Keep now advirus verschwindet nicht....

blablablu · 19.02.2014, 02:04

Hi, ich habe nun schon alle möglichen Programme ausprobiert um Keep now wegzukriegen, aber er erscheint trotzdem immer wieder, auch habe ich komischerweise keines der Programme, die häufig bei keep now auftreten (scorption saver, lyrics...), wenn ich über die werbung fahre, steht "continue by pdfviewer". Ich hab bei meinem Browser bei den Extensions geschaut und da gibt es einen PDFFVieweR den ich nicht löschen kann. Ich hatte übrigens vorher noch ein schädliches programm namens Wajam entfernt, weiss nicht ob das im Zusammenhang steht.

mfg

EDIT: öfters sind wörter wie downloadoder link blau markiert und haben einen grünen Pfeil
habs ausversehen im falschen forum gepostet, dachte hier gibts nur ein forum, bitte um verschiebung des threads

schrauber · 19.02.2014, 07:00

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

blablablu · 19.02.2014, 10:43

hxxp://www.trojanerhttp://www.trojaner-board.de/attachm...&d=13928029414

so?

schrauber · 20.02.2014, 10:17

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

blablablu · 01.03.2014, 12:38

Zitat:

Zitat von schrauber

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014
Ran by Lukas (administrator) on EPICNESS on 19-02-2014 10:38:53
Running from C:\Users\Lukas\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Dropbox, Inc.) C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Anvisoft) C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TUDefragBackend64.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2876304 2013-01-18] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-16] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] ( (Atheros Communications))
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1824000 2014-02-11] (Valve Corporation)
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\Run: [uTorrent] - C:\Users\Lukas\AppData\Roaming\uTorrent\uTorrent.exe [1141328 2013-10-18] (BitTorrent Inc.)
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\Run: [CloudSystemBooster] - C:\Program Files (x86)\Anvisoft\Cloud System Booster\CloudSystemBooster.exe [527544 2013-12-24] (Anvisoft)
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\MountPoints2: {48a864a9-f7ab-11e2-be6b-806e6f6e6963} - "E:\Setup.exe" 
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\MountPoints2: {ae97be69-3e33-11e3-be8c-54bef719d0ea} - "G:\pushinst.exe" 
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245872 2013-02-20] (NVIDIA Corporation)
Startup: C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {88A3643C-FD21-494F-AAFA-9636F8C5B04D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - {88A3643C-FD21-494F-AAFA-9636F8C5B04D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - {88A3643C-FD21-494F-AAFA-9636F8C5B04D} URL = 
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
BHO: realdeal - {28A39AB2-E62D-C3F6-7D7D-107DB420A4BB} -  No File
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: PDFFVieweR - {8095622F-EB23-40AA-D1D9-1C45CC480691} -  No File
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.100.11

FireFox:
========
FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\iwazxpji.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: PDFFVieweR - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\iwazxpji.default\Extensions\gctfoee@ouyub-.org [2014-02-10]
FF Extension: realdeal - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\iwazxpji.default\Extensions\yxagctb_0rct@ovyjlwu-jx.edu [2014-02-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-08-19]

Chrome: 
=======
CHR Extension: (PDFFVieweR) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bploengmahokblapagicgpadpdoanlle [2014-02-08]
CHR Extension: (DVDVideoSoft) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2013-12-26]
CHR Extension: (Google Wallet) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-08-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AnviCsbSvc; C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe [42680 2013-12-24] (Anvisoft)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-16] (AVAST Software)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-20] (Acer Incorporated)
S2 CLKMSVC10_96E434EB; C:\Program Files (x86)\Acer\clear.fi SDK21\Movie\NavFilter\kmsvc.exe [241776 2013-02-04] (CyberLink)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2013-01-18] (ELAN Microelectronics Corp.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-01-30] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-03-15] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-11-02] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-14] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-11] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-11] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-16] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-02-16] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-08-30] (DT Soft Ltd)
S3 fwlanusb5; C:\Windows\system32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-02-12] (Microsoft Corporation)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [89088 2012-07-26] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\Lukas\AppData\Local\Temp\ALSysIO64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-19 10:38 - 2014-02-19 10:39 - 00020449 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-02-19 10:38 - 2014-02-19 10:38 - 00000000 ____D () C:\FRST
2014-02-19 10:36 - 2014-02-19 10:36 - 02153472 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-02-19 01:34 - 2014-02-19 01:34 - 00001309 _____ () C:\Users\Lukas\Desktop\JRT.txt
2014-02-19 01:29 - 2014-02-19 01:29 - 01037530 _____ (Thisisu) C:\Users\Lukas\Downloads\JRT.exe
2014-02-19 01:29 - 2014-02-19 01:29 - 00000000 ____D () C:\Windows\ERUNT
2014-02-19 01:25 - 2014-02-19 01:25 - 00001236 _____ () C:\Users\Public\Desktop\Cloud System Booster.lnk
2014-02-19 01:25 - 2014-02-19 01:25 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-02-19 01:21 - 2014-02-19 01:30 - 94609260 _____ (RallyeSim ) C:\Users\Lukas\Downloads\Nicht bestätigt 205974.crdownload
2014-02-19 01:21 - 2014-02-19 01:24 - 15627064 _____ (Anvisoft) C:\Users\Lukas\Downloads\csbsetup.exe
2014-02-19 01:13 - 2014-02-19 01:14 - 01441952 _____ (Bandoo Media Inc) C:\Users\Lukas\Downloads\jZipSetup-r264-w-bc.exe
2014-02-19 01:11 - 2014-02-19 01:16 - 00000000 ____D () C:\AdwCleaner
2014-02-19 01:11 - 2014-02-19 01:11 - 01241834 _____ () C:\Users\Lukas\Downloads\adwcleaner.exe
2014-02-19 00:51 - 2014-02-19 00:51 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-19 00:51 - 2014-02-19 00:51 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Malwarebytes
2014-02-19 00:51 - 2014-02-19 00:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-19 00:50 - 2014-02-19 00:51 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-19 00:50 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-19 00:49 - 2014-02-19 00:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-19 00:48 - 2014-02-19 00:48 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-19 00:48 - 2014-02-19 00:48 - 00000826 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-19 00:48 - 2014-02-19 00:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-19 00:47 - 2014-02-19 00:47 - 03645064 _____ (Piriform Ltd) C:\Users\Lukas\Downloads\ccsetup410_slim.exe
2014-02-18 21:00 - 2014-02-18 21:04 - 01169200 _____ (RallyeSim ) C:\Users\Lukas\Downloads\Install_Update_06_RSRBR2012.exe
2014-02-17 17:18 - 2014-02-17 17:18 - 00000738 _____ () C:\Users\Lukas\Desktop\Richard Burns Rally.lnk
2014-02-17 16:46 - 2014-02-17 16:51 - 08331692 _____ () C:\Users\Lukas\Downloads\RBR_v102.zip
2014-02-17 16:46 - 2014-02-17 16:49 - 04851183 _____ () C:\Users\Lukas\Downloads\RBR_v101.zip
2014-02-17 01:06 - 2014-02-17 01:06 - 17890824 _____ () C:\Users\Lukas\Downloads\Fabia evo1 Model.rar
2014-02-17 01:06 - 2014-02-17 01:06 - 00103566 _____ () C:\Users\Lukas\Downloads\Fabia evo1 S2000 Fyzika - physics.rar
2014-02-17 00:00 - 2014-02-17 00:00 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105 (2).rar
2014-02-16 23:59 - 2014-02-16 23:59 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105.rar
2014-02-16 23:59 - 2014-02-16 23:59 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105 (1).rar
2014-02-16 23:52 - 2014-02-16 23:54 - 15914284 _____ () C:\Users\Lukas\Downloads\RTS_Volvo242LE_v10.rar
2014-02-16 23:35 - 2014-02-16 23:39 - 14121712 _____ () C:\Users\Lukas\Downloads\Tune to Win.zip
2014-02-16 03:01 - 2014-02-16 03:07 - 1215197610 _____ () C:\Users\Lukas\Downloads\RichardBurnsRally_Setup-1.bin
2014-02-16 03:00 - 2014-02-16 03:00 - 00568378 _____ (Eidos ) C:\Users\Lukas\Downloads\RichardBurnsRally_Setup.exe
2014-02-16 02:54 - 2014-02-16 02:54 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-15 21:19 - 2014-02-19 01:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-14 17:59 - 2014-02-14 17:59 - 00000000 ____D () C:\Windows\rescache
2014-02-13 22:10 - 2014-02-19 01:01 - 00000000 ____D () C:\ProgramData\realdeal
2014-02-13 16:17 - 2014-02-14 23:29 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Dreambelievers
2014-02-13 16:17 - 2014-02-13 16:33 - 00000000 ____D () C:\Users\Lukas\Documents\Pokemon Online
2014-02-13 16:17 - 2014-02-13 16:17 - 00000000 ____D () C:\Program Files (x86)\Pokemon Online
2014-02-13 16:15 - 2014-02-13 16:17 - 37809189 _____ (Dreambelievers ) C:\Users\Lukas\Downloads\Pokemon-Online-v2.4.1-Setup.exe
2014-02-13 15:46 - 2014-02-13 15:46 - 00000000 ____D () C:\Users\Lukas\Desktop\DF LNP
2014-02-13 15:41 - 2014-02-13 15:45 - 22265136 _____ () C:\Users\Lukas\Downloads\LazyNewbPack [0.34.11] [V15].zip
2014-02-13 15:27 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 15:27 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 15:27 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 15:27 - 2014-02-01 10:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-13 15:27 - 2014-02-01 10:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 15:27 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 15:27 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 15:27 - 2014-02-01 08:58 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 15:27 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 15:27 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 15:27 - 2014-02-01 06:08 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-02-13 15:27 - 2013-12-09 01:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 15:27 - 2013-12-09 00:59 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 15:27 - 2013-12-05 00:43 - 01845248 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 15:27 - 2013-12-05 00:43 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 15:27 - 2013-12-05 00:37 - 01419264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 15:27 - 2013-12-05 00:37 - 00451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 15:27 - 2013-11-27 01:19 - 00385614 _____ () C:\Windows\system32\ApnDatabase.xml
2014-02-13 15:27 - 2013-11-26 00:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-13 15:27 - 2013-11-01 06:53 - 02232664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-13 15:23 - 2014-01-13 00:30 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 15:23 - 2014-01-13 00:30 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 15:23 - 2013-11-20 01:15 - 03842560 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 15:23 - 2013-11-20 00:57 - 03288576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 01:46 - 2014-02-19 00:44 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Pokemon Showdown
2014-02-12 01:45 - 2014-02-12 01:45 - 00002024 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokemon Showdown.lnk
2014-02-12 01:45 - 2014-02-12 01:45 - 00000000 ____D () C:\Program Files (x86)\Pokemon Showdown
2014-02-12 01:43 - 2014-02-12 01:44 - 24156191 _____ () C:\Users\Lukas\Downloads\PokemonShowdownSetup.exe
2014-02-10 09:26 - 2014-02-10 09:26 - 00002218 _____ () C:\Users\Lukas\Desktop\Elektro.txt
2014-02-10 08:32 - 2014-02-10 09:25 - 00002218 _____ () C:\Users\Lukas\Desktop\Neues Textdokument.txt
2014-02-08 20:47 - 2013-12-07 07:37 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-02-08 20:47 - 2013-12-07 07:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-08 20:47 - 2013-12-07 06:15 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-02-08 20:47 - 2013-12-07 06:15 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-08 16:23 - 2014-02-19 01:01 - 00000000 ____D () C:\ProgramData\PDFFVieweR
2014-02-08 16:23 - 2014-02-13 22:10 - 00000000 ____D () C:\ProgramData\b4ecc3d69517f2c6
2014-02-08 16:23 - 2014-02-08 16:23 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-08 16:23 - 2014-02-08 16:23 - 00000000 ____D () C:\ProgramData\bploengmahokblapagicgpadpdoanlle
2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

