-31 06:14 - 02481492 _____ () C:\Users\Hausaufgaben\Desktop\Minecraft Forge 1.7.2 (doppelklick) .jar
2014-01-07 16:50 - 2013-12-01 01:10 - 02267797 _____ () C:\Users\Hausaufgaben\Desktop\Minecraft Forge 1.6.4 (doppelklick) .jar
2014-01-07 16:49 - 2014-01-07 16:49 - 05104927 _____ () C:\Users\Hausaufgaben\Downloads\Minecraft+Shader+Installation.zip
2014-01-07 16:39 - 2014-01-07 16:39 - 02998217 _____ () C:\Users\Hausaufgaben\Downloads\Trauminsel [Survival].rar
2014-01-07 16:38 - 2014-01-07 16:44 - 00000556 _____ () C:\Users\Hausaufgaben\Desktop\ufgaben.txt
2014-01-03 12:55 - 2014-01-03 12:55 - 05127324 _____ () C:\Users\Hausaufgaben\Downloads\faithful32pack.zip
2014-01-03 12:50 - 2014-01-03 12:51 - 16439432 _____ () C:\Users\Hausaufgaben\Downloads\Davids Detailed 64x64.zip
2014-01-03 12:39 - 2014-01-03 12:41 - 45042000 _____ () C:\Users\Hausaufgaben\Downloads\kop_64_1.7.2.zip
2014-01-03 12:34 - 2014-01-03 12:34 - 01957959 _____ () C:\Users\Hausaufgaben\Downloads\VKNikoVK.zip
2014-01-03 11:56 - 2014-01-03 11:56 - 15635763 _____ () C:\Users\Hausaufgaben\Desktop\New intro Template (Movie Maker).mp4
2014-01-03 11:55 - 2014-01-03 11:56 - 15635763 _____ () C:\Users\Hausaufgaben\Downloads\New intro Template (Movie Maker).mp4
2014-01-02 17:21 - 2014-01-18 15:46 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\.technic
2014-01-02 13:11 - 2014-01-02 13:12 - 00000000 ____D () C:\Users\Manh hao\Desktop\New Server
2014-01-02 11:56 - 2014-01-02 12:03 - 21836334 _____ () C:\Users\Manh hao\Downloads\Server.rar

