Websiten öffnen sich selbständig! & Ein Programm verhindert Downloads von Internet!

RoketLaucher · 07.11.2014, 21:59

Hallo, ich habe einen neuen PC und seit einigen Tagen werden immer wieder Werbeseiten geöffnet, obwohl ich Adblocker Plus drauf hab. Außerdem hab ich mir anscheinend heute ein Programm eingefangen, das verhindert, dass ich irgendetwas downloade. Sobald ich bei Chip was downloaden möchte öffnet sich das Download fester für 1/10 Sekunde und schließt sich wieder.

Noch ein paar Daten:
Virenprogramm Kaspersky 2015.
Windows 7

Ich hoffe ihr könnt mir helfen

Gruß Lukas

M-K-D-B · 07.11.2014, 22:21

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

Zur ersten Analyse bitte FRST ausführen:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

RoketLaucher · 07.11.2014, 22:36

Danke für die Schnelle Antwort! Tut mir leid, ich hab jetzt schon AdwCleaner mal drüberlaufen lassen, bevor ich deinen Post gelesen hatte. Ich kann über den standartmäßigen Internet Explorer dowloaden, aber über Firefox nicht.

Naja, hier mal die Logs von AdwCleaner:

Code:

ATTFilter

# AdwCleaner v4.002 - Bericht erstellt am 07/11/2014 um 22:21:12
# DB v2014-11-02.1
# Aktualisiert 27/10/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium  (64 bits)
# Benutzername : Lukas - LUKAS-PC
# Gestartet von : E:\Users\Lukas\Downloads\adwcleaner_4.002.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : IePluginServices
Dienst Gelöscht : ttsvc

***** [ Dateien / Ordner ] *****

[!] Ordner Gelöscht : C:\Users\Lukas\AppData\Roaming\IDMSQ
[!] Ordner Gelöscht : C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IDMSQ
[!] Ordner Gelöscht : C:\ProgramData\IePluginServices
[!] Ordner Gelöscht : C:\Users\Lukas\AppData\Roaming\Systweak
[!] Ordner Gelöscht : C:\ProgramData\WindowsMangerProtect
[!] Ordner Gelöscht : C:\Program Files (x86)\TermTutor
[!] Ordner Gelöscht : C:\Program Files\TermTutor
[!] Ordner Gelöscht : C:\Users\Lukas\AppData\Local\StormWatch
[!] Ordner Gelöscht : C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatchApp.lnk
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\sweet-page.xml

***** [ Tasks ] *****

Task Gelöscht : ASP

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3AA4FC9D-FB51-44A2-B09F-0457857CA7C2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6CB99040-7828-4C37-AC01-F15758F43E4D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{733413F4-5FB9-4EE9-8536-BF7AB1731A19}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3AA4FC9D-FB51-44A2-B09F-0457857CA7C2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6CB99040-7828-4C37-AC01-F15758F43E4D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3AA4FC9D-FB51-44A2-B09F-0457857CA7C2}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6CB99040-7828-4C37-AC01-F15758F43E4D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6CB99040-7828-4C37-AC01-F15758F43E4D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3AA4FC9D-FB51-44A2-B09F-0457857CA7C2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6CB99040-7828-4C37-AC01-F15758F43E4D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3AA4FC9D-FB51-44A2-B09F-0457857CA7C2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{6CB99040-7828-4C37-AC01-F15758F43E4D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6CB99040-7828-4C37-AC01-F15758F43E4D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\SupHpUISoft
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\StormWatch
Schlüssel Gelöscht : HKLM\SOFTWARE\InstallCore
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\SupTab
Schlüssel Gelöscht : HKLM\SOFTWARE\supWindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\supWPM
Schlüssel Gelöscht : HKLM\SOFTWARE\sweet-pageSoftware
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\TermTutor
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\StormWatch
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TermTutor
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe

***** [ Browser ] *****

-\\ Internet Explorer v8.0.7600.16385

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v33.0.3 (x86 de)

[d8cpi6zw.default] - Zeile gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[d8cpi6zw.default] - Zeile gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", true);

-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [7599 octets] - [07/11/2014 22:17:53]
AdwCleaner[S0].txt - [6418 octets] - [07/11/2014 22:21:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6478 octets] ##########

Hoff das ist kein zu großes Problem. Ich werde nun dein Programm dowloaden und dir die Log gleich reinstellen

Ok hier zu den 2 gewünschten FRST Logs:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by Lukas (administrator) on LUKAS-PC on 07-11-2014 22:33:03
Running from E:\Users\Lukas\Downloads
Loaded Profile: Lukas (Available profiles: Lukas)
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) E:\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) E:\hamachi-2-ui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\klwtblfs.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\klwtblfs.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2463552 2014-10-04] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => E:\hamachi-2-ui.exe [3835728 2014-11-03] (LogMeIn Inc.)
HKU\S-1-5-21-1544055677-1025936548-340876858-1000\...\Run: [swg] => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\S-1-5-21-1544055677-1025936548-340876858-1000\...\Run: [IDMSQ] => C:\Program Files (x86)\IDMSQ\idmsq.exe /startup
HKU\S-1-5-21-1544055677-1025936548-340876858-1000\...\MountPoints2: {5c187949-62e8-11e4-b362-806e6f6e6963} - D:\Run.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE54FEF6FBFF6CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://Lasaoren.com/results.php?f=4&q={searchTerms}&a=lrn_ggfx_14_45_ie&cd=2XzuyEtN2Y1L1QzuyByE0DyEtAyD0F0A0AtA0AtCzz0D0EtCtN0D0Tzu0StCtDtAzztN1L2XzutAtFyCtFtDtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StB0DyBtDzyyEzz0DtGtDzzyBzztGyB0EyB0DtG0BtBtDyEtGtCtAtD0AtA0A0F0B0B0A0Fzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0B0BtAtAtAzz0B0AtG0AyEtCtDtGyEyD0FtBtG0Azz0B0EtG0CtCyByByCyE0F0FzzyC0F0B2Q&cr=821214552&ir=
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll No File
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Internet Download Manager Squared - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\Extensions\idmsq@idmsq.com [2014-11-07]
FF Extension: Adblock Plus - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-11-07]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Ngăn chặn trang web nguy hiểm - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Bàn phím ảo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Công cụ kiểm tra liên kết của Kaspersky - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: An toàn giao dịch tài chính - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-11-02]
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\extensions\cliqz@cliqz.com

Chrome: 
=======
CHR Profile: C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-04]
CHR Extension: (Docs) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-02]
CHR Extension: (Google Drive) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-02]
CHR Extension: (YouTube) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-02]
CHR Extension: (Google-Suche) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-02]
CHR Extension: (Google Tabellen) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-04]
CHR Extension: (Google Wallet) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-04]
CHR Extension: (Google Mail) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-02]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []
CHR HKLM-x32\...\Chrome\Extension: [ohenffmfbnoidogjgebadealdkecjdal] - C:\Users\Lukas\AppData\Roaming\IDMSQ\IDMSQ.crx []