==================== One Month Modified Files and Folders =======

2014-02-19 10:39 - 2014-02-19 10:38 - 00020449 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-02-19 10:38 - 2014-02-19 10:38 - 00000000 ____D () C:\FRST
2014-02-19 10:36 - 2014-02-19 10:36 - 02153472 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-02-19 10:35 - 2013-08-18 05:58 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-948400324-3845403333-3981813356-1002
2014-02-19 10:35 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-02-19 02:12 - 2013-08-18 05:52 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-19 01:43 - 2013-11-25 20:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-19 01:34 - 2014-02-19 01:34 - 00001309 _____ () C:\Users\Lukas\Desktop\JRT.txt
2014-02-19 01:30 - 2014-02-19 01:21 - 94609260 _____ (RallyeSim ) C:\Users\Lukas\Downloads\Nicht bestätigt 205974.crdownload
2014-02-19 01:29 - 2014-02-19 01:29 - 01037530 _____ (Thisisu) C:\Users\Lukas\Downloads\JRT.exe
2014-02-19 01:29 - 2014-02-19 01:29 - 00000000 ____D () C:\Windows\ERUNT
2014-02-19 01:27 - 2014-02-15 21:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-19 01:27 - 2013-08-25 17:59 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed
2014-02-19 01:27 - 2013-08-25 17:10 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\rFactor 2
2014-02-19 01:27 - 2013-08-18 06:08 - 00000000 ____D () C:\Users\Lukas\AppData\Local\CrashDumps
2014-02-19 01:27 - 2013-04-18 11:11 - 00000000 ____D () C:\Windows\Panther
2014-02-19 01:25 - 2014-02-19 01:25 - 00001236 _____ () C:\Users\Public\Desktop\Cloud System Booster.lnk
2014-02-19 01:25 - 2014-02-19 01:25 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-02-19 01:24 - 2014-02-19 01:21 - 15627064 _____ (Anvisoft) C:\Users\Lukas\Downloads\csbsetup.exe
2014-02-19 01:18 - 2012-07-26 08:28 - 00848230 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-19 01:16 - 2014-02-19 01:11 - 00000000 ____D () C:\AdwCleaner
2014-02-19 01:14 - 2014-02-19 01:13 - 01441952 _____ (Bandoo Media Inc) C:\Users\Lukas\Downloads\jZipSetup-r264-w-bc.exe
2014-02-19 01:13 - 2013-12-17 19:49 - 00000000 ___RD () C:\Users\Lukas\Dropbox
2014-02-19 01:13 - 2013-12-17 19:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Dropbox
2014-02-19 01:12 - 2013-08-18 05:52 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-19 01:12 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-19 01:11 - 2014-02-19 01:11 - 01241834 _____ () C:\Users\Lukas\Downloads\adwcleaner.exe
2014-02-19 01:04 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-19 01:01 - 2014-02-13 22:10 - 00000000 ____D () C:\ProgramData\realdeal
2014-02-19 01:01 - 2014-02-08 16:23 - 00000000 ____D () C:\ProgramData\PDFFVieweR
2014-02-19 00:51 - 2014-02-19 00:51 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-19 00:51 - 2014-02-19 00:51 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Malwarebytes
2014-02-19 00:51 - 2014-02-19 00:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-19 00:51 - 2014-02-19 00:50 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-19 00:50 - 2014-02-19 00:49 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-19 00:48 - 2014-02-19 00:48 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-19 00:48 - 2014-02-19 00:48 - 00000826 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-19 00:48 - 2014-02-19 00:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-19 00:47 - 2014-02-19 00:47 - 03645064 _____ (Piriform Ltd) C:\Users\Lukas\Downloads\ccsetup410_slim.exe
2014-02-19 00:44 - 2014-02-12 01:46 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Pokemon Showdown
2014-02-18 21:04 - 2014-02-18 21:00 - 01169200 _____ (RallyeSim ) C:\Users\Lukas\Downloads\Install_Update_06_RSRBR2012.exe
2014-02-18 20:27 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-02-18 16:58 - 2013-08-18 06:10 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-17 17:18 - 2014-02-17 17:18 - 00000738 _____ () C:\Users\Lukas\Desktop\Richard Burns Rally.lnk
2014-02-17 16:51 - 2014-02-17 16:46 - 08331692 _____ () C:\Users\Lukas\Downloads\RBR_v102.zip
2014-02-17 16:49 - 2014-02-17 16:46 - 04851183 _____ () C:\Users\Lukas\Downloads\RBR_v101.zip
2014-02-17 01:06 - 2014-02-17 01:06 - 17890824 _____ () C:\Users\Lukas\Downloads\Fabia evo1 Model.rar
2014-02-17 01:06 - 2014-02-17 01:06 - 00103566 _____ () C:\Users\Lukas\Downloads\Fabia evo1 S2000 Fyzika - physics.rar
2014-02-17 00:00 - 2014-02-17 00:00 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105 (2).rar
2014-02-16 23:59 - 2014-02-16 23:59 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105.rar
2014-02-16 23:59 - 2014-02-16 23:59 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105 (1).rar
2014-02-16 23:54 - 2014-02-16 23:52 - 15914284 _____ () C:\Users\Lukas\Downloads\RTS_Volvo242LE_v10.rar
2014-02-16 23:39 - 2014-02-16 23:35 - 14121712 _____ () C:\Users\Lukas\Downloads\Tune to Win.zip
2014-02-16 03:07 - 2014-02-16 03:01 - 1215197610 _____ () C:\Users\Lukas\Downloads\RichardBurnsRally_Setup-1.bin
2014-02-16 03:00 - 2014-02-16 03:00 - 00568378 _____ (Eidos ) C:\Users\Lukas\Downloads\RichardBurnsRally_Setup.exe
2014-02-16 02:56 - 2013-12-18 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 02:55 - 2013-08-19 01:16 - 00001970 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-16 02:54 - 2014-02-16 02:54 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-16 02:54 - 2013-08-19 01:16 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-16 02:54 - 2013-08-19 01:16 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-15 23:10 - 2013-08-24 08:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-15 23:09 - 2013-08-24 08:28 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-14 23:29 - 2014-02-13 16:17 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Dreambelievers
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-14 20:49 - 2013-11-25 20:49 - 00001935 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-14 17:59 - 2014-02-14 17:59 - 00000000 ____D () C:\Windows\rescache
2014-02-13 22:10 - 2014-02-08 16:23 - 00000000 ____D () C:\ProgramData\b4ecc3d69517f2c6
2014-02-13 21:09 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-02-13 16:33 - 2014-02-13 16:17 - 00000000 ____D () C:\Users\Lukas\Documents\Pokemon Online
2014-02-13 16:17 - 2014-02-13 16:17 - 00000000 ____D () C:\Program Files (x86)\Pokemon Online
2014-02-13 16:17 - 2014-02-13 16:15 - 37809189 _____ (Dreambelievers ) C:\Users\Lukas\Downloads\Pokemon-Online-v2.4.1-Setup.exe
2014-02-13 15:46 - 2014-02-13 15:46 - 00000000 ____D () C:\Users\Lukas\Desktop\DF LNP
2014-02-13 15:45 - 2014-02-13 15:41 - 22265136 _____ () C:\Users\Lukas\Downloads\LazyNewbPack [0.34.11] [V15].zip
2014-02-12 01:46 - 2013-08-24 08:07 - 00000000 ____D () C:\Users\Lukas\Documents\my games
2014-02-12 01:45 - 2014-02-12 01:45 - 00002024 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokemon Showdown.lnk
2014-02-12 01:45 - 2014-02-12 01:45 - 00000000 ____D () C:\Program Files (x86)\Pokemon Showdown
2014-02-12 01:44 - 2014-02-12 01:43 - 24156191 _____ () C:\Users\Lukas\Downloads\PokemonShowdownSetup.exe
2014-02-10 16:27 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\WinStore
2014-02-10 09:26 - 2014-02-10 09:26 - 00002218 _____ () C:\Users\Lukas\Desktop\Elektro.txt
2014-02-10 09:25 - 2014-02-10 08:32 - 00002218 _____ () C:\Users\Lukas\Desktop\Neues Textdokument.txt
2014-02-08 21:43 - 2013-11-25 20:49 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-08 18:48 - 2013-08-19 11:14 - 00000000 ____D () C:\ProgramData\Solidshield
2014-02-08 16:34 - 2013-12-20 21:46 - 00000222 _____ () C:\Users\Lukas\Desktop\Assetto Corsa.url
2014-02-08 16:30 - 2013-08-19 01:18 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-02-08 16:23 - 2014-02-08 16:23 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-08 16:23 - 2014-02-08 16:23 - 00000000 ____D () C:\ProgramData\bploengmahokblapagicgpadpdoanlle
2014-02-08 16:23 - 2012-07-26 09:12 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-02-08 16:23 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-02-08 16:08 - 2013-08-18 05:52 - 00002139 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-08 15:54 - 2013-12-17 19:49 - 00000983 _____ () C:\Users\Lukas\Desktop\Dropbox.lnk
2014-02-08 15:54 - 2013-12-17 19:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-08 15:54 - 2013-08-18 03:33 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-01 10:20 - 2014-02-13 15:27 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-01 10:19 - 2014-02-13 15:27 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-01 10:19 - 2014-02-13 15:27 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-01 10:19 - 2014-02-13 15:27 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-01 10:19 - 2014-02-13 15:27 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-01 08:58 - 2014-02-13 15:27 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-01 08:58 - 2014-02-13 15:27 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-01 08:58 - 2014-02-13 15:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-01 08:40 - 2014-02-13 15:27 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-01 08:34 - 2014-02-13 15:27 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-01 06:08 - 2014-02-13 15:27 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-01-30 22:10 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-30 22:10 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-16 11:50