==================== One Month Modified Files and Folders =======

2014-02-01 10:07 - 2014-02-01 10:06 - 00014267 _____ () C:\Users\Hausaufgaben\Desktop\FRST.txt
2014-02-01 10:06 - 2013-10-26 11:40 - 00000000 ____D () C:\FRST
2014-02-01 10:05 - 2014-02-01 10:05 - 02080256 _____ (Farbar) C:\Users\Hausaufgaben\Downloads\FRST64.exe
2014-02-01 10:05 - 2014-02-01 10:05 - 02080256 _____ (Farbar) C:\Users\Hausaufgaben\Desktop\FRST64.exe
2014-02-01 10:03 - 2013-12-02 19:43 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\Youcam
2014-02-01 10:02 - 2013-02-08 19:35 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-01 10:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-01 10:01 - 2009-07-14 05:51 - 00029908 _____ () C:\Windows\setupact.log
2014-02-01 09:28 - 2013-02-06 17:00 - 01664455 _____ () C:\Windows\WindowsUpdate.log
2014-02-01 09:28 - 2009-07-14 05:45 - 00021648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-01 09:28 - 2009-07-14 05:45 - 00021648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-01 09:25 - 2013-12-02 19:43 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Adobe
2014-02-01 09:01 - 2013-04-02 19:53 - 00000000 ____D () C:\Users\Manh hao\AppData\Roaming\Skype
2014-02-01 08:53 - 2013-10-21 17:15 - 00000000 ____D () C:\Users\Manh hao\AppData\Roaming\.minecraft
2014-02-01 08:49 - 2014-02-01 08:48 - 00000000 ____D () C:\Users\Manh hao\Documents\Bandicam
2014-02-01 08:40 - 2013-02-16 11:52 - 00000000 ____D () C:\Users\Manh hao\AppData\Local\LogMeIn Hamachi
2014-02-01 08:38 - 2013-10-06 13:02 - 00000000 ____D () C:\Users\Manh hao\Documents\Youcam
2014-02-01 08:38 - 2013-05-24 18:26 - 00000000 ____D () C:\Users\Manh hao\AppData\Local\Adobe
2014-02-01 08:37 - 2013-12-02 19:45 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Skype
2014-02-01 08:36 - 2013-12-02 19:47 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Apple Computer
2014-02-01 08:36 - 2013-07-19 22:03 - 00002491 _____ () C:\Users\Public\Desktop\Safari.lnk
2014-02-01 08:36 - 2013-02-08 19:35 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-01 08:33 - 2013-12-02 19:43 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\LogMeIn Hamachi
2014-02-01 07:55 - 2013-06-28 21:37 - 00001301 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2014-02-01 07:38 - 2013-07-06 09:33 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA.job
2014-01-31 21:41 - 2013-12-21 11:26 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft
2014-01-31 21:19 - 2014-01-31 21:19 - 02321335 _____ () C:\Users\Hausaufgaben\Downloads\MineCraft Cracker.zip
2014-01-31 19:56 - 2014-01-31 19:54 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\BigDigServer-v1.3.9
2014-01-31 19:54 - 2014-01-31 19:54 - 49740104 _____ () C:\Users\Hausaufgaben\Desktop\BigDigServer-v1.3.9.zip
2014-01-31 19:54 - 2014-01-31 19:51 - 49740104 _____ () C:\Users\Hausaufgaben\Downloads\BigDigServer-v1.3.9.zip
2014-01-31 19:49 - 2014-01-31 19:36 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\Hexxit_Server_v1.0.10 (1)
2014-01-31 19:43 - 2014-01-31 19:43 - 01666994 _____ () C:\Users\Hausaufgaben\Downloads\Hack-slash-Mine---Server.zip
2014-01-31 19:43 - 2014-01-31 19:43 - 01666994 _____ () C:\Users\Hausaufgaben\Desktop\Hack-slash-Mine---Server.zip
2014-01-31 19:35 - 2014-01-31 19:35 - 48168194 _____ () C:\Users\Hausaufgaben\Desktop\Hexxit_Server_v1.0.10 (1).zip
2014-01-31 19:35 - 2014-01-31 19:33 - 48168194 _____ () C:\Users\Hausaufgaben\Downloads\Hexxit_Server_v1.0.10 (1).zip
2014-01-31 19:26 - 2013-06-22 10:04 - 00000390 _____ () C:\Windows\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005.job
2014-01-30 19:05 - 2014-01-30 19:05 - 00533690 _____ () C:\Users\Hausaufgaben\Downloads\GemsPlus_Forge_1.6.4v2.zip
2014-01-30 19:05 - 2014-01-30 19:05 - 00533690 _____ () C:\Users\Hausaufgaben\Desktop\GemsPlus_Forge_1.6.4v2.zip
2014-01-30 18:41 - 2013-12-27 20:46 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-30 18:39 - 2013-06-22 10:03 - 00000394 _____ () C:\Windows\Tasks\update-sys.job
2014-01-30 17:55 - 2014-01-30 17:55 - 02269863 _____ () C:\Users\Hausaufgaben\Downloads\forge-1.6.4-9.11.1.965-installer.jar
2014-01-30 17:55 - 2014-01-30 17:55 - 02269863 _____ () C:\Users\Hausaufgaben\Desktop\forge-1.6.4-9.11.1.965-installer.jar
2014-01-30 17:55 - 2014-01-30 17:55 - 00044309 _____ () C:\Users\Hausaufgaben\Downloads\Animated_Player_v1.3.0_mc1.6.4.zip
2014-01-29 19:17 - 2014-01-29 19:13 - 163518455 _____ () C:\Users\Hausaufgaben\Downloads\Minecraft_Texture_Pack.zip
2014-01-29 19:02 - 2014-01-29 19:02 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-01-29 19:02 - 2013-02-16 11:51 - 00000926 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-01-29 19:00 - 2014-01-29 19:00 - 00278584 _____ () C:\Windows\Minidump\012914-35895-01.dmp
2014-01-29 19:00 - 2013-02-16 18:36 - 00000000 ____D () C:\Windows\Minidump
2014-01-29 18:59 - 2013-02-16 18:36 - 365338559 _____ () C:\Windows\MEMORY.DMP
2014-01-29 18:14 - 2013-07-06 09:33 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core.job
2014-01-28 19:41 - 2014-01-28 19:41 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Hausaufgaben\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-01-28 19:41 - 2014-01-28 19:41 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Hausaufgaben\Desktop\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-01-28 17:51 - 2013-12-13 15:02 - 00007680 _____ () C:\Users\Hausaufgaben\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-28 17:46 - 2013-12-13 15:02 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\HyperCam3
2014-01-28 17:44 - 2014-01-25 18:29 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\Bandicam
2014-01-28 02:18 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\LogMeIn Hamachi
2014-01-27 17:48 - 2014-01-27 17:48 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Apple
2014-01-26 00:04 - 2014-01-26 00:04 - 00000000 ____D () C:\Users\Papa2\AppData\Local\Google
2014-01-26 00:03 - 2013-03-02 20:07 - 00000000 ____D () C:\Users\Papa
2014-01-26 00:02 - 2013-03-24 20:33 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-01-25 23:59 - 2014-01-25 23:59 - 00065872 _____ () C:\Users\Papa2\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 23:59 - 2014-01-25 23:59 - 00000000 ____D () C:\Users\Papa2\Documents\Youcam
2014-01-25 23:59 - 2014-01-25 23:59 - 00000000 ____D () C:\Users\Papa2\AppData\Local\CyberLink
2014-01-25 23:58 - 2014-01-25 23:58 - 00001425 _____ () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-25 23:58 - 2014-01-25 23:58 - 00000020 ___SH () C:\Users\Papa2\ntuser.ini
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Vorlagen
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Startmenü
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Netzwerkumgebung
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Lokale Einstellungen
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Eigene Dateien
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Druckumgebung
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Documents\Eigene Musik
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Documents\Eigene Bilder
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Local\Verlauf
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Local\Anwendungsdaten
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Anwendungsdaten
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Roaming\Apple Computer
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Roaming\Adobe
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\VirtualStore
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\LogMeIn
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\Adobe
2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2
2014-01-25 22:00 - 2014-01-25 22:00 - 01462548 _____ () C:\Users\Hausaufgaben\Desktop\Intro Für   TodayPlays By ItsZerCrash.mp4
2014-01-25 22:00 - 2014-01-25 21:59 - 01462548 _____ () C:\Users\Hausaufgaben\Downloads\Intro Für   TodayPlays By ItsZerCrash.mp4
2014-01-25 18:43 - 2014-01-25 18:37 - 293186046 _____ () C:\Users\Hausaufgaben\Desktop\javaw 2014-01-25 18-37-53-869.avi
2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Selina\Desktop\Bandicam.lnk
2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Manh hao\Desktop\Bandicam.lnk
2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Mama\Desktop\Bandicam.lnk
2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Hausaufgaben\Desktop\Bandicam.lnk
2014-01-25 18:29 - 2014-01-25 18:29 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\BANDISOFT
2014-01-25 18:29 - 2014-01-25 18:29 - 00000000 ____D () C:\Program Files (x86)\Bandicam
2014-01-25 18:29 - 2013-02-15 20:21 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1
2014-01-25 18:28 - 2014-01-25 18:28 - 07377680 _____ (Bandisoft) C:\Users\Hausaufgaben\Downloads\bdcamsetup193.exe
2014-01-24 15:51 - 2013-02-16 13:48 - 00000000 ____D () C:\Users\Manh hao\AppData\Roaming\uTorrent
2014-01-24 14:46 - 2013-04-04 13:34 - 00000000 ____D () C:\Users\Manh hao\Desktop\Fraps
2014-01-20 19:59 - 2014-01-18 17:24 - 00000776 _____ () C:\Users\Hausaufgaben\Desktop\Beschreibung.txt
2014-01-18 20:51 - 2014-01-18 20:51 - 00004535 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamStudio.cfg
2014-01-18 20:51 - 2014-01-18 20:51 - 00000408 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamShapes.ini
2014-01-18 20:51 - 2014-01-18 20:51 - 00000408 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamLayout.ini
2014-01-18 20:51 - 2014-01-18 20:51 - 00000046 _____ () C:\Users\Hausaufgaben\AppData\Roaming\Camdata.ini
2014-01-18 20:07 - 2014-01-18 20:02 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\My CamStudio Temp Files
2014-01-18 19:52 - 2014-01-18 19:52 - 00000096 _____ () C:\Users\Hausaufgaben\AppData\Roaming\version2.xml
2014-01-18 19:42 - 2014-01-01 16:46 - 00001941 _____ () C:\Users\Hausaufgaben\Desktop\Blender.lnk
2014-01-18 19:21 - 2014-01-18 19:21 - 03577897 _____ () C:\Users\Hausaufgaben\Downloads\Template.rar
2014-01-18 19:21 - 2014-01-18 19:21 - 03577897 _____ () C:\Users\Hausaufgaben\Desktop\Template.rar
2014-01-18 19:09 - 2014-01-18 19:09 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Publish Providers
2014-01-18 19:09 - 2014-01-18 18:57 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Sony
2014-01-18 19:05 - 2014-01-18 18:57 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Sony
2014-01-18 19:01 - 2014-01-18 18:57 - 00000000 ____D () C:\ProgramData\Sony
2014-01-18 18:59 - 2014-01-18 18:59 - 00000000 ____D () C:\Program Files\CamStudio 2.7
2014-01-18 18:58 - 2014-01-18 18:58 - 00001038 _____ () C:\Users\Public\Desktop\Vegas Pro 12.0 (64-bit).lnk
2014-01-18 18:57 - 2014-01-18 18:57 - 00000000 ____D () C:\Program Files\Sony
2014-01-18 18:57 - 2014-01-18 18:57 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-01-18 18:57 - 2014-01-18 18:56 - 11613447 _____ (CamStudio Open Source ) C:\Users\Hausaufgaben\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe
2014-01-18 18:56 - 2014-01-18 18:48 - 243071608 _____ (Sony Creative Software Inc.) C:\Users\Hausaufgaben\Downloads\vegaspro12.0.770.exe
2014-01-18 18:50 - 2014-01-18 18:57 - 28147000 _____ () C:\Users\Hausaufgaben\Desktop\SonyVegasPro.v12.rar
2014-01-18 18:50 - 2014-01-18 18:49 - 28147000 _____ () C:\Users\Hausaufgaben\Downloads\SonyVegasPro.v12.rar
2014-01-18 17:10 - 2014-01-18 17:09 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Minecraft Skin Viewer
2014-01-18 16:32 - 2014-01-18 16:29 - 48168194 _____ () C:\Users\Hausaufgaben\Downloads\Hexxit_Server_v1.0.10.zip
2014-01-18 16:14 - 2013-11-29 19:16 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\INTRO TEMPLATE MOVIE MAKER
2014-01-18 15:47 - 2014-01-18 15:46 - 40343735 _____ () C:\Users\Hausaufgaben\Downloads\Sphax PureBDcraft  64x Hexxit Patch 1.5.2 by werri33.zip
2014-01-18 15:46 - 2014-01-02 17:21 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\.technic
2014-01-18 15:45 - 2014-01-18 15:45 - 02295368 _____ () C:\Users\Hausaufgaben\Desktop\Technic Launcher Cracked.exe
2014-01-18 15:45 - 2014-01-18 15:44 - 02295368 _____ () C:\Users\Hausaufgaben\Downloads\Technic Launcher Cracked.exe
2014-01-18 12:08 - 2013-10-19 17:35 - 00008704 _____ () C:\Users\Manh hao\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-18 11:57 - 2013-10-19 17:15 - 00000000 ____D () C:\Users\Manh hao\Documents\HyperCam3
2014-01-17 17:55 - 2013-04-02 19:53 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-17 17:55 - 2013-04-02 19:53 - 00000000 ____D () C:\ProgramData\Skype
2014-01-17 17:19 - 2014-01-17 17:19 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-01-17 17:18 - 2014-01-17 17:18 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-01-17 16:58 - 2014-01-17 16:43 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-01-17 16:57 - 2014-01-17 16:43 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-01-17 15:06 - 2014-01-17 15:06 - 67234966 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 128x.zip
2014-01-17 15:06 - 2014-01-17 15:06 - 36021856 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 64x.zip
2014-01-17 15:01 - 2014-01-17 15:01 - 21042665 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 32x.zip
2014-01-16 19:03 - 2013-04-20 14:42 - 00000000 ____D () C:\Program Files (x86)\Cinema 4D R12
2014-01-16 18:41 - 2013-04-02 19:53 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-16 18:40 - 2014-01-16 18:38 - 35098272 _____ (Skype Technologies S.A.) C:\Users\Hausaufgaben\Downloads\SkypeSetupFull-6.11.59.exe
2014-01-16 18:34 - 2014-01-16 18:34 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-16 18:33 - 2014-01-16 18:34 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 18:33 - 2014-01-16 18:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 18:33 - 2014-01-16 18:33 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 18:33 - 2014-01-16 18:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 18:29 - 2014-01-16 18:28 - 29141928 _____ (Oracle Corporation) C:\Users\Hausaufgaben\Downloads\jre-7u51-windows-i586.exe
2014-01-16 18:17 - 2014-01-16 18:12 - 17142553 _____ () C:\Users\Hausaufgaben\Downloads\Template by AdnoArt.rar
2014-01-16 18:12 - 2014-01-16 18:12 - 04087248 _____ () C:\Users\Hausaufgaben\Downloads\GreyScaleGorillaLightKitPro1.lib4d
2014-01-16 18:09 - 2014-01-16 18:08 - 37154174 _____ () C:\Users\Hausaufgaben\Downloads\minecraft 2.lib4d
2014-01-16 18:08 - 2014-01-08 17:04 - 00009216 ____H () C:\Users\Hausaufgaben\Desktop\photothumb.db
2014-01-16 17:43 - 2014-01-16 17:43 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\MonkeyJam
2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Selina\Desktop\MonkeyJam.lnk
2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Manh hao\Desktop\MonkeyJam.lnk
2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Mama\Desktop\MonkeyJam.lnk
2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Hausaufgaben\Desktop\MonkeyJam.lnk
2014-01-16 17:42 - 2014-01-16 17:42 - 00000000 ____D () C:\Program Files (x86)\MonkeyJam
2014-01-16 17:41 - 2014-01-16 17:41 - 01397331 _____ (GiantScreamingRobotMonkeys ) C:\Users\Hausaufgaben\Downloads\MonkeyJamSetup_3.0.exe
2014-01-16 17:35 - 2014-01-01 16:46 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\Blender And After effects sullexForMc
2014-01-16 08:44 - 2014-01-08 17:04 - 00006144 ____H () C:\Users\Hausaufgaben\Downloads\photothumb.db
2014-01-16 08:41 - 2014-01-16 08:40 - 37739800 _____ (Google Inc.) C:\Users\Hausaufgaben\Downloads\ChromeStandalone32Setup.exe
2014-01-14 18:50 - 2014-01-14 18:32 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Skype
2014-01-14 18:23 - 2014-01-14 18:23 - 01249424 _____ () C:\Users\Mama\Downloads\Minecraftrig-by-skrab-Edited-by-KBDESIGNZ.blend
2014-01-14 18:23 - 2014-01-14 18:23 - 00000792 _____ () C:\Users\Mama\Desktop\Minecraftrig-by-skrab-Edited-by-KBDESIGNZ.lnk
2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Blender Foundation
2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\Mama\.thumbnails
2014-01-14 18:16 - 2013-03-02 20:05 - 00000000 ____D () C:\Users\Mama
2014-01-14 18:15 - 2014-01-14 18:15 - 00079569 _____ () C:\Users\Mama\Downloads\MinecraftPlayer.zip
2014-01-14 18:07 - 2014-01-14 17:55 - 00045056 ____H () C:\Users\Mama\Desktop\photothumb.db
2014-01-14 18:06 - 2014-01-14 18:00 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Minecraft Skin Viewer
2014-01-14 18:06 - 2014-01-14 17:55 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\PhotoScape
2014-01-14 18:00 - 2014-01-14 18:00 - 00140332 _____ () C:\Users\Mama\Downloads\Minecraft Skin Viewer.zip
2014-01-14 18:00 - 2014-01-14 18:00 - 00140332 _____ () C:\Users\Mama\Desktop\Minecraft Skin Viewer.zip
2014-01-14 18:00 - 2014-01-14 18:00 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\WinRAR
2014-01-14 18:00 - 2013-03-02 20:05 - 00000000 ____D () C:\Users\Mama\AppData\Local\LogMeIn Hamachi
2014-01-14 17:55 - 2013-03-02 20:05 - 00065872 _____ () C:\Users\Mama\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-14 17:06 - 2013-04-28 20:57 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Mining
2014-01-11 08:54 - 2013-12-02 19:42 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Adobe
2014-01-10 19:10 - 2013-10-31 10:44 - 01109677 _____ (TeamExtreme) C:\Users\Manh hao\Desktop\Minecraft Launcher.exe
2014-01-10 19:09 - 2013-04-26 16:33 - 00000000 ____D () C:\Users\Manh hao\minecraft
2014-01-08 17:07 - 2014-01-08 17:03 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\PhotoScape
2014-01-08 17:03 - 2014-01-08 17:03 - 00001035 _____ () C:\Users\Hausaufgaben\Desktop\PhotoScape.lnk
2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D () C:\Program Files (x86)\PhotoScape
2014-01-08 16:46 - 2014-01-08 16:46 - 21331096 _____ (Mooii) C:\Users\Hausaufgaben\Downloads\PhotoScape_V3.6.5.exe
2014-01-07 17:26 - 2014-01-07 17:24 - 43581054 _____ () C:\Users\Hausaufgaben\Downloads\Tropicraft v5.1.6 for MC v1.6.4.zip
2014-01-07 17:24 - 2014-01-07 17:24 - 02231448 _____ () C:\Users\Hausaufgaben\Downloads\minecraftforge-installer-1.6.4-9.11.1.916.jar
2014-01-07 16:53 - 2014-01-07 16:53 - 00035468 _____ () C:\Users\Hausaufgaben\Downloads\RudoPlays Shader.zip
2014-01-07 16:49 - 2014-01-07 16:49 - 05104927 _____ () C:\Users\Hausaufgaben\Downloads\Minecraft+Shader+Installation.zip
2014-01-07 16:44 - 2014-01-07 16:38 - 00000556 _____ () C:\Users\Hausaufgaben\Desktop\ufgaben.txt
2014-01-07 16:39 - 2014-01-07 16:39 - 02998217 _____ () C:\Users\Hausaufgaben\Downloads\Trauminsel [Survival].rar
2014-01-03 12:55 - 2014-01-03 12:55 - 05127324 _____ () C:\Users\Hausaufgaben\Downloads\faithful32pack.zip
2014-01-03 12:51 - 2014-01-03 12:50 - 16439432 _____ () C:\Users\Hausaufgaben\Downloads\Davids Detailed 64x64.zip
2014-01-03 12:41 - 2014-01-03 12:39 - 45042000 _____ () C:\Users\Hausaufgaben\Downloads\kop_64_1.7.2.zip
2014-01-03 12:34 - 2014-01-03 12:34 - 01957959 _____ () C:\Users\Hausaufgaben\Downloads\VKNikoVK.zip
2014-01-03 11:56 - 2014-01-03 11:56 - 15635763 _____ () C:\Users\Hausaufgaben\Desktop\New intro Template (Movie Maker).mp4
2014-01-03 11:56 - 2014-01-03 11:55 - 15635763 _____ () C:\Users\Hausaufgaben\Downloads\New intro Template (Movie Maker).mp4
2014-01-02 17:23 - 2013-10-28 19:16 - 00000000 ____D () C:\Users\Manh hao\Desktop\hhh
2014-01-02 13:12 - 2014-01-02 13:11 - 00000000 ____D () C:\Users\Manh hao\Desktop\New Server
2014-01-02 12:03 - 2014-01-02 11:56 - 21836334 _____ () C:\Users\Manh hao\Downloads\Server.rar