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-10-04] (NVIDIA Corporation)
R2 Hamachi2Svc; E:\hamachi-2.exe [2530128 2014-11-03] (LogMeIn Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-10-04] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-10-04] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [494864 2013-08-29] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [141320 2014-11-02] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [793800 2014-11-02] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-10-04] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
R1 ttnfd; C:\Windows\System32\drivers\ttnfd.sys [58232 2014-09-04] (Term Tutor)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-07 22:32 - 2014-11-07 22:33 - 00000000 ____D () C:\FRST
2014-11-07 22:17 - 2014-11-07 22:21 - 00000000 ____D () C:\AdwCleaner
2014-11-07 21:30 - 2014-11-07 21:30 - 00003146 _____ () C:\Windows\System32\Tasks\{AD6FC708-3834-4FC3-A576-C690F255E524}
2014-11-07 20:51 - 2014-11-07 20:51 - 00000000 ____D () C:\MININT
2014-11-07 16:57 - 2014-11-07 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-06 22:36 - 2014-11-06 22:36 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-11-06 22:27 - 2014-11-06 22:27 - 831908289 _____ () C:\Windows\MEMORY.DMP
2014-11-06 22:27 - 2014-11-06 22:27 - 00309552 _____ () C:\Windows\Minidump\110614-6552-01.dmp
2014-11-06 22:27 - 2014-11-06 22:27 - 00000000 ____D () C:\Windows\Minidump
2014-11-06 19:36 - 2014-11-07 21:31 - 00000000 ____D () C:\Users\Lukas\AppData\Local\CrashDumps
2014-11-05 18:12 - 2014-11-05 18:12 - 00022528 _____ () C:\Users\Lukas\AppData\Local\759974dsisetup7650602.exe
2014-11-05 18:12 - 2014-11-05 18:12 - 00000001 _____ () C:\Users\Lukas\AppData\Local\DSI.DAT
2014-11-05 18:09 - 2014-11-05 18:09 - 00000000 ____D () C:\Users\Lukas\AppData\Local\LogMeIn
2014-11-05 18:09 - 2014-11-05 18:09 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-11-04 21:43 - 2014-11-04 21:43 - 00003356 _____ () C:\Users\Lukas\AppData\Local\recently-used.xbel
2014-11-04 21:06 - 2014-11-04 21:43 - 00000000 ____D () C:\Users\Lukas\AppData\Local\gtk-2.0
2014-11-04 21:06 - 2014-11-04 21:06 - 00000000 ____D () C:\Users\Lukas\.thumbnails
2014-11-04 20:26 - 2014-11-07 22:22 - 00000000 ____D () C:\Users\Lukas\AppData\Local\LogMeIn Hamachi
2014-11-04 20:25 - 2014-11-04 20:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-11-04 20:09 - 2014-11-04 20:09 - 00000000 ____D () C:\Users\Lukas\Tracing
2014-11-04 19:51 - 2014-11-04 19:51 - 00002486 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-11-04 19:51 - 2014-11-04 19:51 - 00001458 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-11-04 19:51 - 2014-11-04 19:51 - 00001374 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-11-04 19:51 - 2014-11-04 19:51 - 00001305 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-11-04 19:51 - 2014-11-04 19:51 - 00000195 _____ () C:\Windows\DirectX.log
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Windows\PCHEALTH
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Windows\de
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Program Files\Windows Live
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-11-04 19:51 - 2013-02-05 22:06 - 00057840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2014-11-04 19:51 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-11-04 19:51 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-11-04 19:51 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-11-04 19:51 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-11-04 19:51 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-11-04 19:51 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-11-04 19:51 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-11-04 19:51 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-11-04 19:50 - 2014-11-04 20:09 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Windows Live
2014-11-04 19:50 - 2014-11-04 19:50 - 00002138 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-11-04 19:50 - 2014-11-04 19:50 - 00002120 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-11-04 19:50 - 2014-11-04 19:50 - 00002120 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-11-04 19:50 - 2014-11-04 19:50 - 00000000 ___RD () C:\Users\Lukas\SkyDrive
2014-11-04 19:50 - 2014-11-04 19:50 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-11-04 19:50 - 2014-11-04 19:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-11-04 19:50 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-11-04 19:50 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-11-04 19:47 - 2014-11-04 21:43 - 00000000 ____D () C:\Users\Lukas\.gimp-2.8
2014-11-04 19:47 - 2014-11-04 19:47 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-11-04 19:47 - 2014-11-04 19:47 - 00000000 ____D () C:\Users\Lukas\AppData\Local\gegl-0.2
2014-11-04 19:46 - 2014-11-04 19:47 - 00000000 ____D () C:\Program Files\GIMP 2
2014-11-04 19:08 - 2014-10-30 01:56 - 00614728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-11-04 19:07 - 2014-10-30 05:53 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 24554824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 17258696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 13189832 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-04 19:07 - 2014-10-30 05:53 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 04011840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434460.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434460.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00961224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00932168 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00922944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00896144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00870112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00416912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00391824 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00349504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-04 19:06 - 2014-11-07 22:22 - 00003228 _____ () C:\Windows\System32\Tasks\FRAPS
2014-11-04 19:05 - 2014-11-04 19:05 - 00000740 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-11-04 19:05 - 2014-11-04 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-11-04 18:36 - 2014-11-04 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-11-04 18:36 - 2014-11-04 18:36 - 00000000 ____D () C:\Program Files\7-Zip
2014-11-04 18:36 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-11-04 18:36 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-11-03 22:27 - 2014-11-03 22:27 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\LolClient
2014-11-03 20:36 - 2014-11-03 20:36 - 00000000 ____D () C:\ProgramData\Riot Games
2014-11-03 20:35 - 2014-11-03 20:35 - 00000017 _____ () C:\Users\Lukas\AppData\Local\resmon.resmoncfg
2014-11-03 20:34 - 2014-11-03 20:35 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Riot Games
2014-11-03 20:34 - 2014-11-03 20:34 - 00001613 _____ () C:\Users\Public\Desktop\League of Legends.lnk
2014-11-03 20:34 - 2014-11-03 20:34 - 00000000 ____D () C:\Riot Games
2014-11-03 20:34 - 2014-11-03 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-11-03 20:34 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-11-03 20:34 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-11-03 20:34 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-11-03 20:34 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-11-03 20:34 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-11-03 20:12 - 2014-11-07 17:12 - 00000129 _____ () C:\Users\Lukas\AppData\Roaming\WB.CFG
2014-11-03 20:03 - 2014-11-03 20:03 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-11-03 20:03 - 2014-11-03 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-03 20:03 - 2014-11-03 20:03 - 00000000 ____D () C:\Program Files\Java
2014-11-03 19:58 - 2014-11-03 19:58 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Macromedia
2014-11-03 19:58 - 2014-11-03 19:58 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Adobe
2014-11-03 19:58 - 2014-11-03 19:58 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Macromedia
2014-11-03 19:56 - 2014-11-07 22:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-03 19:56 - 2014-11-03 19:57 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Adobe
2014-11-03 19:56 - 2014-11-03 19:56 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-03 19:56 - 2014-11-03 19:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-03 19:56 - 2014-11-03 19:56 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-03 19:56 - 2014-11-03 19:56 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-11-03 19:56 - 2014-11-03 19:56 - 00000000 ____D () C:\Windows\system32\Macromed
2014-11-03 19:56 - 2014-11-03 19:56 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-03 19:49 - 2014-11-03 19:49 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-11-03 19:49 - 2014-11-03 19:49 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-11-03 19:44 - 2014-11-05 18:34 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-03 19:44 - 2014-11-05 18:34 - 00000000 ____D () C:\ProgramData\Skype
2014-11-03 19:44 - 2014-11-05 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-03 19:44 - 2014-11-04 18:43 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Skype
2014-11-03 19:44 - 2014-11-03 19:44 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-03 19:44 - 2014-11-03 19:44 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype
2014-11-03 19:38 - 2014-11-03 19:38 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\NVIDIA
2014-11-03 19:35 - 2014-11-07 21:45 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\TS3Client
2014-11-03 19:35 - 2014-11-03 19:35 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-11-03 19:35 - 2014-11-03 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-11-03 19:35 - 2014-11-03 19:35 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-11-03 19:31 - 2014-11-07 18:18 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\.minecraft
2014-11-03 19:31 - 2014-11-03 19:31 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\java
2014-11-03 19:30 - 2014-11-03 19:30 - 00000000 ____D () C:\ProgramData\Sun
2014-11-03 19:30 - 2014-11-03 19:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-03 19:26 - 2014-11-03 19:26 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-03 19:26 - 2014-11-03 19:26 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-03 19:14 - 2014-11-07 21:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-03 19:14 - 2014-11-03 19:14 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Mozilla
2014-11-03 19:14 - 2014-11-03 19:14 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Mozilla
2014-11-03 19:14 - 2014-11-03 19:14 - 00000000 ____D () C:\ProgramData\Mozilla
2014-11-03 19:12 - 2014-11-07 22:12 - 00000292 _____ () C:\Windows\Tasks\WSE_Lasaoren.job
2014-11-03 19:12 - 2014-11-03 19:12 - 00003232 _____ () C:\Windows\System32\Tasks\WSE_Lasaoren
2014-11-03 19:12 - 2014-11-03 19:12 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\WSE_Lasaoren
2014-11-03 19:12 - 2014-11-03 19:12 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\1H1Q1V1N1N1O2V
2014-11-03 19:12 - 2014-11-03 19:12 - 00000000 ____D () C:\Program Files (x86)\WSE_Lasaoren
2014-11-03 18:47 - 2014-11-03 18:47 - 00057560 _____ () C:\Users\Lukas\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-03 00:51 - 2014-11-03 00:51 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-11-03 00:51 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-11-03 00:50 - 2014-11-04 19:08 - 00000000 ____D () C:\temp
2014-11-03 00:50 - 2014-11-04 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-03 00:50 - 2014-11-04 19:08 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-03 00:50 - 2014-11-03 00:51 - 00000000 ____D () C:\Users\Lukas\AppData\Local\NVIDIA Corporation
2014-11-03 00:50 - 2014-11-03 00:51 - 00000000 ____D () C:\Users\Lukas\AppData\Local\NVIDIA
2014-11-03 00:50 - 2014-11-02 17:58 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-03 00:50 - 2014-11-02 17:58 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-03 00:50 - 2014-10-04 07:42 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-11-03 00:50 - 2014-10-04 07:42 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-11-03 00:50 - 2014-10-04 07:41 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-11-03 00:50 - 2014-10-04 07:41 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-11-03 00:50 - 2014-09-04 20:14 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-11-03 00:43 - 2014-11-07 22:22 - 00832804 _____ () C:\Windows\PFRO.log
2014-11-03 00:42 - 2014-11-03 00:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-11-03 00:42 - 2014-11-03 00:42 - 00000000 ____D () C:\Intel