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-02-2014
Ran by Lukas at 2014-02-19 10:39:28
Running from C:\Users\Lukas\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
µTorrent (HKCU Version: 3.3.2.30180 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
7-Zip 9.22beta (x32 Version:  - )
Acer Device Fast-lane (Version: 1.00.3011 - Acer Incorporated)
Acer Instant Update Service (Version: 1.00.3015 - Acer Incorporated)
Acer Launch Manager (Version: 8.00.3003 - Acer Incorporated)
Acer Power Management (Version: 7.00.3013 - Acer Incorporated)
Acer Recovery Management (Version: 6.00.3016 - Acer Incorporated)
Acer USB Charge Manager (Version: 2.00.3003 - Acer Incorporated)
AcerCloud Portal (x32 Version: 2.02.2021 - Acer Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Anno 2070 (x32 Version:  - BlueByte)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Arma 3 Beta (x32 Version:  - Bohemia Interactive)
Assetto Corsa (x32 Version:  - Kunos Simulazioni)
avast! Free Antivirus (x32 Version: 9.0.2013 - Avast Software)
AVM FRITZ!WLAN (x32 Version: 1.2.0.0 - AVM Berlin)
BeamNG-Techdemo-0.3 (remove only) (HKCU Version:  - )
Bierbuden Autoupdate (remove only) (HKCU Version:  - )
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops - Multiplayer (x32 Version:  - Treyarch)
CCleaner (Version: 4.10 - Piriform)
clear.fi Media (x32 Version: 2.02.2012 - Acer Incorporated)
clear.fi Photo (x32 Version: 2.02.2016 - Acer Incorporated)
Clonk Rage (x32 Version:  - RedWolf Design GmbH)
Cloud System Booster (x32 Version: 3.1 - Anvisoft)
Core Temp 1.0 RC6 (Version: 1.0 - Alcpu)
Counter-Strike: Source (x32 Version:  - Valve)
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
Dead Island (x32 Version:  - Techland)
DiRT 3 (x32 Version:  - Codemasters Racing Studio)
Dolby Home Theater v4 (x32 Version: 7.2.8000.17 - Dolby Laboratories Inc)
Dolphin 4.0 (x32 Version: 4.0 - Dolphin Development Team)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
eBay Worldwide (x32 Version: 2.4.0105 - OEM)
Euro Truck Simulator 2 (x32 Version: 1.0.5 - SCS Software)
Europa Universalis III (x32 Version:  - Paradox Development Studio)
F1 2012 (x32 Version:  - Codemasters Birmingham)
Fallout 3 - Game of the Year Edition (x32 Version:  - Bethesda Game Studios)
Football Manager 2011 (x32 Version:  - Sports Interactive)
Free YouTube to MP3 Converter version 3.12.11.812 (x32 Version: 3.12.11.812 - DVDVideoSoft Ltd.)
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Gothic II Gold (x32 Version: 2.5.0 - JoWooD Productions Software AG)
GT Legends (x32 Version:  - SimBin Studios AB)
GTR 2 - FIA GT Racing Game (x32 Version:  - SimBin Studios AB)
Hitman: Absolution (x32 Version:  - IO Interactive)
Hitman: Blood Money (x32 Version:  - IO Interactive)
Hitman: Sniper Challenge (x32 Version:  - IO Interactive)
Identity Card (x32 Version: 2.00.3006 - Acer Incorporated)
Intel(R) Management Engine Components (x32 Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.18.10.3071 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.0.0.1083 - Intel Corporation) Hidden
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 3.0.0.63463 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.757.1 - Intel Corporation) Hidden
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 40 (x32 Version: 7.0.400 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Left 4 Dead 2 (x32 Version:  - Valve)
Live Updater (x32 Version: 2.00.3010 - Acer Incorporated)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
McAfee Security Scan Plus (Version: 3.8.141.11 - McAfee, Inc.)
Medieval II: Total War (x32 Version:  - The Creative Assembly)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (x32 Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office 365 Home Premium - de-de (Version: 15.0.4551.1011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Microsoft Windows Media Video 9 VCM (x32 Version:  - )
Mount & Blade: Warband (x32 Version:  - Tale Worlds)
Mozilla Firefox 27.0.1 (x86 en-US) (x32 Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla)
MSI Afterburner 2.3.1 (x32 Version: 2.3.1 - MSI Co., LTD)
NVIDIA Control Panel 311.30 (Version: 311.30 - NVIDIA Corporation) Hidden
NVIDIA Graphics Driver 311.30 (Version: 311.30 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.11.3 (Version: 1.11.3 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 9.12.1031 (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
Office Addin (x32 Version: 2.02.2008 - Acer)
OpenAL (x32 Version:  - )
OpenClonk Beyond the Rocks (x32 Version:  - OpenClonk Development Team)
Overgrowth (x32 Version:  - Wolfire)
PAYDAY: The Heist (x32 Version:  - OVERKILL Software)
PCSX2 - Playstation 2 Emulator (x32 Version:  - )
Pokemon Online 2.4.1 (x32 Version:  - Dreambelievers)
Pokemon Showdown (x32 Version:  - "Pokemon Showdown")
PunkBuster Services (x32 Version: 0.992 - Even Balance, Inc.)
Python 2.7.5 (64-bit) (Version: 2.7.5150 - Python Software Foundation)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 11.39 - Qualcomm Atheros)
RACE 07 - Formula RaceRoom Add-On (x32 Version:  - )
RACE 07 (x32 Version:  - SimBin)
RaceRoom Racing Experience  (x32 Version:  - SimBin Studios AB)
Rapture3D 2.4.8 Game (x32 Version:  - Blue Ripple Sound)
realdeal (x32 Version:  - reaaLdeal)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6865 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (x32 Version: 6.2.9200.28130 - Realtek Semiconductor Corp.)
Red Orchestra 2: Heroes of Stalingrad Beta (x32 Version:  - )
rFactor2 (x32 Version:  - )
Richard Burns Rally (x32 Version:  - Eidos)
Rising Storm Beta (x32 Version:  - )
Rising Storm/Red Orchestra 2 Multiplayer (x32 Version:  - Tripwire Interactive)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
Shift 2 Unleashed (x32 Version:  - Slightly Mad Studios)
Sir, You Are Being Hunted (x32 Version:  - )
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
The Elder Scrolls II: Daggerfall, DaggerfallSetup 2.7a (x32 Version:  - Bethesda Softworks)
The Elder Scrolls V: Skyrim (x32 Version:  - Bethesda Game Studios)
Theatre of War (x32 Version:  - 1C Company)
Tom Clancy's Splinter Cell (x32 Version:  - Ubisoft)
TuneUp Utilities 2013 (x32 Version: 13.0.3020.2 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
Two Worlds II (x32 Version:  - Reality Pump Studios)
Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT)
Victoria II (x32 Version:  - Paradox Development Studio)
Visual Studio 2005 Tools for Office Second Edition Runtime (x32 Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1 - Microsoft Corporation)
Wargame: AirLand Battle (x32 Version:  - Eugen Systems)
Wargame: European Escalation (x32 Version:  - Eugen Systems)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
wxPython 2.8.12.1 (unicode) for Python 2.7 (Version: 2.8.12.1-unicode - Total Control Software)
XCOM: Enemy Unknown (x32 Version:  - Firaxis Games)