Files to move or delete:
====================
C:\Users\Hausaufgaben\AppData\Roaming\CamLayout.ini
C:\Users\Hausaufgaben\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\Hausaufgaben\AppData\Local\temp\Creative Cloud Helper.exe
C:\Users\Hausaufgaben\AppData\Local\temp\CreativeCloudSet-Up.exe
C:\Users\Mama\AppData\Local\temp\SkypeSetup.exe
C:\Users\Manh hao\AppData\Local\temp\Execute2App.exe
C:\Users\Manh hao\AppData\Local\temp\i4jdel0.exe
C:\Users\Manh hao\AppData\Local\temp\jansi-32-git-Bukkit-1.6.2-R1.0-9-g9cd35ee-b2908jnks.dll
C:\Users\Manh hao\AppData\Local\temp\jansi-64-git-Bukkit-1.5.2-R1.0-27-gdc25312-b2815jnks.dll
C:\Users\Manh hao\AppData\Local\temp\jansi-64-git-Bukkit-1.6.2-R1.0-9-g9cd35ee-b2908jnks.dll
C:\Users\Manh hao\AppData\Local\temp\jansi-64-git-Bukkit-1.6.4-R2.0-26-g31d7c5f-b2943jnks.dll
C:\Users\Manh hao\AppData\Local\temp\jwq2ott-.dll
C:\Users\Manh hao\AppData\Local\temp\Kies2RemoveAll.exe
C:\Users\Manh hao\AppData\Local\temp\msvcp90.dll
C:\Users\Manh hao\AppData\Local\temp\msvcr90.dll
C:\Users\Manh hao\AppData\Local\temp\SkypeSetup.exe
C:\Users\Selina\AppData\Local\temp\i4jdel0.exe
C:\Users\Selina\AppData\Local\temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-25 21:11