2014-11-03 00:42 - 2014-02-21 06:56 - 00791024 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-11-03 00:42 - 2014-02-21 06:56 - 00370672 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-11-03 00:42 - 2014-02-21 06:56 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-11-03 00:41 - 2014-11-03 00:41 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-11-03 00:40 - 2014-11-03 00:40 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-03 00:40 - 2014-11-03 00:40 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-03 00:40 - 2014-11-03 00:40 - 00000000 ____D () C:\Program Files\Realtek
2014-11-03 00:40 - 2013-10-31 21:36 - 00001904 ____N () C:\Windows\system32\SetupBD.din
2014-11-03 00:40 - 2013-09-26 08:13 - 00565048 ____R (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-11-03 00:40 - 2013-08-29 09:49 - 00494864 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys
2014-11-03 00:40 - 2013-07-24 19:36 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll
2014-11-03 00:40 - 2013-07-10 23:36 - 00089888 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll
2014-11-03 00:40 - 2012-01-06 06:03 - 00003114 _____ () C:\Windows\system32\e1d62x64.din
2014-11-03 00:40 - 2009-05-26 02:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-11-03 00:39 - 2014-03-14 12:08 - 03896920 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-03 00:39 - 2014-03-14 10:14 - 00628440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-03 00:39 - 2014-03-14 07:42 - 00947928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-03 00:39 - 2014-03-12 10:19 - 57362432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-11-03 00:39 - 2014-03-11 14:50 - 00853784 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-03 00:39 - 2014-03-11 03:06 - 01738032 _____ () C:\Windows\system32\SStudio.dll
2014-11-03 00:39 - 2014-03-07 03:57 - 02794200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-11-03 00:39 - 2014-03-06 09:35 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-03 00:39 - 2014-03-04 22:11 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-11-03 00:39 - 2014-03-04 22:11 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-11-03 00:39 - 2014-03-04 22:11 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-11-03 00:39 - 2014-03-04 22:11 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-11-03 00:39 - 2014-03-04 13:27 - 02831576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-03 00:39 - 2014-03-03 13:21 - 01019608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-03 00:39 - 2014-02-27 13:02 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-11-03 00:39 - 2014-02-26 01:48 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-11-03 00:39 - 2014-02-26 01:47 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-11-03 00:39 - 2014-02-18 11:12 - 01042520 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-03 00:39 - 2014-02-18 11:12 - 00882776 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-11-03 00:39 - 2014-02-18 07:48 - 02396760 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-11-03 00:39 - 2014-02-18 07:48 - 01424984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-11-03 00:39 - 2014-02-18 07:48 - 01423960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 28314200 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 14742104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 12816472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 03927640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 02040920 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 01933400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-11-03 00:39 - 2014-02-06 04:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-11-03 00:39 - 2014-01-31 10:28 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-11-03 00:39 - 2014-01-31 10:27 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-11-03 00:39 - 2014-01-28 04:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-03 00:39 - 2013-10-11 04:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-11-03 00:39 - 2013-08-20 10:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll
2014-11-03 00:39 - 2013-08-14 08:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-11-03 00:39 - 2013-08-14 08:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-11-03 00:39 - 2013-06-25 05:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-11-03 00:39 - 2013-06-25 05:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-11-03 00:39 - 2013-06-25 05:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-11-03 00:39 - 2013-04-03 07:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-11-03 00:39 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-11-03 00:39 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-11-03 00:39 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-11-03 00:39 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-11-03 00:39 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-11-03 00:39 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-11-03 00:39 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-11-03 00:39 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-03 00:39 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-03 00:39 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-11-03 00:39 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-11-03 00:39 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-11-03 00:39 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-11-03 00:39 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-11-03 00:39 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-03 00:39 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-03 00:39 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-03 00:39 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-11-03 00:39 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-03 00:39 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-03 00:39 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-03 00:39 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-03 00:38 - 2014-11-03 00:42 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-11-03 00:38 - 2014-11-03 00:41 - 00000000 ____D () C:\Program Files\Intel
2014-11-03 00:38 - 2014-11-03 00:40 - 00000206 _____ () C:\Install.log
2014-11-03 00:38 - 2014-11-03 00:40 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____H () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____D () C:\Users\Lukas\Intel
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____D () C:\ProgramData\Intel
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-11-03 00:38 - 2014-02-26 08:16 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-11-03 00:38 - 2014-02-18 10:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-03 00:38 - 2013-10-15 20:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-03 00:38 - 2013-10-11 05:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-03 00:38 - 2013-10-06 17:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-11-03 00:38 - 2013-10-06 17:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-11-03 00:38 - 2013-10-06 17:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-11-03 00:38 - 2013-09-09 21:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-11-03 00:38 - 2013-09-09 21:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-11-03 00:38 - 2013-09-09 21:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-11-03 00:38 - 2013-09-09 21:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-11-03 00:38 - 2013-06-21 04:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-11-03 00:38 - 2012-07-26 05:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-11-03 00:38 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-11-03 00:38 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-11-03 00:38 - 2012-06-02 15:35 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-11-03 00:38 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-11-03 00:37 - 2014-11-07 21:08 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-03 00:37 - 2014-11-02 18:19 - 00000000 ____D () C:\ProgramData\Norton
2014-11-03 00:36 - 2014-11-03 00:36 - 01558224 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-11-03 00:36 - 2009-11-25 11:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2014-11-03 00:36 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2014-11-03 00:36 - 2009-11-25 11:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2014-11-03 00:35 - 2014-11-07 22:22 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-03 00:35 - 2014-11-07 22:11 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-03 00:35 - 2014-11-07 21:48 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-03 00:35 - 2014-11-06 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-11-03 00:35 - 2014-11-04 20:27 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Google
2014-11-03 00:35 - 2014-11-03 19:43 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-03 00:35 - 2014-11-03 19:43 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-03 00:35 - 2014-11-03 00:35 - 00000000 ____D () C:\Users\Lukas\AppData\LocalGoogle
2014-11-03 00:35 - 2014-11-03 00:35 - 00000000 ____D () C:\ProgramData\Google
2014-11-03 00:35 - 2014-11-03 00:35 - 00000000 ____D () C:\Program Files\Google
2014-11-03 00:34 - 2014-11-03 00:34 - 00000010 _____ () C:\Windows\GSetup.ini
2014-11-02 18:22 - 2014-11-07 22:22 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-11-02 18:22 - 2014-11-02 18:25 - 00793800 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-11-02 18:22 - 2014-11-02 18:25 - 00141320 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-11-02 18:22 - 2014-11-02 18:22 - 00001196 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-11-02 18:22 - 2014-11-02 18:22 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-11-02 18:22 - 2014-11-02 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-11-02 18:22 - 2014-11-02 18:22 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-11-02 18:22 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-11-02 18:22 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-11-02 18:07 - 2014-11-02 18:07 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Google
2014-11-02 17:58 - 2014-11-07 22:22 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-02 17:58 - 2014-11-02 17:58 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-02 17:58 - 2014-10-30 05:53 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-11-02 17:58 - 2014-10-30 05:53 - 00060744 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 06880968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 00935232 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-02 17:58 - 2014-10-30 03:10 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-02 17:58 - 2014-10-27 01:34 - 04066553 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-02 17:57 - 2014-10-30 05:53 - 20966504 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 18497600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 00987008 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-02 17:57 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll
2014-11-02 17:57 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll
2014-11-02 17:57 - 2014-10-16 17:54 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-11-02 17:57 - 2014-10-16 17:54 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-11-02 17:57 - 2014-10-16 17:54 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-11-02 17:56 - 2014-09-04 20:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-02 17:56 - 2014-09-04 20:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-01 23:54 - 2014-11-01 23:54 - 00001439 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-01 23:54 - 2014-11-01 23:54 - 00001405 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-11-01 23:53 - 2014-11-07 22:25 - 00257790 _____ () C:\Windows\WindowsUpdate.log
2014-11-01 23:53 - 2014-11-04 21:06 - 00000000 ____D () C:\Users\Lukas
2014-11-01 23:53 - 2014-11-02 17:59 - 00000000 ____D () C:\Users\Lukas\AppData\Local\VirtualStore
2014-11-01 23:53 - 2014-11-01 23:53 - 00000020 ___SH () C:\Users\Lukas\ntuser.ini
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Vorlagen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Startmenü
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Netzwerkumgebung
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Lokale Einstellungen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Eigene Dateien
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Druckumgebung
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\AppData\Local\Verlauf
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\AppData\Local\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 __SHD () C:\Recovery
2014-11-01 23:53 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 23:53 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 23:50 - 2014-11-01 23:50 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-11-01 23:50 - 2014-11-01 23:50 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-11-01 23:50 - 2014-11-01 23:50 - 00001313 _____ () C:\Windows\TSSysprep.log
2014-11-01 23:48 - 2014-11-01 23:53 - 00000000 ____D () C:\Windows\Panther