==================== Restore Points  =========================

08-02-2014 19:04:24 Windows Update
13-02-2014 14:12:31 Windows Update
16-02-2014 01:54:35 avast! antivirus system restore point
17-02-2014 15:52:06 Installiert Richard Burns Rally 1.01 Patch
19-02-2014 00:25:44 Anvi CSB 3.1

==================== Hosts content: ==========================

2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {048EDF98-5395-4B4A-A4AE-0C01C2AD25C5} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2013-02-08] ()
Task: {14EC46EF-BE1F-4862-8864-24FAB5B4817B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-18] (Google Inc.)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {25FD5A7C-844C-4586-ADD5-5D820EE07ECE} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)
Task: {27FB68CB-FA9B-40F1-ABB0-EFF4FD3474CA} - System32\Tasks\Microsoft\Windows\Setup\Windows Upgrade Notification Task => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {484ED533-BD61-46D6-9470-632D85E1317D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-11-02] (Microsoft Corporation)
Task: {516F035D-34B1-480A-AE69-CC960F6D646A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-18] (Google Inc.)
Task: {520C72BF-E6AF-4AC4-B367-B43A3E194563} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {5F798792-E472-41E1-88F4-17FD2C21E0B0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6B8F3637-4653-4E16-9DD1-73B714179D04} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2013-12-11] (Microsoft Corporation)
Task: {74AC3A02-3331-4ECE-ACAF-ECB833223907} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {821453E6-0E72-4560-8BE6-D7FF27264BA9} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2013-02-08] ()
Task: {86AC7210-D51A-4105-808B-F18C1CA856FC} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {8BD6B59D-5E2D-40D6-B71B-403073E3BFE7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-08] (Adobe Systems Incorporated)
Task: {8F2B5D50-FC49-4F37-99F2-E4CA803398A2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {972E839B-849C-4E34-9B06-255B9ACFA0DE} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-03-15] (Acer Incorporate)
Task: {A2DFA0DD-B17D-4D80-8927-C9290C9843BC} - \dsmonitor No Task File
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {B6073792-FD8E-4AC1-B8D5-D91BD8BCF5A0} - System32\Tasks\Dolby Selector => C:\Dolby PCEE4\pcee4.exe [2012-09-01] (Dolby Laboratories Inc.)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CE1B8449-03C9-4522-A2F6-3E6E9B902A0A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-02-16] (AVAST Software)
Task: {E0016269-49ED-4B59-9C2E-237CEE23361A} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] ()
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {FEEAD9C6-1CFB-4FB4-8E63-567A1AADFBDF} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-01-24] (Acer Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-22 02:16 - 2013-08-23 14:45 - 00386216 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2rui.dll
2013-09-22 02:16 - 2013-11-02 00:48 - 00520872 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2r64.dll
2013-09-22 02:16 - 2013-11-02 00:49 - 00618152 _____ () C:\Program Files\Microsoft Office 15\ClientX64\StreamServer.dll
2013-10-14 23:02 - 2013-10-14 23:06 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-01-25 08:09 - 2013-01-25 08:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-25 08:05 - 2013-01-25 08:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-01-25 08:12 - 2013-01-25 08:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2013-02-08 22:24 - 2013-02-08 22:24 - 00025672 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2013-02-08 22:24 - 2013-02-08 22:24 - 00044616 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2014-02-18 18:42 - 2014-02-18 14:58 - 02181120 _____ () C:\Program Files\AVAST Software\Avast\defs\14021801\algo.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-11-14 17:13 - 2013-12-11 16:30 - 00316584 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2013-11-14 17:13 - 2013-12-11 16:30 - 00359592 _____ () C:\Program Files\Microsoft Office 15\root\office15\c2r32.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Lukas\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-11 01:06 - 2013-12-11 01:06 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-07-28 18:38 - 2013-01-23 08:57 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-02-08 16:08 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-08 16:08 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-08 16:08 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-08 16:08 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-08 16:08 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
2014-02-08 16:08 - 2014-02-02 00:42 - 13616456 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll
2014-02-15 21:19 - 2014-02-15 21:19 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Lukas\Downloads\RE AW Theorieprüfung.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Bluetooth USB Module
Description: Bluetooth USB Module
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Qualcomm Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/19/2014 01:18:28 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "WMI-Objekte". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.

Error: (02/19/2014 01:18:28 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "7432". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.

Error: (02/19/2014 01:13:08 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: HeciServer.exe, Version: 1.27.757.1, Zeitstempel: 0x50c5e42f
Name des fehlerhaften Moduls: HeciServer.exe, Version: 1.27.757.1, Zeitstempel: 0x50c5e42f
Ausnahmecode: 0x40000015
Fehleroffset: 0x000000000005d549
ID des fehlerhaften Prozesses: 0x900
Startzeit der fehlerhaften Anwendung: 0xHeciServer.exe0
Pfad der fehlerhaften Anwendung: HeciServer.exe1
Pfad des fehlerhaften Moduls: HeciServer.exe2
Berichtskennung: HeciServer.exe3
Vollständiger Name des fehlerhaften Pakets: HeciServer.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: HeciServer.exe5

Error: (02/19/2014 01:07:48 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "WMI-Objekte". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.

Error: (02/19/2014 01:07:48 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "7432". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.

Error: (02/19/2014 01:02:48 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: HeciServer.exe, Version: 1.27.757.1, Zeitstempel: 0x50c5e42f
Name des fehlerhaften Moduls: HeciServer.exe, Version: 1.27.757.1, Zeitstempel: 0x50c5e42f
Ausnahmecode: 0x40000015
Fehleroffset: 0x000000000005d549
ID des fehlerhaften Prozesses: 0x83c
Startzeit der fehlerhaften Anwendung: 0xHeciServer.exe0
Pfad der fehlerhaften Anwendung: HeciServer.exe1
Pfad des fehlerhaften Moduls: HeciServer.exe2
Berichtskennung: HeciServer.exe3
Vollständiger Name des fehlerhaften Pakets: HeciServer.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: HeciServer.exe5

Error: (02/18/2014 10:37:00 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: pokemonshowdown.exe, Version: 0.0.0.0, Zeitstempel: 0x521ac860
Name des fehlerhaften Moduls: pokemonshowdown.exe, Version: 0.0.0.0, Zeitstempel: 0x521ac860
Ausnahmecode: 0x80000003
Fehleroffset: 0x001ba920
ID des fehlerhaften Prozesses: 0x28a0
Startzeit der fehlerhaften Anwendung: 0xpokemonshowdown.exe0
Pfad der fehlerhaften Anwendung: pokemonshowdown.exe1
Pfad des fehlerhaften Moduls: pokemonshowdown.exe2
Berichtskennung: pokemonshowdown.exe3
Vollständiger Name des fehlerhaften Pakets: pokemonshowdown.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: pokemonshowdown.exe5

Error: (02/18/2014 10:01:48 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2094

Error: (02/18/2014 10:01:48 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2094

Error: (02/18/2014 10:01:48 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (02/19/2014 01:13:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel(R) Capability Licensing Service Interface" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/19/2014 01:13:08 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Capability Licensing Service Interface erreicht.