==================== End Of Log ============================
         
--- --- ---

--- --- ---





und hier Die Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-10-2013
Ran by Manh hao at 2013-10-26 12:44:32
Running from C:\Users\Manh hao\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

µTorrent (x32 Version: 3.3.0.29111)
7-Zip 9.20 (x32)
Adobe Creative Cloud (x32 Version: 2.0.0.183)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.202)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Advanced System Protector (x32 Version: 2.1.1000.10844)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
AppsHat Mobile Apps (HKCU Version: 1.0.0.0)
Ask Toolbar (x32 Version: 1.15.18.0)
Atheros WiFi Driver Installation (x32 Version: 3.0)
Avira Free Antivirus (x32 Version: 13.0.0.3185)
Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.4.37268)
Bandicam (x32 Version: 1.8.6.321)
Bandisoft MPEG-1 Decoder (x32)
BitGuard (x32)
Blender (Version: 2.66a)
Bonjour (Version: 3.0.0.10)
Bundled software uninstaller (x32)
Canon MX510 series MP Drivers
Cheat Engine 6.2 (x32)
Cinema 4D version R12 (x32 Version: R12)
Craften Terminal 3.3.4897.28268 (x32 Version: 3.3.4897.28268)
CyberLink YouCam 5 (x32 Version: 5.0.1129)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
FilesFrog Update Checker (x32)
Fotogalerie (x32 Version: 16.4.3508.0205)
Fraps (x32)
Free YouTube Download Manager (x32 Version: 1.0.0.4)
Game Booster 3 (x32 Version: 3.4)
Google Chrome (x32 Version: 30.0.1599.101)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
Google Update Helper (x32 Version: 1.3.21.165)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Grand Theft Auto IV (x32 Version: 1.00.0000)
HyperCam 3 (x32 Version: 3.5.1211.29)
iDemo (x32 Version: 1.3.1)
iExplorer 3.1.0.2 (x32)
iFunbox (v2.1.2228.731), iFunbox DevTeam (x32 Version: v2.1.2228.731)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)
ipswDownloader 2.0 (x32 Version: 2.0)
iTunes (Version: 11.0.5.5)
Java 7 Update 15 (x32 Version: 7.0.150)
Java 7 Update 17 (64-bit) (Version: 7.0.170)
Java Auto Updater (x32 Version: 2.1.9.0)
LogMeIn Hamachi (x32 Version: 2.2.0.58)
McAfee Security Scan Plus (Version: 3.8.130.8)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3508.0205)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
No-IP DUC (x32 Version: 4.0.1)
Notepad++ (x32 Version: 6.3.1)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
Photo Common (x32 Version: 16.4.3508.0205)
Photo Gallery (x32 Version: 16.4.3508.0205)
Pokémon Trading Card Game Online (x32 Version: 1.0.0)
QuickShare (x32 Version: 1.146.60.12450)
QuickTime (x32 Version: 7.72.80.56)
Reflection (x32 Version: 1.0.1)
Reflector (Version: 1.2.3)
ROBLOX Player (x32)
Rockstar Games Social Club (x32 Version: 1.00.0000)
Safari (x32 Version: 5.34.57.2)
Samsung Kies (x32 Version: 2.6.0.13091_9)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)
Skype™ 6.7 (x32 Version: 6.7.102)
TeamSpeak 3 Client (HKCU Version: 3.0.10)
TubeBox Smartbar (x32 Version: 1.6.1.864)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205)
Windows Live Essentials (x32 Version: 16.4.3508.0205)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3508.0205)
Windows Live Messenger (x32 Version: 16.4.3508.0205)
Windows Live Photo Common (x32 Version: 16.4.3508.0205)
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)
Windows Live SOXE (x32 Version: 16.4.3508.0205)
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)
Windows Live UX Platform (x32 Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)
WinPcap 4.1.3 (x32 Version: 4.1.0.2980)
WinRAR 4.20 (64-bit) (Version: 4.20.0)

==================== Restore Points  =========================

12-10-2013 16:53:53 Konfiguriert Grand Theft Auto IV
13-10-2013 08:27:28 Windows Modules Installer
19-10-2013 07:46:45 OpenOffice 4.0.1 wird installiert