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-07 22:29 - 2009-07-14 18:58 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-11-07 22:29 - 2009-07-14 18:58 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-11-07 22:29 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-07 22:29 - 2009-07-14 05:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-07 22:29 - 2009-07-14 05:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-07 22:22 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-07 22:22 - 2009-07-14 05:51 - 00023095 _____ () C:\Windows\setupact.log
2014-11-07 21:46 - 2009-07-14 05:45 - 00281816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-07 20:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources
2014-11-05 18:08 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-04 19:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-11-04 18:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-03 00:35 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-11-03 00:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-02 17:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-11-01 23:59 - 2009-07-14 19:18 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-11-01 23:53 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-11-01 23:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-01 23:50 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-01 23:50 - 2009-07-14 05:46 - 00001774 _____ () C:\Windows\DtcInstall.log
2014-11-01 23:50 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 23:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-11-01 23:48 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-11-01 23:48 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

Some content of TEMP:
====================
C:\Users\Lukas\AppData\Local\Temp\Nv3DVisionIePlugin.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVisionIePlugin64.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVStreaming.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVStreaming64.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVStreamingIePlugin.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVStreamingIePlugin64.dll
C:\Users\Lukas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Lukas\AppData\Local\Temp\nvStInst.exe
C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe
C:\Users\Lukas\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-05 18:37

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-11-2014
Ran by Lukas at 2014-11-07 22:33:31
Running from E:\Users\Lukas\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Firefox Packages (HKCU\...\Firefox Packages) (Version:  - ) <==== ATTENTION
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.266 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.266 - LogMeIn, Inc.) Hidden
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 33.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.3 (x86 de)) (Version: 33.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.60 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.60 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.104 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WSE_Lasaoren (HKLM-x32\...\WSE_Lasaoren) (Version:  - WSE_Lasaoren)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1544055677-1025936548-340876858-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Lukas\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1544055677-1025936548-340876858-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Lukas\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1544055677-1025936548-340876858-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Lukas\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1544055677-1025936548-340876858-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Lukas\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