Error: (02/19/2014 01:12:46 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0

Error: (02/19/2014 01:02:48 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel(R) Capability Licensing Service Interface" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/19/2014 01:02:48 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Capability Licensing Service Interface erreicht.

Error: (02/19/2014 01:02:25 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0

Error: (02/18/2014 09:22:39 PM) (Source: Server) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{05AB430A-E76E-487E-AB4F-3493D11C9179} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (02/16/2014 02:57:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel(R) Capability Licensing Service Interface" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/16/2014 02:57:05 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Capability Licensing Service Interface erreicht.

Error: (02/16/2014 02:56:40 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0


Microsoft Office Sessions:
=========================
Error: (02/19/2014 01:18:28 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WMI-Objekte16000000006E1E00006F1E0000B5090000

Error: (02/19/2014 01:18:28 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: 743216081D0000061D0000071D000070010000

Error: (02/19/2014 01:13:08 AM) (Source: Application Error)(User: )
Description: HeciServer.exe1.27.757.150c5e42fHeciServer.exe1.27.757.150c5e42f40000015000000000005d54990001cf2d075548aca1C:\Program Files\Intel\iCLS Client\HeciServer.exeC:\Program Files\Intel\iCLS Client\HeciServer.exe9be92ab5-98fa-11e3-bec0-54bef719d0ea

Error: (02/19/2014 01:07:48 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WMI-Objekte16000000006E1E00006F1E0000B5090000

Error: (02/19/2014 01:07:48 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: 743216081D0000061D0000071D000070010000

Error: (02/19/2014 01:02:48 AM) (Source: Application Error)(User: )
Description: HeciServer.exe1.27.757.150c5e42fHeciServer.exe1.27.757.150c5e42f40000015000000000005d54983c01cf2d05e38599bbC:\Program Files\Intel\iCLS Client\HeciServer.exeC:\Program Files\Intel\iCLS Client\HeciServer.exe2a25be62-98f9-11e3-bebf-54bef719d0ea

Error: (02/18/2014 10:37:00 PM) (Source: Application Error)(User: )
Description: pokemonshowdown.exe0.0.0.0521ac860pokemonshowdown.exe0.0.0.0521ac86080000003001ba92028a001cf2cd1236c2bd5C:\Program Files (x86)\Pokemon Showdown\pokemonshowdown.exeC:\Program Files (x86)\Pokemon Showdown\pokemonshowdown.execc0ed80d-98e4-11e3-bebe-54bef719d0ea

Error: (02/18/2014 10:01:48 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2094

Error: (02/18/2014 10:01:48 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2094

Error: (02/18/2014 10:01:48 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info =========================== 

Percentage of memory in use: 13%
Total physical RAM: 32648.27 MB
Available physical RAM: 28273.54 MB
Total Pagefile: 37000.27 MB
Available Pagefile: 32381.57 MB
Total Virtual: 8192 MB
Available Virtual: 8191.76 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:214.66 GB) (Free:1.47 GB) NTFS
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:635.97 GB) NTFS
Drive f: (GRANTURISMO4) (CDROM) (Total:2.51 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 238 GB) (Disk ID: 9CB1B382)

Partition: GPT Partition Type
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 9CB1B3A8)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================

okay hab jetzt kapiert wies geht =.=

schrauber · 02.03.2014, 08:05

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

blablablu · 03.03.2014, 13:46

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-03-2014
Ran by Lukas at 2014-03-03 13:43:39 Run:1
Running from C:\Users\Lukas\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.


The system needed a reboot. 

==== End of Fixlog ====

Hier ist es.

EDIT: Die Antivirenprogramme hab ich schon installiert, soll ich sie löschen und nochmal alles neu machen oder?...

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.03.04

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16798
Lukas :: EPICNESS [Administrator]

Schutz: Aktiviert

03.03.2014 14:00:00
mbam-log-2014-03-03 (14-00-00).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 240856
Laufzeit: 2 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Lukas\Downloads\adwcleaner.exe (Trojan.Agent.AI) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

von adwcleaner:

Code:

ATTFilter

# AdwCleaner v3.020 - Bericht erstellt am 03/03/2014 um 14:07:50
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Lukas - EPICNESS
# Gestartet von : C:\Users\Lukas\Downloads\adwcleaner_3.0.2.0.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gelöscht : C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_sb.scorecardresearch.com_0.localstorage
Datei Gelöscht : C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_sb.scorecardresearch.com_0.localstorage-journal

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16798


-\\ Mozilla Firefox v27.0.1 (en-US)

[ Datei : C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\iwazxpji.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.0EHr.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorobo\")>-1||url.indexO[...]
Zeile gelöscht : user_pref("extensions.uChDID.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorobo\")>-1||url.inde[...]

-\\ Google Chrome v32.0.1700.107

[ Datei : C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [7542 octets] - [19/02/2014 01:11:45]
AdwCleaner[R1].txt - [1029 octets] - [19/02/2014 01:16:17]
AdwCleaner[R2].txt - [2009 octets] - [03/03/2014 14:06:52]
AdwCleaner[S0].txt - [6814 octets] - [19/02/2014 01:12:12]
AdwCleaner[S1].txt - [1930 octets] - [03/03/2014 14:07:50]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1990 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 8 x64
Ran by Lukas on 03.03.2014 at 14:11:39.87
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\Lukas\AppData\Roaming\mozilla\firefox\profiles\iwazxpji.default\prefs.js

user_pref("extensions.0EHr.url", "hxxp://toolkitsetusa.info/sync2/?q=hfZ9oeV9CGhEAen0rihTB6lKDzt4okqstNtVh7n0rjnErTwHrTwErjwHtMFHhd9FqdaHrdsGrTr7qjwMDMlGojUMAe4UojwEpdY5rdY5qj



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.03.2014 at 14:16:49.55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Neues FRST:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-03-2014
Ran by Lukas (administrator) on EPICNESS on 03-03-2014 14:19:05
Running from C:\Users\Lukas\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Anvisoft) C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Anvisoft) C:\Program Files (x86)\Anvisoft\Cloud System Booster\CloudSystemBooster.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Thisisu) C:\Users\Lukas\Desktop\JRT_NEW.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2876304 2013-01-18] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-16] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] ( (Atheros Communications))
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\Run: [uTorrent] - C:\Users\Lukas\AppData\Roaming\uTorrent\uTorrent.exe [1141328 2013-10-18] (BitTorrent Inc.)
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\Run: [CloudSystemBooster] - C:\Program Files (x86)\Anvisoft\Cloud System Booster\CloudSystemBooster.exe [527544 2013-12-24] (Anvisoft)
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\MountPoints2: {48a864a9-f7ab-11e2-be6b-806e6f6e6963} - "E:\install.exe" 
HKU\S-1-5-21-948400324-3845403333-3981813356-1002\...\MountPoints2: {ae97be69-3e33-11e3-be8c-54bef719d0ea} - "G:\pushinst.exe" 
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245872 2013-02-20] (NVIDIA Corporation)
Startup: C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {88A3643C-FD21-494F-AAFA-9636F8C5B04D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - {88A3643C-FD21-494F-AAFA-9636F8C5B04D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - {88A3643C-FD21-494F-AAFA-9636F8C5B04D} URL = 
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
BHO: realdeal - {28A39AB2-E62D-C3F6-7D7D-107DB420A4BB} -  No File
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: PDFFVieweR - {8095622F-EB23-40AA-D1D9-1C45CC480691} -  No File
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\iwazxpji.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: PDFFVieweR - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\iwazxpji.default\Extensions\gctfoee@ouyub-.org [2014-02-10]
FF Extension: realdeal - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\iwazxpji.default\Extensions\yxagctb_0rct@ovyjlwu-jx.edu [2014-02-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-08-19]