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-10-26 10:10 - 00010584 ____A C:\Windows\system32\Drivers\etc\hosts
198.71.80.192 www.imeetzu.com
198.71.80.192 imeetzu.com
198.71.80.192 www.omegle.com
198.71.80.192 omegle.com
198.71.80.192 www.runescape.com
198.71.80.192 runescape.com
198.71.80.192 google.com
198.71.80.192 www.google.ae
198.71.80.192 www.google.com.af
198.71.80.192 www.google.com.ag
198.71.80.192 www.google.off.ai
198.71.80.192 www.google.am
198.71.80.192 www.google.com.ar
198.71.80.192 www.google.as
198.71.80.192 www.google.at
198.71.80.192 www.google.com.au
198.71.80.192 www.google.az
198.71.80.192 www.google.ba
198.71.80.192 www.google.com.bd
198.71.80.192 www.google.be
198.71.80.192 www.google.bg
198.71.80.192 www.google.com.bh
198.71.80.192 www.google.bi
198.71.80.192 www.google.com.bo
198.71.80.192 www.google.com.br
198.71.80.192 www.google.bs
198.71.80.192 www.google.co.bw
198.71.80.192 www.google.com.bz
198.71.80.192 www.google.ca

There are 335 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {006B2AF6-5F24-4A60-85AB-33589BA0C86E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2013-09-27] ()
Task: {0B377082-372A-460F-8E01-A0443EECB7B2} - System32\Tasks\{3C6C8AAD-79F6-4B6F-B3C9-D3D8F24CE673} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1
Task: {1D206C2B-673C-4CBD-A2F0-09262EA4756C} - System32\Tasks\{5FBB87BF-6D59-4991-B95A-33AA1363574D} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1
Task: {22B6E24A-2B5C-4430-B61A-A22AE3B7B819} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2823766941-1517505164-3398274235-1003
Task: {2450BF80-EECF-4ED9-A9C4-B841EFD05086} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-08-31] ()
Task: {2A4C69CC-04D5-4D65-8DB5-5B667BD8306F} - System32\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2013-09-27] ()
Task: {46D402CF-13CD-44D6-A19E-0699CC9B120A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.)
Task: {46DEF105-2B4D-496C-A89F-071380058FEC} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: {571EE918-E355-4470-B875-32E398691DDB} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: {589BC977-4536-4E72-A09B-C714B11DFE1D} - System32\Tasks\Windows Update Check - 0x0D1402B8 => C:\ProgramData\AppleDev0\rzsbkotiu.exe [2013-04-26] (Elite Bypassers)
Task: {59BEBB7E-3759-4212-8B0F-288FB729F4A7} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-02-08] ()
Task: {676B9DBE-15B7-4789-A644-51C0A19B7870} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.)
Task: {686BF8D5-6E15-468B-B131-4E9F6375DFF2} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-10-23] ()
Task: {733E9FD4-B414-4277-AC0B-02DDF1DBD2C3} - System32\Tasks\{3CC28608-C036-41C3-98A2-546BB03EA941} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1
Task: {A4CFEA5C-F843-4156-8EA9-00275B3CEED0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-08] (Google Inc.)
Task: {AA2C5F6F-B6FF-44A7-ABE9-4475D00EB6C9} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Mama => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {AC216A19-31E5-4B12-B0D8-8F9F4C544CDF} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Papa => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {AC4F3E75-1166-4560-A71B-FC3A3BAB29EE} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Manh hao\AppData\Local\FilesFrog Update Checker\update_checker.exe [2013-10-17] (Somoto)
Task: {AF7B0A45-0D7F-4724-AB58-6E6DA4BADDA8} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: {B46EEE2A-E542-4607-94BC-0CAD2F2838F8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-08] (Google Inc.)
Task: {B6C79ADC-A164-401A-83AF-E8B3CBE8BB76} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-10-22] ()
Task: {C9E8F188-B3E9-4E33-83F0-22A60EB2BD71} - System32\Tasks\DealPly => C:\Users\Manh hao\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-02-27] ()
Task: {CD872EF5-4893-4078-9E29-8261E6F05B15} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe
Task: {D19918A2-F1C4-4808-B2B0-045E9C516599} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Manh hao => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {DA07D46A-4A59-4298-8081-6B92C75417C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DC563907-3844-4FCD-BFF2-09C45F85FD6E} - System32\Tasks\{D56DCA6A-FCA2-48D3-837B-5690EEC3AADC} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&amp;page=tsProgressBar
Task: {DC5950C9-FE5A-4BFB-BB9F-F1F4A4158A85} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Selina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {E0532C83-0F74-42AA-BE8D-893D8FB01598} - System32\Tasks\{25703773-878B-449E-9B99-1BE5B8352EFA} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&amp;page=tsInstall
Task: {E0DDF08F-C648-4C94-9437-C99D03267068} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-04-09] (Systweak)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core.job => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA.job => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: C:\Windows\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Loaded Modules (whitelisted) =============

2013-06-20 00:45 - 2013-06-20 00:45 - 03317616 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-12-14 03:42 - 2012-12-14 03:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Generic Bluetooth Adapter
Description: Generic Bluetooth Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: GenericAdapter
Service: BTHUSB
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Event log errors: =========================

Application errors:
==================
Error: (10/26/2013 00:34:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/26/2013 00:33:01 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei QueryInterface(57) konnte nicht geladen werden.
Fehlercode: 0x1

Error: (10/26/2013 10:44:03 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: schtasks.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce792c3
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017966f
ID des fehlerhaften Prozesses: 0xdc0
Startzeit der fehlerhaften Anwendung: 0xschtasks.exe0
Pfad der fehlerhaften Anwendung: schtasks.exe1
Pfad des fehlerhaften Moduls: schtasks.exe2
Berichtskennung: schtasks.exe3

Error: (10/26/2013 10:44:02 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: schtasks.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce792c3
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017966f
ID des fehlerhaften Prozesses: 0xdc0
Startzeit der fehlerhaften Anwendung: 0xschtasks.exe0
Pfad der fehlerhaften Anwendung: schtasks.exe1
Pfad des fehlerhaften Moduls: schtasks.exe2
Berichtskennung: schtasks.exe3

Error: (10/26/2013 10:44:00 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: schtasks.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce792c3
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017966f
ID des fehlerhaften Prozesses: 0x1b88
Startzeit der fehlerhaften Anwendung: 0xschtasks.exe0
Pfad der fehlerhaften Anwendung: schtasks.exe1
Pfad des fehlerhaften Moduls: schtasks.exe2
Berichtskennung: schtasks.exe3

Error: (10/26/2013 10:43:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: schtasks.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce792c3
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017966f
ID des fehlerhaften Prozesses: 0x1b88
Startzeit der fehlerhaften Anwendung: 0xschtasks.exe0
Pfad der fehlerhaften Anwendung: schtasks.exe1
Pfad des fehlerhaften Moduls: schtasks.exe2
Berichtskennung: schtasks.exe3

Error: (10/26/2013 10:42:05 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cmd.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78e2b
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017966f
ID des fehlerhaften Prozesses: 0x131c
Startzeit der fehlerhaften Anwendung: 0xcmd.exe0
Pfad der fehlerhaften Anwendung: cmd.exe1
Pfad des fehlerhaften Moduls: cmd.exe2
Berichtskennung: cmd.exe3

Error: (10/26/2013 10:42:02 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cmd.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78e2b
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017966f
ID des fehlerhaften Prozesses: 0x131c
Startzeit der fehlerhaften Anwendung: 0xcmd.exe0
Pfad der fehlerhaften Anwendung: cmd.exe1
Pfad des fehlerhaften Moduls: cmd.exe2
Berichtskennung: cmd.exe3

Error: (10/26/2013 10:41:58 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: timeout.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc013
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017966f
ID des fehlerhaften Prozesses: 0x898
Startzeit der fehlerhaften Anwendung: 0xtimeout.exe0
Pfad der fehlerhaften Anwendung: timeout.exe1
Pfad des fehlerhaften Moduls: timeout.exe2
Berichtskennung: timeout.exe3

Error: (10/26/2013 10:41:55 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: timeout.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc013
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017966f
ID des fehlerhaften Prozesses: 0x898
Startzeit der fehlerhaften Anwendung: 0xtimeout.exe0
Pfad der fehlerhaften Anwendung: timeout.exe1
Pfad des fehlerhaften Moduls: timeout.exe2
Berichtskennung: timeout.exe3


System errors:
=============
Error: (10/26/2013 00:35:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.