02-11-2014 16:56:55 DirectX wurde installiert
02-11-2014 23:35:58 Windows Update
02-11-2014 23:38:11 Windows Update
02-11-2014 23:40:20 Intel® Netzwerkanschlüsse
02-11-2014 23:41:09 IIF_MSI
02-11-2014 23:50:48 DirectX wurde installiert
03-11-2014 17:42:47 DirectX wurde installiert
03-11-2014 18:59:53 Removed Java 8 Update 25
03-11-2014 19:34:26 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert
03-11-2014 19:34:40 Microsoft Visual C++ 2005 Redistributable wird installiert
03-11-2014 19:34:48 Installed League of Legends
03-11-2014 19:34:54 DirectX wurde installiert
04-11-2014 17:36:36 Installed 7-Zip 9.20 (x64 edition)
04-11-2014 18:50:32 Windows Live Essentials
04-11-2014 18:50:53 DirectX wurde installiert
04-11-2014 18:51:01 DirectX wurde installiert
04-11-2014 18:51:07 DirectX wurde installiert
04-11-2014 18:51:21 WLSetup
04-11-2014 19:24:59 Installed LogMeIn Hamachi
06-11-2014 21:47:40 Installed Debugging Tools for Windows (x86)
06-11-2014 21:50:37 Removed Debugging Tools for Windows (x86)

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1E255FF0-D2B9-4D85-8047-D07567F1BAA7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-03] (Google Inc.)
Task: {397FBA9C-158D-4DE0-AB8A-97224F6DC822} - System32\Tasks\FRAPS => E:\Users\Lukas\Desktop\Fraps\Fraps 3.5.99 by Elite48x\fraps.exe [2013-02-26] (Beepa P/L)
Task: {4FDC20CC-F992-4D68-B4B5-822F03BB9B46} - System32\Tasks\WSE_Lasaoren => C:\Users\Lukas\AppData\Roaming\WSE_Lasaoren\UpdateProc\UpdateTask.exe [2014-11-03] ()
Task: {5A4995C5-26E3-4025-A6C8-CAF9F5D7BD0A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-03] (Google Inc.)
Task: {7469D919-2193-45E6-842D-59935E960CFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-03] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WSE_Lasaoren.job => C:\Users\Lukas\AppData\Roaming\WSE_LA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-11-02 17:58 - 2014-10-30 03:10 - 00117064 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-03-06 15:00 - 2014-03-06 15:00 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\kpcengine.2.3.dll
2014-11-07 16:57 - 2014-11-07 16:57 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-04-20 01:42 - 2014-04-20 01:42 - 00468672 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
2014-04-20 01:42 - 2014-11-02 18:25 - 00642344 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll
2014-04-20 01:42 - 2014-04-20 01:42 - 00347328 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com\nponlinebanking.dll

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-1544055677-1025936548-340876858-500 - Administrator - Disabled)
Gast (S-1-5-21-1544055677-1025936548-340876858-501 - Limited - Disabled)
Lukas (S-1-5-21-1544055677-1025936548-340876858-1000 - Administrator - Enabled) => C:\Users\Lukas

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:05 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:05 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:05 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.

Error: (11/07/2014 10:25:05 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (1076)SUS20ClientDataStore: Die Kopfzeile der Protokolldatei C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log konnte nicht gelesen werden. Fehler -546.


System errors:
=============
Error: (11/07/2014 10:22:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%2

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "LogMeIn Hamachi Tunneling Engine" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet Monitoring Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA GeForce Experience Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Skype Click to Call PNR Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/07/2014 10:21:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Skype Click to Call Updater" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:06 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:05 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:05 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:05 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546

Error: (11/07/2014 10:25:05 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll1076SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546


CodeIntegrity Errors:
===================================
  Date: 2014-11-07 17:01:56.199
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-07 17:01:56.198
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-07 17:01:56.197
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-07 17:01:56.195
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-07 17:01:56.194
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-07 17:01:56.193
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-05 18:37:36.278
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-05 18:37:36.278
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-05 18:37:36.278
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-05 18:37:36.278
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Percentage of memory in use: 22%
Total physical RAM: 8112.8 MB
Available physical RAM: 6264.74 MB
Total Pagefile: 16223.74 MB
Available Pagefile: 13909.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:238.37 GB) (Free:199.37 GB) NTFS
Drive e: (Volume) (Fixed) (Total:1863.01 GB) (Free:1721.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 14C6687D)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: C2ECF3D8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

M-K-D-B · 07.11.2014, 22:36

Servus,

alle Schritte ausführen, auch AdwCleaner bitte nochmal.

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3
Bitte deaktiviere dein Anti-Viren-Programm, da es das Ergebnis beeinflussen oder ggf. die Bereinigung stören kann.
Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/ und speichere die Datei auf deinem Desktop.

Starte Zoek.exe mit einem Doppelklick.
Achtung: Das folgende Skript wurde nur für diesen speziellen Fall geschrieben und könnte andere Computer beschädigen.
Kopiere den Text der folgenden Box in das Skriptfenster von zoek:
Code:
ATTFilter
```
iedefaults;
resetIEproxy;
FFdefaults;
CHRdefaults;
emptyclsid;
         
```
Nun klicke auf "Run script" und sei geduldig bis das Skript durchgelaufen ist.
Wenn das Tool fertig ist, wird sich Notepad mit der Logdatei öffnen (ggf. erst nach einem Neustart). Das Log befindet sich aber auch noch unter c:\ .
Bitte poste mir das ZOEK-Log (möglichst in CODE-Tags - #-Symbol im Antwortfenster klicken).

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die Logdatei von Zoek,
die beiden neuen Logdateien von FRST.

RoketLaucher · 08.11.2014, 10:11

Code:

ATTFilter

# AdwCleaner v4.002 - Bericht erstellt am 07/11/2014 um 23:16:23
# Aktualisiert 27/10/2014 von Xplode
# Datenbank : 2014-11-07.1
# Betriebssystem : Windows 7 Home Premium  (64 bits)
# Benutzername : Lukas - LUKAS-PC
# Gestartet von : E:\Users\Lukas\Downloads\adwcleaner_4.002.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3AA4FC9D-FB51-44A2-B09F-0457857CA7C2}

***** [ Browser ] *****

-\\ Internet Explorer v8.0.7600.16385


-\\ Mozilla Firefox v33.0.3 (x86 de)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [7599 octets] - [07/11/2014 22:17:53]
AdwCleaner[R1].txt - [1023 octets] - [07/11/2014 22:46:01]
AdwCleaner[R2].txt - [885 octets] - [07/11/2014 23:16:23]
AdwCleaner[S0].txt - [6590 octets] - [07/11/2014 22:21:12]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1004 octets] ##########