Chrome: 
=======
CHR Extension: (DVDVideoSoft) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2013-12-26]
CHR Extension: (Google Wallet) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-08-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AnviCsbSvc; C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe [42680 2013-12-24] (Anvisoft)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-16] (AVAST Software)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-20] (Acer Incorporated)
S2 CLKMSVC10_96E434EB; C:\Program Files (x86)\Acer\clear.fi SDK21\Movie\NavFilter\kmsvc.exe [241776 2013-02-04] (CyberLink)
R3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2013-01-18] (ELAN Microelectronics Corp.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-01-30] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-03-15] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-11-02] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-14] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-11] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-11] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-16] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-02-16] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-08-30] (DT Soft Ltd)
S3 fwlanusb5; C:\Windows\system32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-02-12] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [89088 2012-07-26] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\Lukas\AppData\Local\Temp\ALSysIO64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-03 14:16 - 2014-03-03 14:16 - 00001057 _____ () C:\Users\Lukas\Desktop\JRT.txt
2014-03-03 14:11 - 2014-02-20 07:33 - 01037734 _____ (Thisisu) C:\Users\Lukas\Desktop\JRT_NEW.exe
2014-03-03 14:06 - 2014-03-03 14:06 - 01244192 _____ () C:\Users\Lukas\Downloads\adwcleaner_3.0.2.0.exe
2014-03-03 13:44 - 2014-03-03 14:04 - 00000908 _____ () C:\Windows\PFRO.log
2014-03-03 13:42 - 2014-03-03 13:42 - 00000000 ____D () C:\Users\Lukas\Downloads\FRST-OlderVersion
2014-03-03 13:41 - 2014-03-03 13:41 - 00000063 _____ () C:\Users\Lukas\Desktop\Fixlist.txt
2014-03-03 12:10 - 2014-03-03 12:14 - 00000000 ____D () C:\Users\Lukas\Documents\Rulers of Nations
2014-03-03 12:08 - 2009-06-07 16:25 - 00077824 _____ () C:\Windows\SysWOW64\xvid.ax
2014-03-03 12:08 - 2009-06-07 16:24 - 00180224 _____ () C:\Windows\SysWOW64\xvidvfw.dll
2014-03-03 12:08 - 2009-06-07 16:16 - 00819200 _____ () C:\Windows\SysWOW64\xvidcore.dll
2014-03-03 12:07 - 2014-03-03 12:14 - 00649236 _____ () C:\Windows\RON 2010 GERMAN Uninstaller.exe
2014-03-03 12:07 - 2014-03-03 12:07 - 00000657 _____ () C:\Users\Public\Desktop\Politik Simulator 2 - Rulers of Nations.lnk
2014-03-02 20:55 - 2014-03-02 20:55 - 00000220 _____ () C:\Users\Lukas\Desktop\Space Empires V.url
2014-03-02 11:28 - 2014-03-02 11:28 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\SpaceEngineers
2014-03-02 11:21 - 2014-03-02 11:21 - 00000222 _____ () C:\Users\Lukas\Desktop\Space Engineers.url
2014-03-01 10:14 - 2014-03-01 10:25 - 61370667 _____ () C:\Users\Lukas\Downloads\MasterworkDF V4h (2).7z
2014-02-28 23:14 - 2014-02-28 23:24 - 61370667 _____ () C:\Users\Lukas\Downloads\MasterworkDF V4h (1).7z
2014-02-28 23:00 - 2014-02-28 23:10 - 61370667 _____ () C:\Users\Lukas\Downloads\MasterworkDF V4h.7z
2014-02-28 18:45 - 2014-02-28 18:54 - 00000000 ____D () C:\Users\Lukas\Desktop\LF LNP
2014-02-28 09:13 - 2014-02-28 09:13 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-28 09:13 - 2014-02-28 09:13 - 00000000 _____ () C:\Windows\setupact.log
2014-02-28 04:05 - 2014-02-28 04:06 - 00000000 ___RD () C:\Users\Lukas\Desktop\desktop (1)
2014-02-27 20:39 - 2014-02-27 20:39 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\OpenOffice
2014-02-27 20:27 - 2014-02-27 20:27 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-27 20:25 - 2014-02-27 20:25 - 00000000 ____D () C:\Users\Lukas\Desktop\OpenOffice 4.0.1 (en-US) Installation Files
2014-02-27 15:11 - 2014-02-27 15:18 - 143485940 _____ () C:\Users\Lukas\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_en-US.exe
2014-02-26 12:29 - 2014-02-26 12:29 - 00000000 ____D () C:\Users\Lukas\Documents\Paradox Interactive
2014-02-19 21:54 - 2014-02-19 21:54 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\UDP Software
2014-02-19 13:52 - 2014-02-19 13:56 - 22265136 _____ () C:\Users\Lukas\Downloads\LazyNewbPack [0.34.11] [V15] (1).zip
2014-02-19 12:01 - 2014-03-03 13:37 - 00975384 _____ () C:\Windows\WindowsUpdate.log
2014-02-19 10:40 - 2014-02-19 10:40 - 00047097 _____ () C:\Users\Lukas\Documents\FRST.txt
2014-02-19 10:40 - 2014-02-19 10:40 - 00030283 _____ () C:\Users\Lukas\Documents\Addition.txt
2014-02-19 10:39 - 2014-02-19 10:39 - 00030283 _____ () C:\Users\Lukas\Downloads\Addition.txt
2014-02-19 10:38 - 2014-03-03 14:19 - 00019246 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-02-19 10:38 - 2014-03-03 14:19 - 00000000 ____D () C:\FRST
2014-02-19 10:36 - 2014-03-03 13:42 - 02156544 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-02-19 01:29 - 2014-02-19 01:29 - 01037530 _____ (Thisisu) C:\Users\Lukas\Downloads\JRT.exe
2014-02-19 01:29 - 2014-02-19 01:29 - 00000000 ____D () C:\Windows\ERUNT
2014-02-19 01:25 - 2014-02-19 01:25 - 00001236 _____ () C:\Users\Public\Desktop\Cloud System Booster.lnk
2014-02-19 01:25 - 2014-02-19 01:25 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-02-19 01:21 - 2014-02-19 01:30 - 94609260 _____ (RallyeSim ) C:\Users\Lukas\Downloads\Nicht bestätigt 205974.crdownload
2014-02-19 01:21 - 2014-02-19 01:24 - 15627064 _____ (Anvisoft) C:\Users\Lukas\Downloads\csbsetup.exe
2014-02-19 01:13 - 2014-02-19 01:14 - 01441952 _____ (Bandoo Media Inc) C:\Users\Lukas\Downloads\jZipSetup-r264-w-bc.exe
2014-02-19 01:11 - 2014-03-03 14:07 - 00000000 ____D () C:\AdwCleaner
2014-02-19 00:51 - 2014-02-19 00:51 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-19 00:51 - 2014-02-19 00:51 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Malwarebytes
2014-02-19 00:51 - 2014-02-19 00:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-19 00:50 - 2014-02-19 00:51 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-19 00:50 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-19 00:49 - 2014-02-19 00:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-19 00:48 - 2014-02-19 00:48 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-19 00:48 - 2014-02-19 00:48 - 00000826 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-19 00:48 - 2014-02-19 00:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-19 00:47 - 2014-02-19 00:47 - 03645064 _____ (Piriform Ltd) C:\Users\Lukas\Downloads\ccsetup410_slim.exe
2014-02-18 21:00 - 2014-02-18 21:04 - 01169200 _____ (RallyeSim ) C:\Users\Lukas\Downloads\Install_Update_06_RSRBR2012.exe
2014-02-17 16:46 - 2014-02-17 16:51 - 08331692 _____ () C:\Users\Lukas\Downloads\RBR_v102.zip
2014-02-17 16:46 - 2014-02-17 16:49 - 04851183 _____ () C:\Users\Lukas\Downloads\RBR_v101.zip
2014-02-17 01:06 - 2014-02-17 01:06 - 17890824 _____ () C:\Users\Lukas\Downloads\Fabia evo1 Model.rar
2014-02-17 01:06 - 2014-02-17 01:06 - 00103566 _____ () C:\Users\Lukas\Downloads\Fabia evo1 S2000 Fyzika - physics.rar
2014-02-17 00:00 - 2014-02-17 00:00 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105 (2).rar
2014-02-16 23:59 - 2014-02-16 23:59 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105.rar
2014-02-16 23:59 - 2014-02-16 23:59 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105 (1).rar
2014-02-16 23:52 - 2014-02-16 23:54 - 15914284 _____ () C:\Users\Lukas\Downloads\RTS_Volvo242LE_v10.rar
2014-02-16 23:35 - 2014-02-16 23:39 - 14121712 _____ () C:\Users\Lukas\Downloads\Tune to Win.zip
2014-02-16 03:01 - 2014-02-16 03:07 - 1215197610 _____ () C:\Users\Lukas\Downloads\RichardBurnsRally_Setup-1.bin
2014-02-16 03:00 - 2014-02-16 03:00 - 00568378 _____ (Eidos ) C:\Users\Lukas\Downloads\RichardBurnsRally_Setup.exe
2014-02-16 02:54 - 2014-02-16 02:54 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-15 21:19 - 2014-02-19 01:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-14 17:59 - 2014-02-14 17:59 - 00000000 ____D () C:\Windows\rescache
2014-02-13 22:10 - 2014-02-19 01:01 - 00000000 ____D () C:\ProgramData\realdeal
2014-02-13 16:17 - 2014-02-14 23:29 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Dreambelievers
2014-02-13 16:17 - 2014-02-13 16:33 - 00000000 ____D () C:\Users\Lukas\Documents\Pokemon Online
2014-02-13 16:17 - 2014-02-13 16:17 - 00000000 ____D () C:\Program Files (x86)\Pokemon Online
2014-02-13 16:15 - 2014-02-13 16:17 - 37809189 _____ (Dreambelievers ) C:\Users\Lukas\Downloads\Pokemon-Online-v2.4.1-Setup.exe
2014-02-13 15:46 - 2014-02-28 18:48 - 00000000 ____D () C:\Users\Lukas\Desktop\desktop (3)
2014-02-13 15:41 - 2014-02-13 15:45 - 22265136 _____ () C:\Users\Lukas\Downloads\LazyNewbPack [0.34.11] [V15].zip
2014-02-13 15:27 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 15:27 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 15:27 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 15:27 - 2014-02-01 10:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-13 15:27 - 2014-02-01 10:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 15:27 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 15:27 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 15:27 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 15:27 - 2014-02-01 08:58 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 15:27 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 15:27 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 15:27 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 15:27 - 2014-02-01 06:08 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-02-13 15:27 - 2013-12-09 01:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 15:27 - 2013-12-09 00:59 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 15:27 - 2013-12-05 00:43 - 01845248 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 15:27 - 2013-12-05 00:43 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 15:27 - 2013-12-05 00:37 - 01419264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 15:27 - 2013-12-05 00:37 - 00451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 15:27 - 2013-11-27 01:19 - 00385614 _____ () C:\Windows\system32\ApnDatabase.xml
2014-02-13 15:27 - 2013-11-26 00:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-13 15:27 - 2013-11-01 06:53 - 02232664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-13 15:23 - 2014-01-13 00:30 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 15:23 - 2014-01-13 00:30 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 15:23 - 2013-11-20 01:15 - 03842560 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 15:23 - 2013-11-20 00:57 - 03288576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 01:46 - 2014-02-26 00:48 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Pokemon Showdown
2014-02-12 01:45 - 2014-02-12 01:45 - 00002024 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokemon Showdown.lnk
2014-02-12 01:45 - 2014-02-12 01:45 - 00000000 ____D () C:\Program Files (x86)\Pokemon Showdown
2014-02-12 01:43 - 2014-02-12 01:44 - 24156191 _____ () C:\Users\Lukas\Downloads\PokemonShowdownSetup.exe
2014-02-10 09:26 - 2014-02-10 09:26 - 00002218 _____ () C:\Users\Lukas\Desktop\Elektro.txt
2014-02-10 08:32 - 2014-02-10 09:25 - 00002218 _____ () C:\Users\Lukas\Desktop\desktop (1).txt
2014-02-08 20:47 - 2013-12-07 07:37 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-02-08 20:47 - 2013-12-07 07:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-08 20:47 - 2013-12-07 06:15 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-02-08 20:47 - 2013-12-07 06:15 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-08 16:23 - 2014-03-03 13:45 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-02-08 16:23 - 2014-02-19 01:01 - 00000000 ____D () C:\ProgramData\PDFFVieweR
2014-02-08 16:23 - 2014-02-13 22:10 - 00000000 ____D () C:\ProgramData\b4ecc3d69517f2c6
2014-02-08 16:23 - 2014-02-08 16:23 - 00000000 ____D () C:\ProgramData\bploengmahokblapagicgpadpdoanlle