Error: (10/26/2013 00:33:57 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (10/26/2013 00:33:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1066

Error: (10/26/2013 00:33:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%310.

Error: (10/26/2013 00:32:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BitGuard" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (10/26/2013 00:32:44 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BitGuard erreicht.

Error: (10/26/2013 00:32:33 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (10/26/2013 10:41:08 AM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (10/26/2013 10:08:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BitGuard" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (10/26/2013 10:08:59 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BitGuard erreicht.


Microsoft Office Sessions:
=========================
Error: (10/26/2013 00:34:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/26/2013 00:33:01 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: QueryInterface(57)0x1

Error: (10/26/2013 10:44:03 AM) (Source: Application Error)(User: )
Description: schtasks.exe6.1.7601.175144ce792c3bitguard.dll2.6.1694.2465253f78ec00000050017966fdc001ced22785347ff9C:\Windows\SysWOW64\schtasks.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dllc39ab62e-3e1a-11e3-92c2-efa5c2ef6c7e

Error: (10/26/2013 10:44:02 AM) (Source: Application Error)(User: )
Description: schtasks.exe6.1.7601.175144ce792c3bitguard.dll2.6.1694.2465253f78ec00000050017966fdc001ced22785347ff9C:\Windows\SysWOW64\schtasks.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dllc3025e1d-3e1a-11e3-92c2-efa5c2ef6c7e

Error: (10/26/2013 10:44:00 AM) (Source: Application Error)(User: )
Description: schtasks.exe6.1.7601.175144ce792c3bitguard.dll2.6.1694.2465253f78ec00000050017966f1b8801ced22782490fe3C:\Windows\SysWOW64\schtasks.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dllc1f7c3fe-3e1a-11e3-92c2-efa5c2ef6c7e

Error: (10/26/2013 10:43:57 AM) (Source: Application Error)(User: )
Description: schtasks.exe6.1.7601.175144ce792c3bitguard.dll2.6.1694.2465253f78ec00000050017966f1b8801ced22782490fe3C:\Windows\SysWOW64\schtasks.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dllc059948e-3e1a-11e3-92c2-efa5c2ef6c7e

Error: (10/26/2013 10:42:05 AM) (Source: Application Error)(User: )
Description: cmd.exe6.1.7601.175144ce78e2bbitguard.dll2.6.1694.2465253f78ec00000050017966f131c01ced2273dace21cC:\Windows\SysWOW64\cmd.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll7d9255de-3e1a-11e3-92c2-efa5c2ef6c7e

Error: (10/26/2013 10:42:02 AM) (Source: Application Error)(User: )
Description: cmd.exe6.1.7601.175144ce78e2bbitguard.dll2.6.1694.2465253f78ec00000050017966f131c01ced2273dace21cC:\Windows\SysWOW64\cmd.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll7b9c1384-3e1a-11e3-92c2-efa5c2ef6c7e

Error: (10/26/2013 10:41:58 AM) (Source: Application Error)(User: )
Description: timeout.exe6.1.7600.163854a5bc013bitguard.dll2.6.1694.2465253f78ec00000050017966f89801ced2273757d902C:\Windows\SysWOW64\timeout.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll79469a1f-3e1a-11e3-92c2-efa5c2ef6c7e

Error: (10/26/2013 10:41:55 AM) (Source: Application Error)(User: )
Description: timeout.exe6.1.7600.163854a5bc013bitguard.dll2.6.1694.2465253f78ec00000050017966f89801ced2273757d902C:\Windows\SysWOW64\timeout.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll773628a3-3e1a-11e3-92c2-efa5c2ef6c7e


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 4043.86 MB
Available physical RAM: 2250.54 MB
Total Pagefile: 8085.9 MB
Available Pagefile: 5970.65 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:283.89 GB) (Free:93.66 GB) NTFS
Drive e: (GTA IV Disc 1) (CDROM) (Total:7.03 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 82E28B67)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=284 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Oh ich bemerk grade dass ich die falsche Addition gepostet habe hier ist die neue
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 03
Ran by Hausaufgaben at 2014-02-01 12:42:41
Running from C:\Users\Hausaufgaben\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

µTorrent (x32 Version: 3.3.0.29111 - BitTorrent Inc.)
7-Zip 9.20 (x32 Version:  - )
Adobe After Effects CC (x32 Version: 12.1 - Adobe Systems Incorporated)
Adobe Creative Cloud (x32 Version: 2.3.0.322 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.202 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Apowersoft kostenloser Bildschirmrekorder V1.2.4 (x32 Version: 1.2.4 - Apowersoft)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Atheros WiFi Driver Installation (x32 Version: 3.0 - Atheros)
Avira Free Antivirus (x32 Version: 13.0.0.3185 - Avira)
Bandicam (x32 Version: 1.9.3.492 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (x32 Version:  - Bandisoft.com)
Blender (Version: 2.69 - Blender Foundation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
CamStudio 2.7.2 (Version: 2.7.2 - CamStudio Open Source)
Canon MX510 series MP Drivers (Version:  - )
Cheat Engine 6.2 (x32 Version:  - Dark Byte)
Cinema 4D version R12 (x32 Version: R12 - Salat Production)
Craften Terminal 3.3.4897.28268 (x32 Version: 3.3.4897.28268 - Craften Dev Team)
CyberLink YouCam 5 (x32 Version: 5.0.1129 - CyberLink Corp.)
CyberLink YouCam 5 (x32 Version: 5.0.1129 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287 - Skype Limited)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fraps (x32 Version:  - )
Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec)
Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec) Hidden
Game Booster 3 (x32 Version: 3.4 - IObit)
Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto IV (x32 Version: 1.00.0000 - Rockstar Games)
HyperCam 3 (x32 Version: 3.5.1211.29 - Solveig Multimedia)
iClone v4.3 PRO (x32 Version: 4.3.1929.1 - Reallusion Inc.)
iDemo (x32 Version: 1.3.1 - Plutinosoft LLC)
iExplorer 3.1.0.2 (x32 Version:  - Macroplant LLC)
iFunbox (v2.1.2228.731), iFunbox DevTeam (x32 Version: v2.1.2228.731 - )
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932 - Intel Corporation)
ipswDownloader 2.0 (x32 Version: 2.0 - Sergey 'iOrange' Kudlay)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 17 (64-bit) (Version: 7.0.170 - Oracle)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
LogMeIn Hamachi (x32 Version: 2.2.0.114 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.114 - LogMeIn, Inc.) Hidden
McAfee Security Scan Plus (Version: 3.8.130.8 - McAfee, Inc.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Minecraft1.7.2 (x32 Version:  - )
MonkeyJam 3_050529 (x32 Version:  - GiantScreamingRobotMonkeys)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.0 - Mozilla)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
No-IP DUC (x32 Version: 4.0.1 - Vitalwerks Internet Solutions LLC)
Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0 - Nokia)
Nokia Suite (x32 Version: 3.8.48.0 - Nokia)
Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden
Notepad++ (x32 Version: 6.3.1 - )
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
PC Connectivity Solution (x32 Version: 12.0.109.0 - Nokia)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
PhotoScape (x32 Version:  - )
Pokémon Trading Card Game Online (x32 Version: 1.0.0 - The Pokémon Company International)
QuickShare (x32 Version: 1.146.60.12450 - Linkury Inc.) <==== ATTENTION
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Reflection (x32 Version: 1.0.1 - Squirrels)
Reflector (Version: 1.2.3 - Squirrels)
Reflector (Version: 1.3.3.1 - Squirrels)
ROBLOX Player (x32 Version:  - ROBLOX Corporation)
Rockstar Games Social Club (x32 Version: 1.00.0000 - Rockstar Games)
Safari (x32 Version: 5.34.57.2 - Apple Inc.)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synthesia (x32 Version: 9 - Synthesia LLC)
TubeBox Smartbar (x32 Version: 1.6.1.864 - ReSoft Ltd.) <==== ATTENTION
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Vegas Pro 12.0 (64-bit) (Version: 12.0.770 - Sony)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinPcap 4.1.3 (x32 Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 4.20 (64-bit) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