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 07.11.2014 22:51:10, SYSTEM, LUKAS-PC, Protection, Malware Protection, Starting, 
Protection, 07.11.2014 22:51:10, SYSTEM, LUKAS-PC, Protection, Malware Protection, Started, 
Protection, 07.11.2014 22:51:10, SYSTEM, LUKAS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 07.11.2014 22:51:11, SYSTEM, LUKAS-PC, Protection, Malicious Website Protection, Started, 
Update, 07.11.2014 22:51:20, SYSTEM, LUKAS-PC, Manual, Rootkit Database, 2014.9.18.1, 2014.11.1.2, 
Update, 07.11.2014 22:51:22, SYSTEM, LUKAS-PC, Manual, Malware Database, 2014.9.19.5, 2014.11.7.6, 
Protection, 07.11.2014 22:51:22, SYSTEM, LUKAS-PC, Protection, Refresh, Starting, 
Protection, 07.11.2014 22:51:22, SYSTEM, LUKAS-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 07.11.2014 22:51:22, SYSTEM, LUKAS-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 07.11.2014 22:51:25, SYSTEM, LUKAS-PC, Protection, Refresh, Success, 
Protection, 07.11.2014 22:51:25, SYSTEM, LUKAS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 07.11.2014 22:51:25, SYSTEM, LUKAS-PC, Protection, Malicious Website Protection, Started, 
Scan, 07.11.2014 22:56:42, SYSTEM, LUKAS-PC, Manual, Start: % 1 "% 2", Dauer: % 1 min 4 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, 35-Malwareerkennung, 
Protection, 07.11.2014 22:57:14, SYSTEM, LUKAS-PC, Protection, Malware Protection, Starting, 
Protection, 07.11.2014 22:57:14, SYSTEM, LUKAS-PC, Protection, Malware Protection, Started, 
Protection, 07.11.2014 22:57:14, SYSTEM, LUKAS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 07.11.2014 22:57:14, SYSTEM, LUKAS-PC, Protection, Malicious Website Protection, Started, 

(end)

Code:

ATTFilter

Zoek.exe v5.0.0.0 Updated 06-November-2014
Tool run by Lukas on 07.11.2014 at 23:13:37,20.
Microsoft Windows 7 Home Premium  6.1.7600  x64
Running in: Normal Mode Internet Access Detected
Launched: E:\Users\Lukas\Downloads\zoek.exe [Scan all users] [Script inserted] 

==== Older Logs ======================

C:\zoek-results2014-11-07-220305.log	403 bytes

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1544055677-1025936548-340876858-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} deleted successfully
HKEY_USERS\S-1-5-21-1544055677-1025936548-340876858-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1544055677-1025936548-340876858-1000\Software\Mozilla\Firefox\Extensions\cliqz@cliqz.com deleted successfully

==== FireFox Fix ======================

Deleted from C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\prefs.js:

Added to C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\prefs.js:
user_pref("browser.startup.homepage", "hxxp://www.google.com");
user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "hxxp://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default

user.js not found
---- Lines cliqz@cliqz.com removed from prefs.js ----
user_pref("extensions.cliqz@cliqz.com.install-event-fired", true);
---- FireFox user.js and prefs.js backups ---- 

prefs__2314_.backup

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"online_banking@kaspersky.com"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com" [02.11.2014 18:25]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default
- Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
- Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
- Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
- Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
- Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
- Undetermined - content_blocker@kaspersky.com
- Undetermined - virtual_keyboard@kaspersky.com
- Undetermined - url_advisor@kaspersky.com
- Undetermined - anti_banner@kaspersky.com
- Undetermined - online_banking@kaspersky.com
- Undetermined - idmsq@idmsq.com
- Internet Download Manager Squared - %ProfilePath%\extensions\idmsq@idmsq.com
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default
63F8C13F269B10BC9363B007DAAACAE6	- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll -	Shockwave Flash


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://www.google.com"
"Default_Page_URL"="hxxp://www.google.com"
"Start Page"="hxxp://www.google.com"
"Search Page"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://www.google.com"
"Default_Page_URL"="hxxp://www.google.com"
"Start Page"="hxxp://www.google.com"
"Search Page"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GIWA_deDE612"
{A25AC313-DD19-4238-ACA2-401D6BEE4321} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GIWA_deDE612"

==== Reset Google Chrome ======================

C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== C:\zoek_backup content ======================

C:\zoek_backup (files=2 folders=0 13492 bytes)

==== EOF on 07.11.2014 at 23:14:41,02 ======================

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by Lukas (administrator) on LUKAS-PC on 07-11-2014 23:15:45
Running from E:\Users\Lukas\Downloads
Loaded Profile: Lukas (Available profiles: Lukas)
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) E:\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) E:\hamachi-2-ui.exe
(LogMeIn, Inc.) E:\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\klwtblfs.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\wmi64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2463552 2014-10-04] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => E:\hamachi-2-ui.exe [3835728 2014-11-03] (LogMeIn Inc.)
HKU\S-1-5-21-1544055677-1025936548-340876858-1000\...\Run: [swg] => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\S-1-5-21-1544055677-1025936548-340876858-1000\...\Run: [IDMSQ] => C:\Program Files (x86)\IDMSQ\idmsq.exe /startup
HKU\S-1-5-21-1544055677-1025936548-340876858-1000\...\MountPoints2: {5c187949-62e8-11e4-b362-806e6f6e6963} - D:\Run.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE54FEF6FBFF6CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://Lasaoren.com/results.php?f=4&q={searchTerms}&a=lrn_ggfx_14_45_ie&cd=2XzuyEtN2Y1L1QzuyByE0DyEtAyD0F0A0AtA0AtCzz0D0EtCtN0D0Tzu0StCtDtAzztN1L2XzutAtFyCtFtDtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StB0DyBtDzyyEzz0DtGtDzzyBzztGyB0EyB0DtG0BtBtDyEtGtCtAtD0AtA0A0F0B0B0A0Fzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0B0BtAtAtAzz0B0AtG0AyEtCtDtGyEyD0FtBtG0Azz0B0EtG0CtCyByByCyE0F0FzzyC0F0B2Q&cr=821214552&ir=
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Internet Download Manager Squared - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\Extensions\idmsq@idmsq.com [2014-11-07]
FF Extension: Adblock Plus - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\d8cpi6zw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-11-07]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Ngăn chặn trang web nguy hiểm - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Bàn phím ảo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Công cụ kiểm tra liên kết của Kaspersky - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: An toàn giao dịch tài chính - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-11-02]

Chrome: 
=======
CHR Profile: C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-04]
CHR Extension: (Docs) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-02]
CHR Extension: (Google Drive) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-02]
CHR Extension: (YouTube) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-02]
CHR Extension: (Google-Suche) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-02]
CHR Extension: (Google Tabellen) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-04]
CHR Extension: (Google Wallet) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-04]
CHR Extension: (Google Mail) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-02]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []
CHR HKLM-x32\...\Chrome\Extension: [ohenffmfbnoidogjgebadealdkecjdal] - C:\Users\Lukas\AppData\Roaming\IDMSQ\IDMSQ.crx []