==================== One Month Modified Files and Folders =======

2014-03-03 14:19 - 2014-02-19 10:38 - 00019246 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-03-03 14:19 - 2014-02-19 10:38 - 00000000 ____D () C:\FRST
2014-03-03 14:18 - 2013-08-18 05:58 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-948400324-3845403333-3981813356-1002
2014-03-03 14:16 - 2014-03-03 14:16 - 00001057 _____ () C:\Users\Lukas\Desktop\JRT.txt
2014-03-03 14:15 - 2012-07-26 08:28 - 00848230 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-03 14:12 - 2013-08-18 05:52 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-03 14:08 - 2013-12-17 19:49 - 00000000 ___RD () C:\Users\Lukas\Dropbox
2014-03-03 14:08 - 2013-12-17 19:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Dropbox
2014-03-03 14:08 - 2013-08-18 05:52 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-03 14:08 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-03 14:07 - 2014-02-19 01:11 - 00000000 ____D () C:\AdwCleaner
2014-03-03 14:06 - 2014-03-03 14:06 - 01244192 _____ () C:\Users\Lukas\Downloads\adwcleaner_3.0.2.0.exe
2014-03-03 14:04 - 2014-03-03 13:44 - 00000908 _____ () C:\Windows\PFRO.log
2014-03-03 14:03 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-03-03 14:02 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-03-03 13:48 - 2013-08-18 06:10 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-03 13:45 - 2014-02-08 16:23 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-03-03 13:44 - 2013-12-17 14:48 - 00448888 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-03 13:43 - 2013-11-25 20:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-03 13:43 - 2012-07-26 09:12 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-03 13:42 - 2014-03-03 13:42 - 00000000 ____D () C:\Users\Lukas\Downloads\FRST-OlderVersion
2014-03-03 13:42 - 2014-02-19 10:36 - 02156544 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-03-03 13:41 - 2014-03-03 13:41 - 00000063 _____ () C:\Users\Lukas\Desktop\Fixlist.txt
2014-03-03 13:37 - 2014-02-19 12:01 - 00975384 _____ () C:\Windows\WindowsUpdate.log
2014-03-03 12:14 - 2014-03-03 12:10 - 00000000 ____D () C:\Users\Lukas\Documents\Rulers of Nations
2014-03-03 12:14 - 2014-03-03 12:07 - 00649236 _____ () C:\Windows\RON 2010 GERMAN Uninstaller.exe
2014-03-03 12:07 - 2014-03-03 12:07 - 00000657 _____ () C:\Users\Public\Desktop\Politik Simulator 2 - Rulers of Nations.lnk
2014-03-03 11:41 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-03-02 20:55 - 2014-03-02 20:55 - 00000220 _____ () C:\Users\Lukas\Desktop\Space Empires V.url
2014-03-02 20:55 - 2013-08-19 01:18 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-02 11:28 - 2014-03-02 11:28 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\SpaceEngineers
2014-03-02 11:21 - 2014-03-02 11:21 - 00000222 _____ () C:\Users\Lukas\Desktop\Space Engineers.url
2014-03-01 10:25 - 2014-03-01 10:14 - 61370667 _____ () C:\Users\Lukas\Downloads\MasterworkDF V4h (2).7z
2014-02-28 23:24 - 2014-02-28 23:14 - 61370667 _____ () C:\Users\Lukas\Downloads\MasterworkDF V4h (1).7z
2014-02-28 23:10 - 2014-02-28 23:00 - 61370667 _____ () C:\Users\Lukas\Downloads\MasterworkDF V4h.7z
2014-02-28 18:54 - 2014-02-28 18:45 - 00000000 ____D () C:\Users\Lukas\Desktop\LF LNP
2014-02-28 18:48 - 2014-02-13 15:46 - 00000000 ____D () C:\Users\Lukas\Desktop\desktop (3)
2014-02-28 09:13 - 2014-02-28 09:13 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-28 09:13 - 2014-02-28 09:13 - 00000000 _____ () C:\Windows\setupact.log
2014-02-28 04:07 - 2013-12-08 01:42 - 00000000 ____D () C:\Users\Lukas\Desktop\desktop (12)
2014-02-28 04:07 - 2013-10-30 21:40 - 00000000 ____D () C:\Users\Lukas\Desktop\desktop (11)
2014-02-28 04:06 - 2014-02-28 04:05 - 00000000 ___RD () C:\Users\Lukas\Desktop\desktop (1)
2014-02-27 20:39 - 2014-02-27 20:39 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\OpenOffice
2014-02-27 20:27 - 2014-02-27 20:27 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-27 20:25 - 2014-02-27 20:25 - 00000000 ____D () C:\Users\Lukas\Desktop\OpenOffice 4.0.1 (en-US) Installation Files
2014-02-27 15:18 - 2014-02-27 15:11 - 143485940 _____ () C:\Users\Lukas\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_en-US.exe
2014-02-27 15:09 - 2013-08-18 05:51 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Deployment
2014-02-26 12:29 - 2014-02-26 12:29 - 00000000 ____D () C:\Users\Lukas\Documents\Paradox Interactive
2014-02-26 00:48 - 2014-02-12 01:46 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Pokemon Showdown
2014-02-26 00:46 - 2013-08-18 06:08 - 00000000 ____D () C:\Users\Lukas\AppData\Local\CrashDumps
2014-02-25 13:50 - 2013-08-18 03:33 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Packages
2014-02-24 12:42 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-20 22:44 - 2013-08-19 11:14 - 00000000 ____D () C:\ProgramData\Solidshield
2014-02-20 20:45 - 2013-11-25 20:49 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-20 07:33 - 2014-03-03 14:11 - 01037734 _____ (Thisisu) C:\Users\Lukas\Desktop\JRT_NEW.exe
2014-02-19 21:54 - 2014-02-19 21:54 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\UDP Software
2014-02-19 13:56 - 2014-02-19 13:52 - 22265136 _____ () C:\Users\Lukas\Downloads\LazyNewbPack [0.34.11] [V15] (1).zip
2014-02-19 10:40 - 2014-02-19 10:40 - 00047097 _____ () C:\Users\Lukas\Documents\FRST.txt
2014-02-19 10:40 - 2014-02-19 10:40 - 00030283 _____ () C:\Users\Lukas\Documents\Addition.txt
2014-02-19 10:39 - 2014-02-19 10:39 - 00030283 _____ () C:\Users\Lukas\Downloads\Addition.txt
2014-02-19 01:30 - 2014-02-19 01:21 - 94609260 _____ (RallyeSim ) C:\Users\Lukas\Downloads\Nicht bestätigt 205974.crdownload
2014-02-19 01:29 - 2014-02-19 01:29 - 01037530 _____ (Thisisu) C:\Users\Lukas\Downloads\JRT.exe
2014-02-19 01:29 - 2014-02-19 01:29 - 00000000 ____D () C:\Windows\ERUNT
2014-02-19 01:27 - 2014-02-15 21:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-19 01:27 - 2013-08-25 17:59 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed
2014-02-19 01:27 - 2013-08-25 17:10 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\rFactor 2
2014-02-19 01:27 - 2013-04-18 11:11 - 00000000 ____D () C:\Windows\Panther
2014-02-19 01:25 - 2014-02-19 01:25 - 00001236 _____ () C:\Users\Public\Desktop\Cloud System Booster.lnk
2014-02-19 01:25 - 2014-02-19 01:25 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-02-19 01:24 - 2014-02-19 01:21 - 15627064 _____ (Anvisoft) C:\Users\Lukas\Downloads\csbsetup.exe
2014-02-19 01:14 - 2014-02-19 01:13 - 01441952 _____ (Bandoo Media Inc) C:\Users\Lukas\Downloads\jZipSetup-r264-w-bc.exe
2014-02-19 01:01 - 2014-02-13 22:10 - 00000000 ____D () C:\ProgramData\realdeal
2014-02-19 01:01 - 2014-02-08 16:23 - 00000000 ____D () C:\ProgramData\PDFFVieweR
2014-02-19 00:51 - 2014-02-19 00:51 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-19 00:51 - 2014-02-19 00:51 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Malwarebytes