12-10-2013 16:53:53 Konfiguriert Grand Theft Auto IV
13-10-2013 08:27:28 Windows Modules Installer
19-10-2013 07:46:45 OpenOffice 4.0.1 wird installiert
26-10-2013 16:23:13 ComboFix created restore point
20-11-2013 17:55:05 Installed Reflector
05-12-2013 18:24:02 Gerätetreiber-Paketinstallation: Apowersoft Audio-, Video- und Gamecontroller
20-12-2013 20:01:36 Installiert iClone
16-01-2014 17:30:18 Installed Java 7 Update 51
25-01-2014 20:19:16 Geplanter Prüfpunkt
01-02-2014 11:35:26 Removed Apple Application Support

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-01-31 21:19 - 00010584 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {006B2AF6-5F24-4A60-85AB-33589BA0C86E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2013-09-27] ()
Task: {0B377082-372A-460F-8E01-A0443EECB7B2} - System32\Tasks\{3C6C8AAD-79F6-4B6F-B3C9-D3D8F24CE673} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Ultimate Account hacker - V 1.5.1.exe
Task: {1D206C2B-673C-4CBD-A2F0-09262EA4756C} - System32\Tasks\{5FBB87BF-6D59-4991-B95A-33AA1363574D} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Ultimate Account hacker - V 1.5.1.exe
Task: {2450BF80-EECF-4ED9-A9C4-B841EFD05086} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-08-31] ()
Task: {2A4C69CC-04D5-4D65-8DB5-5B667BD8306F} - System32\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2013-09-27] ()
Task: {46D402CF-13CD-44D6-A19E-0699CC9B120A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.)
Task: {46DEF105-2B4D-496C-A89F-071380058FEC} - \RegClean Pro_DEFAULT No Task File
Task: {571EE918-E355-4470-B875-32E398691DDB} - \RegClean Pro_UPDATES No Task File
Task: {589BC977-4536-4E72-A09B-C714B11DFE1D} - System32\Tasks\Windows Update Check - 0x0D1402B8 => C:\ProgramData\AppleDev0\rzsbkotiu.exe [2013-10-26] (Elite Bypassers)
Task: {59BEBB7E-3759-4212-8B0F-288FB729F4A7} - \Scheduled Update for Ask Toolbar No Task File
Task: {676B9DBE-15B7-4789-A644-51C0A19B7870} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.)
Task: {686BF8D5-6E15-468B-B131-4E9F6375DFF2} - \Software Updater Ui No Task File
Task: {733E9FD4-B414-4277-AC0B-02DDF1DBD2C3} - System32\Tasks\{3CC28608-C036-41C3-98A2-546BB03EA941} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Ultimate Account hacker - V 1.5.1.exe
Task: {A2D387CA-C392-4B99-9069-0D2656F6C6AD} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Manh hao => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {A4CFEA5C-F843-4156-8EA9-00275B3CEED0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-08] (Google Inc.)
Task: {AF7B0A45-0D7F-4724-AB58-6E6DA4BADDA8} - \RegClean Pro No Task File
Task: {B46EEE2A-E542-4607-94BC-0CAD2F2838F8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-08] (Google Inc.)
Task: {B6C79ADC-A164-401A-83AF-E8B3CBE8BB76} - \Software Updater No Task File
Task: {C9E8F188-B3E9-4E33-83F0-22A60EB2BD71} - \DealPly No Task File
Task: {CD872EF5-4893-4078-9E29-8261E6F05B15} - \Express FilesUpdate No Task File
Task: {DA07D46A-4A59-4298-8081-6B92C75417C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DC563907-3844-4FCD-BFF2-09C45F85FD6E} - System32\Tasks\{D56DCA6A-FCA2-48D3-837B-5690EEC3AADC} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&amp;page=tsProgressBar
Task: {E0532C83-0F74-42AA-BE8D-893D8FB01598} - System32\Tasks\{25703773-878B-449E-9B99-1BE5B8352EFA} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&amp;page=tsInstall
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core.job => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA.job => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Loaded Modules (whitelisted) =============

2013-12-13 12:20 - 2013-12-13 12:20 - 03359600 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2009-08-23 18:24 - 2009-08-23 18:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-02-01 11:35 - 2014-02-01 11:35 - 00310272 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\lwjgl64.dll
2014-02-01 11:35 - 2014-02-01 11:35 - 00653832 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\avutil-ttv-51.dll
2014-02-01 11:35 - 2014-02-01 11:35 - 00361103 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\swresample-ttv-0.dll
2014-02-01 11:35 - 2014-02-01 11:35 - 00688161 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\libmp3lame-ttv.dll
2014-02-01 11:35 - 2014-02-01 11:35 - 01133056 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\twitchsdk.dll
2014-02-01 11:35 - 2014-02-01 11:35 - 00382464 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\OpenAL64.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-05-25 07:44 - 2012-04-26 13:38 - 20758016 _____ () C:\Program Files (x86)\i-Funbox DevTeam\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Generic Bluetooth Adapter
Description: Generic Bluetooth Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: GenericAdapter
Service: BTHUSB
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Event log errors: =========================

Application errors:
==================
Error: (02/01/2014 10:03:22 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/01/2014 10:02:30 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hamachi-2-ui.exe, Version: 2.2.0.114, Zeitstempel: 0x52e10b6b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000002b
ID des fehlerhaften Prozesses: 0xb20
Startzeit der fehlerhaften Anwendung: 0xhamachi-2-ui.exe0
Pfad der fehlerhaften Anwendung: hamachi-2-ui.exe1
Pfad des fehlerhaften Moduls: hamachi-2-ui.exe2
Berichtskennung: hamachi-2-ui.exe3

Error: (02/01/2014 10:02:26 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Creative Cloud.exe, Version: 2.3.0.322, Zeitstempel: 0x52b21807
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000002c
ID des fehlerhaften Prozesses: 0xba4
Startzeit der fehlerhaften Anwendung: 0xCreative Cloud.exe0
Pfad der fehlerhaften Anwendung: Creative Cloud.exe1
Pfad des fehlerhaften Moduls: Creative Cloud.exe2
Berichtskennung: Creative Cloud.exe3

Error: (02/01/2014 10:02:14 AM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei QueryInterface(57) konnte nicht geladen werden.
Fehlercode: 0x1

Error: (02/01/2014 09:25:22 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/01/2014 09:24:53 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hamachi-2-ui.exe, Version: 2.2.0.114, Zeitstempel: 0x52e10b6b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000002c
ID des fehlerhaften Prozesses: 0xc68
Startzeit der fehlerhaften Anwendung: 0xhamachi-2-ui.exe0
Pfad der fehlerhaften Anwendung: hamachi-2-ui.exe1
Pfad des fehlerhaften Moduls: hamachi-2-ui.exe2
Berichtskennung: hamachi-2-ui.exe3

Error: (02/01/2014 09:24:15 AM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei QueryInterface(57) konnte nicht geladen werden.
Fehlercode: 0x1

Error: (02/01/2014 08:42:52 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: jusched.exe, Version: 2.1.9.8, Zeitstempel: 0x51d2fcd3
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x7ef0ced0
ID des fehlerhaften Prozesses: 0xb34
Startzeit der fehlerhaften Anwendung: 0xjusched.exe0
Pfad der fehlerhaften Anwendung: jusched.exe1
Pfad des fehlerhaften Moduls: jusched.exe2
Berichtskennung: jusched.exe3