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-10-04] (NVIDIA Corporation)
R2 Hamachi2Svc; E:\hamachi-2.exe [2530128 2014-11-03] (LogMeIn Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-10-04] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-10-04] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [494864 2013-08-29] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [141320 2014-11-02] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [793800 2014-11-02] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-10-04] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-07 23:14 - 2014-11-07 23:03 - 00000403 _____ () C:\zoek-results2014-11-07-220305.log
2014-11-07 23:03 - 2014-11-07 23:14 - 00007956 _____ () C:\zoek-results.log
2014-11-07 23:02 - 2014-11-07 23:14 - 00000000 ____D () C:\zoek_backup
2014-11-07 22:51 - 2014-11-07 22:57 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-07 22:50 - 2014-11-07 22:50 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-07 22:50 - 2014-11-07 22:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-07 22:50 - 2014-11-07 22:50 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-07 22:50 - 2014-11-07 22:50 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-11-07 22:50 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-07 22:50 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-07 22:50 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-07 22:32 - 2014-11-07 23:15 - 00000000 ____D () C:\FRST
2014-11-07 22:17 - 2014-11-07 22:46 - 00000000 ____D () C:\AdwCleaner
2014-11-07 21:30 - 2014-11-07 21:30 - 00003146 _____ () C:\Windows\System32\Tasks\{AD6FC708-3834-4FC3-A576-C690F255E524}
2014-11-07 20:51 - 2014-11-07 20:51 - 00000000 ____D () C:\MININT
2014-11-07 16:57 - 2014-11-07 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-06 22:36 - 2014-11-06 22:36 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-11-06 22:27 - 2014-11-06 22:27 - 831908289 _____ () C:\Windows\MEMORY.DMP
2014-11-06 22:27 - 2014-11-06 22:27 - 00309552 _____ () C:\Windows\Minidump\110614-6552-01.dmp
2014-11-06 22:27 - 2014-11-06 22:27 - 00000000 ____D () C:\Windows\Minidump
2014-11-06 19:36 - 2014-11-07 23:14 - 00000000 ____D () C:\Users\Lukas\AppData\Local\CrashDumps
2014-11-05 18:12 - 2014-11-05 18:12 - 00022528 _____ () C:\Users\Lukas\AppData\Local\759974dsisetup7650602.exe
2014-11-05 18:12 - 2014-11-05 18:12 - 00000001 _____ () C:\Users\Lukas\AppData\Local\DSI.DAT
2014-11-05 18:09 - 2014-11-05 18:09 - 00000000 ____D () C:\Users\Lukas\AppData\Local\LogMeIn
2014-11-05 18:09 - 2014-11-05 18:09 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-11-04 21:43 - 2014-11-04 21:43 - 00003356 _____ () C:\Users\Lukas\AppData\Local\recently-used.xbel
2014-11-04 21:06 - 2014-11-04 21:43 - 00000000 ____D () C:\Users\Lukas\AppData\Local\gtk-2.0
2014-11-04 21:06 - 2014-11-04 21:06 - 00000000 ____D () C:\Users\Lukas\.thumbnails
2014-11-04 20:26 - 2014-11-07 23:13 - 00000000 ____D () C:\Users\Lukas\AppData\Local\LogMeIn Hamachi
2014-11-04 20:25 - 2014-11-04 20:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-11-04 20:09 - 2014-11-04 20:09 - 00000000 ____D () C:\Users\Lukas\Tracing
2014-11-04 19:51 - 2014-11-04 19:51 - 00002486 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-11-04 19:51 - 2014-11-04 19:51 - 00001458 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-11-04 19:51 - 2014-11-04 19:51 - 00001374 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-11-04 19:51 - 2014-11-04 19:51 - 00001305 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-11-04 19:51 - 2014-11-04 19:51 - 00000195 _____ () C:\Windows\DirectX.log
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Windows\PCHEALTH
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Windows\de
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Program Files\Windows Live
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-11-04 19:51 - 2014-11-04 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-11-04 19:51 - 2013-02-05 22:06 - 00057840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2014-11-04 19:51 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-11-04 19:51 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-11-04 19:51 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-11-04 19:51 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-11-04 19:51 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-11-04 19:51 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-11-04 19:51 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-11-04 19:51 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-11-04 19:50 - 2014-11-04 20:09 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Windows Live
2014-11-04 19:50 - 2014-11-04 19:50 - 00002138 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-11-04 19:50 - 2014-11-04 19:50 - 00002120 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-11-04 19:50 - 2014-11-04 19:50 - 00002120 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-11-04 19:50 - 2014-11-04 19:50 - 00000000 ___RD () C:\Users\Lukas\SkyDrive
2014-11-04 19:50 - 2014-11-04 19:50 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-11-04 19:50 - 2014-11-04 19:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-11-04 19:50 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-11-04 19:50 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-11-04 19:47 - 2014-11-04 21:43 - 00000000 ____D () C:\Users\Lukas\.gimp-2.8
2014-11-04 19:47 - 2014-11-04 19:47 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-11-04 19:47 - 2014-11-04 19:47 - 00000000 ____D () C:\Users\Lukas\AppData\Local\gegl-0.2
2014-11-04 19:46 - 2014-11-04 19:47 - 00000000 ____D () C:\Program Files\GIMP 2
2014-11-04 19:08 - 2014-10-30 01:56 - 00614728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-11-04 19:07 - 2014-10-30 05:53 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 24554824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 17258696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 13189832 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-04 19:07 - 2014-10-30 05:53 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 04011840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434460.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434460.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00961224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00932168 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00922944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00896144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00870112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00416912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00391824 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00349504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-04 19:07 - 2014-10-30 05:53 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-04 19:06 - 2014-11-07 23:13 - 00003228 _____ () C:\Windows\System32\Tasks\FRAPS
2014-11-04 19:05 - 2014-11-04 19:05 - 00000740 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-11-04 19:05 - 2014-11-04 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-11-04 18:36 - 2014-11-04 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-11-04 18:36 - 2014-11-04 18:36 - 00000000 ____D () C:\Program Files\7-Zip
2014-11-04 18:36 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-11-04 18:36 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-11-03 22:27 - 2014-11-03 22:27 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\LolClient
2014-11-03 20:36 - 2014-11-03 20:36 - 00000000 ____D () C:\ProgramData\Riot Games
2014-11-03 20:35 - 2014-11-03 20:35 - 00000017 _____ () C:\Users\Lukas\AppData\Local\resmon.resmoncfg
2014-11-03 20:34 - 2014-11-03 20:35 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Riot Games
2014-11-03 20:34 - 2014-11-03 20:34 - 00001613 _____ () C:\Users\Public\Desktop\League of Legends.lnk
2014-11-03 20:34 - 2014-11-03 20:34 - 00000000 ____D () C:\Riot Games
2014-11-03 20:34 - 2014-11-03 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-11-03 20:34 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-11-03 20:34 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-11-03 20:34 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-11-03 20:34 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-11-03 20:34 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-11-03 20:12 - 2014-11-07 17:12 - 00000129 _____ () C:\Users\Lukas\AppData\Roaming\WB.CFG
2014-11-03 20:03 - 2014-11-03 20:03 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-11-03 20:03 - 2014-11-03 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-03 20:03 - 2014-11-03 20:03 - 00000000 ____D () C:\Program Files\Java
2014-11-03 19:58 - 2014-11-03 19:58 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Macromedia
2014-11-03 19:58 - 2014-11-03 19:58 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Adobe
2014-11-03 19:58 - 2014-11-03 19:58 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Macromedia
2014-11-03 19:56 - 2014-11-07 23:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-03 19:56 - 2014-11-03 19:57 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Adobe