2014-02-19 00:51 - 2014-02-19 00:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-19 00:51 - 2014-02-19 00:50 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-19 00:50 - 2014-02-19 00:49 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-19 00:48 - 2014-02-19 00:48 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-19 00:48 - 2014-02-19 00:48 - 00000826 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-19 00:48 - 2014-02-19 00:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-19 00:47 - 2014-02-19 00:47 - 03645064 _____ (Piriform Ltd) C:\Users\Lukas\Downloads\ccsetup410_slim.exe
2014-02-18 21:04 - 2014-02-18 21:00 - 01169200 _____ (RallyeSim ) C:\Users\Lukas\Downloads\Install_Update_06_RSRBR2012.exe
2014-02-17 23:03 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-17 23:03 - 2012-07-26 09:14 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-17 16:51 - 2014-02-17 16:46 - 08331692 _____ () C:\Users\Lukas\Downloads\RBR_v102.zip
2014-02-17 16:49 - 2014-02-17 16:46 - 04851183 _____ () C:\Users\Lukas\Downloads\RBR_v101.zip
2014-02-17 01:06 - 2014-02-17 01:06 - 17890824 _____ () C:\Users\Lukas\Downloads\Fabia evo1 Model.rar
2014-02-17 01:06 - 2014-02-17 01:06 - 00103566 _____ () C:\Users\Lukas\Downloads\Fabia evo1 S2000 Fyzika - physics.rar
2014-02-17 00:00 - 2014-02-17 00:00 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105 (2).rar
2014-02-16 23:59 - 2014-02-16 23:59 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105.rar
2014-02-16 23:59 - 2014-02-16 23:59 - 00056802 _____ () C:\Users\Lukas\Downloads\Golf KC A7 Fyzika - physics_REV20110105 (1).rar
2014-02-16 23:54 - 2014-02-16 23:52 - 15914284 _____ () C:\Users\Lukas\Downloads\RTS_Volvo242LE_v10.rar
2014-02-16 23:39 - 2014-02-16 23:35 - 14121712 _____ () C:\Users\Lukas\Downloads\Tune to Win.zip
2014-02-16 03:07 - 2014-02-16 03:01 - 1215197610 _____ () C:\Users\Lukas\Downloads\RichardBurnsRally_Setup-1.bin
2014-02-16 03:00 - 2014-02-16 03:00 - 00568378 _____ (Eidos ) C:\Users\Lukas\Downloads\RichardBurnsRally_Setup.exe
2014-02-16 02:56 - 2013-12-18 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 02:55 - 2013-08-19 01:16 - 00001970 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-16 02:54 - 2014-02-16 02:54 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-16 02:54 - 2013-08-19 01:16 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-16 02:54 - 2013-08-19 01:16 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-16 02:54 - 2013-08-19 01:16 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-15 23:10 - 2013-08-24 08:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-15 23:09 - 2013-08-24 08:28 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-14 23:29 - 2014-02-13 16:17 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Dreambelievers
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-14 20:49 - 2013-11-25 20:49 - 00001935 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-14 17:59 - 2014-02-14 17:59 - 00000000 ____D () C:\Windows\rescache
2014-02-13 22:10 - 2014-02-08 16:23 - 00000000 ____D () C:\ProgramData\b4ecc3d69517f2c6
2014-02-13 16:33 - 2014-02-13 16:17 - 00000000 ____D () C:\Users\Lukas\Documents\Pokemon Online
2014-02-13 16:17 - 2014-02-13 16:17 - 00000000 ____D () C:\Program Files (x86)\Pokemon Online
2014-02-13 16:17 - 2014-02-13 16:15 - 37809189 _____ (Dreambelievers ) C:\Users\Lukas\Downloads\Pokemon-Online-v2.4.1-Setup.exe
2014-02-13 15:45 - 2014-02-13 15:41 - 22265136 _____ () C:\Users\Lukas\Downloads\LazyNewbPack [0.34.11] [V15].zip
2014-02-12 01:46 - 2013-08-24 08:07 - 00000000 ____D () C:\Users\Lukas\Documents\my games
2014-02-12 01:45 - 2014-02-12 01:45 - 00002024 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokemon Showdown.lnk
2014-02-12 01:45 - 2014-02-12 01:45 - 00000000 ____D () C:\Program Files (x86)\Pokemon Showdown
2014-02-12 01:44 - 2014-02-12 01:43 - 24156191 _____ () C:\Users\Lukas\Downloads\PokemonShowdownSetup.exe
2014-02-10 16:27 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\WinStore
2014-02-10 09:26 - 2014-02-10 09:26 - 00002218 _____ () C:\Users\Lukas\Desktop\Elektro.txt
2014-02-10 09:25 - 2014-02-10 08:32 - 00002218 _____ () C:\Users\Lukas\Desktop\desktop (1).txt
2014-02-08 16:23 - 2014-02-08 16:23 - 00000000 ____D () C:\ProgramData\bploengmahokblapagicgpadpdoanlle
2014-02-08 16:23 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-02-08 16:08 - 2013-08-18 05:52 - 00002139 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-08 15:54 - 2013-12-17 19:49 - 00000983 _____ () C:\Users\Lukas\Desktop\Dropbox.lnk
2014-02-08 15:54 - 2013-12-17 19:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-08 15:54 - 2013-08-18 03:33 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-01 10:20 - 2014-02-13 15:27 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-01 10:19 - 2014-02-13 15:27 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-01 10:19 - 2014-02-13 15:27 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-01 10:19 - 2014-02-13 15:27 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-01 10:19 - 2014-02-13 15:27 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-01 10:18 - 2014-02-13 15:27 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-01 08:58 - 2014-02-13 15:27 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-01 08:58 - 2014-02-13 15:27 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-01 08:58 - 2014-02-13 15:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-01 08:57 - 2014-02-13 15:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-01 08:40 - 2014-02-13 15:27 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-01 08:34 - 2014-02-13 15:27 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-01 06:08 - 2014-02-13 15:27 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

Some content of TEMP:
====================
C:\Users\Lukas\AppData\Local\Temp\pidDVD.dll
C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-16 11:50

==================== End Of Log ============================

--- --- ---

Ich habe durch wiederholtes Editieren nun alles in einen Post reingemacht, ich hoffe das ist ok so

schrauber · 04.03.2014, 10:26

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

blablablu · 04.03.2014, 16:39

Sieht so aus als sei der Virus schon jetzt weg, danke dass du dir die zeit genommen hast.

Soll ich die letzten Schritte trotzdem noch ausführen, bzw sind die wichtig?

Achja und welches antivirenprogramm empfiehlst du um meinen Pc zu schützen? :>

mfg

schrauber · 05.03.2014, 14:34

Ja bitte, zur Kontrolle. ich empfehle immer Emsisoft.

05.03.2014, 14:34	#10
schrauber /// the machine /// TB-Ausbilder	Keep now advirus verschwindet nicht.... Ja bitte, zur Kontrolle. ich empfehle immer Emsisoft. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Keep now advirus verschwindet nicht....

Log-Analyse und Auswertung: Keep now advirus verschwindet nicht....