Error: (02/01/2014 08:37:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: APSDaemon.exe, Version: 2.2.9.2, Zeitstempel: 0x516e136b
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x76a93475
ID des fehlerhaften Prozesses: 0x12f0
Startzeit der fehlerhaften Anwendung: 0xAPSDaemon.exe0
Pfad der fehlerhaften Anwendung: APSDaemon.exe1
Pfad des fehlerhaften Moduls: APSDaemon.exe2
Berichtskennung: APSDaemon.exe3

Error: (02/01/2014 08:37:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rzsbkotiu.exe, Version: 1.3.3.7, Zeitstempel: 0x5164f32a
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x76a93475
ID des fehlerhaften Prozesses: 0x104c
Startzeit der fehlerhaften Anwendung: 0xrzsbkotiu.exe0
Pfad der fehlerhaften Anwendung: rzsbkotiu.exe1
Pfad des fehlerhaften Moduls: rzsbkotiu.exe2
Berichtskennung: rzsbkotiu.exe3


System errors:
=============
Error: (02/01/2014 10:03:06 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (02/01/2014 10:02:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1066

Error: (02/01/2014 10:02:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%310.

Error: (02/01/2014 10:01:42 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/01/2014 09:25:21 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (02/01/2014 09:24:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1066

Error: (02/01/2014 09:24:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%310.

Error: (02/01/2014 09:23:42 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/01/2014 08:30:40 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (02/01/2014 08:30:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1066


Microsoft Office Sessions:
=========================
Error: (02/01/2014 10:03:22 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/01/2014 10:02:30 AM) (Source: Application Error)(User: )
Description: hamachi-2-ui.exe2.2.0.11452e10b6bntdll.dll6.1.7601.1822951fb1072c00000050000002bb2001cf1f2c50ee9612C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exeC:\Windows\SysWOW64\ntdll.dll944e5c4f-8b1f-11e3-b2da-ac7c4a688e7e

Error: (02/01/2014 10:02:26 AM) (Source: Application Error)(User: )
Description: Creative Cloud.exe2.3.0.32252b21807ntdll.dll6.1.7601.1822951fb1072c00000050000002cba401cf1f2c4bbe5639C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exeC:\Windows\SysWOW64\ntdll.dll917124a6-8b1f-11e3-b2da-ac7c4a688e7e

Error: (02/01/2014 10:02:14 AM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: QueryInterface(57)0x1

Error: (02/01/2014 09:25:22 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/01/2014 09:24:53 AM) (Source: Application Error)(User: )
Description: hamachi-2-ui.exe2.2.0.11452e10b6bntdll.dll6.1.7601.1822951fb1072c00000050000002cc6801cf1f2709cb0536C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exeC:\Windows\SysWOW64\ntdll.dll52bc3dfd-8b1a-11e3-b2e0-d4ee8b5e2b7e

Error: (02/01/2014 09:24:15 AM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: QueryInterface(57)0x1

Error: (02/01/2014 08:42:52 AM) (Source: Application Error)(User: )
Description: jusched.exe2.1.9.851d2fcd3unknown0.0.0.000000000c00000057ef0ced0b3401cf1f2082818ca0C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exeunknown73d9acb1-8b14-11e3-98f8-f398e3f4697d

Error: (02/01/2014 08:37:57 AM) (Source: Application Error)(User: )
Description: APSDaemon.exe2.2.9.2516e136bunknown0.0.0.000000000c000000576a9347512f001cf1f208260395cC:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exeunknownc428396a-8b13-11e3-98f8-f398e3f4697d

Error: (02/01/2014 08:37:57 AM) (Source: Application Error)(User: )
Description: rzsbkotiu.exe1.3.3.75164f32aunknown0.0.0.000000000c000000576a93475104c01cf1f20823a2357C:\ProgramData\AppleDev0\rzsbkotiu.exeunknownc428125a-8b13-11e3-98f8-f398e3f4697d


CodeIntegrity Errors:
===================================
  Date: 2013-10-26 18:41:05.648
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-10-26 18:41:05.601
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 62%
Total physical RAM: 4043.86 MB
Available physical RAM: 1527.94 MB
Total Pagefile: 8085.9 MB
Available Pagefile: 5398.9 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:283.89 GB) (Free:47.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 82E28B67)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=284 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
__________________

Alt 02.02.2014, 06:42   #4
schrauber
/// the machine
/// TB-Ausbilder
 

HILFE Youtube und google gegen Schuhwebsite ausgetauscht - Standard

HILFE Youtube und google gegen Schuhwebsite ausgetauscht



Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu HILFE Youtube und google gegen Schuhwebsite ausgetauscht
google, heulen, heute, hilfe, japanisch, youtube, öffnen




Ähnliche Themen: HILFE Youtube und google gegen Schuhwebsite ausgetauscht


  1. Kann nur Facebook, Google, Youtube und Wikipedia öffnen
    Netzwerk und Hardware - 23.07.2015 (3)
  2. Windows 7: Öffnen von Websiten wie Google, Youtube, etc. stößt auf Fehlermeldung
    Log-Analyse und Auswertung - 08.12.2014 (10)
  3. Windows 8: Das Öffnen von Werbungen mit Google/YouTube-Suche
    Log-Analyse und Auswertung - 09.07.2014 (17)
  4. Verschiedene Browser öffnen nur Facebook, Google & YouTube
    Plagegeister aller Art und deren Bekämpfung - 23.06.2014 (17)
  5. Kann nur noch Facebook Youtube und google öffnen :/
    Plagegeister aller Art und deren Bekämpfung - 04.06.2014 (3)
  6. SSL Fehler - Zugriff auf Google, Youtube etc. nicht möglich
    Plagegeister aller Art und deren Bekämpfung - 15.03.2014 (6)
  7. Manche Webseiten wie Google, Youtube, Facebook,... von Survey gesperrt
    Plagegeister aller Art und deren Bekämpfung - 19.12.2013 (14)
  8. Kann Google /incl youtube nicht öffnen
    Log-Analyse und Auswertung - 07.12.2013 (13)
  9. Google youtube Facebook gesperrt
    Plagegeister aller Art und deren Bekämpfung - 17.11.2013 (8)
  10. Werbung auf Google, Youtube, Facebook, etc.
    Plagegeister aller Art und deren Bekämpfung - 11.06.2013 (14)
  11. Internetseiten wie Google und YouTube sind gesperrt
    Plagegeister aller Art und deren Bekämpfung - 03.04.2013 (23)
  12. Facebook, Youtube , Google, etc durch Surveys gesperrt!
    Plagegeister aller Art und deren Bekämpfung - 04.03.2013 (19)
  13. Ram ausgetauscht - PC stürzt ständig ab
    Netzwerk und Hardware - 04.05.2012 (6)
  14. Google Chrome kein ton mehr bei youtube?
    Alles rund um Windows - 22.03.2012 (1)
  15. Seitenladefehler IE,Firefox bei jeglicher anmeldung (GMX, Facebook,youtube,Google)
    Plagegeister aller Art und deren Bekämpfung - 22.01.2012 (1)
  16. BitTorrent-Client gegen Scareware ausgetauscht
    Nachrichten - 15.09.2011 (0)

Zum Thema HILFE Youtube und google gegen Schuhwebsite ausgetauscht - Seit heute wenn ich Google und Youtube öffnen will kommt eine Schuhwebsite AUF JAPANISCH oder Chinesisch jenachdem - HILFE Youtube und google gegen Schuhwebsite ausgetauscht...
Archiv
Du betrachtest: HILFE Youtube und google gegen Schuhwebsite ausgetauscht auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.