2014-11-03 19:56 - 2014-11-03 19:56 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-03 19:56 - 2014-11-03 19:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-03 19:56 - 2014-11-03 19:56 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-03 19:56 - 2014-11-03 19:56 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-11-03 19:56 - 2014-11-03 19:56 - 00000000 ____D () C:\Windows\system32\Macromed
2014-11-03 19:56 - 2014-11-03 19:56 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-03 19:49 - 2014-11-03 19:49 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-11-03 19:49 - 2014-11-03 19:49 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-11-03 19:44 - 2014-11-05 18:34 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-03 19:44 - 2014-11-05 18:34 - 00000000 ____D () C:\ProgramData\Skype
2014-11-03 19:44 - 2014-11-05 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-03 19:44 - 2014-11-04 18:43 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Skype
2014-11-03 19:44 - 2014-11-03 19:44 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-03 19:44 - 2014-11-03 19:44 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype
2014-11-03 19:38 - 2014-11-03 19:38 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\NVIDIA
2014-11-03 19:35 - 2014-11-07 21:45 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\TS3Client
2014-11-03 19:35 - 2014-11-03 19:35 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-11-03 19:35 - 2014-11-03 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-11-03 19:35 - 2014-11-03 19:35 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-11-03 19:31 - 2014-11-07 18:18 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\.minecraft
2014-11-03 19:31 - 2014-11-03 19:31 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\java
2014-11-03 19:30 - 2014-11-03 19:30 - 00000000 ____D () C:\ProgramData\Sun
2014-11-03 19:30 - 2014-11-03 19:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-03 19:26 - 2014-11-03 19:26 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-03 19:26 - 2014-11-03 19:26 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-03 19:14 - 2014-11-07 21:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-03 19:14 - 2014-11-03 19:14 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Mozilla
2014-11-03 19:14 - 2014-11-03 19:14 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Mozilla
2014-11-03 19:14 - 2014-11-03 19:14 - 00000000 ____D () C:\ProgramData\Mozilla
2014-11-03 19:12 - 2014-11-03 19:12 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\1H1Q1V1N1N1O2V
2014-11-03 18:47 - 2014-11-03 18:47 - 00057560 _____ () C:\Users\Lukas\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-03 00:51 - 2014-11-03 00:51 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-11-03 00:51 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-03 00:51 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-11-03 00:50 - 2014-11-04 19:08 - 00000000 ____D () C:\temp
2014-11-03 00:50 - 2014-11-04 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-03 00:50 - 2014-11-04 19:08 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-03 00:50 - 2014-11-03 00:51 - 00000000 ____D () C:\Users\Lukas\AppData\Local\NVIDIA Corporation
2014-11-03 00:50 - 2014-11-03 00:51 - 00000000 ____D () C:\Users\Lukas\AppData\Local\NVIDIA
2014-11-03 00:50 - 2014-11-02 17:58 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-03 00:50 - 2014-11-02 17:58 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-03 00:50 - 2014-10-04 07:42 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-11-03 00:50 - 2014-10-04 07:42 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-11-03 00:50 - 2014-10-04 07:41 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-11-03 00:50 - 2014-10-04 07:41 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-11-03 00:50 - 2014-09-04 20:14 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-11-03 00:43 - 2014-11-07 22:57 - 00840394 _____ () C:\Windows\PFRO.log
2014-11-03 00:42 - 2014-11-03 00:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-11-03 00:42 - 2014-11-03 00:42 - 00000000 ____D () C:\Intel
2014-11-03 00:42 - 2014-02-21 06:56 - 00791024 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-11-03 00:42 - 2014-02-21 06:56 - 00370672 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-11-03 00:42 - 2014-02-21 06:56 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-11-03 00:41 - 2014-11-03 00:41 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-11-03 00:40 - 2014-11-03 00:40 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-03 00:40 - 2014-11-03 00:40 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-03 00:40 - 2014-11-03 00:40 - 00000000 ____D () C:\Program Files\Realtek
2014-11-03 00:40 - 2013-10-31 21:36 - 00001904 ____N () C:\Windows\system32\SetupBD.din
2014-11-03 00:40 - 2013-09-26 08:13 - 00565048 ____R (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-11-03 00:40 - 2013-08-29 09:49 - 00494864 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys
2014-11-03 00:40 - 2013-07-24 19:36 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll
2014-11-03 00:40 - 2013-07-10 23:36 - 00089888 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll
2014-11-03 00:40 - 2012-01-06 06:03 - 00003114 _____ () C:\Windows\system32\e1d62x64.din
2014-11-03 00:40 - 2009-05-26 02:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-11-03 00:39 - 2014-03-14 12:08 - 03896920 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-03 00:39 - 2014-03-14 10:14 - 00628440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-03 00:39 - 2014-03-14 07:42 - 00947928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-03 00:39 - 2014-03-12 10:19 - 57362432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-11-03 00:39 - 2014-03-11 14:50 - 00853784 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-03 00:39 - 2014-03-11 03:06 - 01738032 _____ () C:\Windows\system32\SStudio.dll
2014-11-03 00:39 - 2014-03-07 03:57 - 02794200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-11-03 00:39 - 2014-03-06 09:35 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-03 00:39 - 2014-03-04 22:11 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-11-03 00:39 - 2014-03-04 22:11 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-11-03 00:39 - 2014-03-04 22:11 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-11-03 00:39 - 2014-03-04 22:11 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-11-03 00:39 - 2014-03-04 13:27 - 02831576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-03 00:39 - 2014-03-03 13:21 - 01019608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-03 00:39 - 2014-02-27 13:02 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-11-03 00:39 - 2014-02-26 01:48 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-11-03 00:39 - 2014-02-26 01:47 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-11-03 00:39 - 2014-02-18 11:12 - 01042520 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-03 00:39 - 2014-02-18 11:12 - 00882776 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-11-03 00:39 - 2014-02-18 07:48 - 02396760 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-11-03 00:39 - 2014-02-18 07:48 - 01424984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-11-03 00:39 - 2014-02-18 07:48 - 01423960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 28314200 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 14742104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 12816472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 03927640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 02040920 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-03 00:39 - 2014-02-16 13:30 - 01933400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-11-03 00:39 - 2014-02-06 04:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-11-03 00:39 - 2014-01-31 10:28 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-11-03 00:39 - 2014-01-31 10:27 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-11-03 00:39 - 2014-01-28 04:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-03 00:39 - 2013-10-11 04:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-11-03 00:39 - 2013-08-20 10:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll
2014-11-03 00:39 - 2013-08-14 08:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-11-03 00:39 - 2013-08-14 08:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-11-03 00:39 - 2013-06-25 05:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-11-03 00:39 - 2013-06-25 05:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-11-03 00:39 - 2013-06-25 05:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-11-03 00:39 - 2013-04-03 07:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-11-03 00:39 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-11-03 00:39 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-11-03 00:39 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-11-03 00:39 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-11-03 00:39 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-11-03 00:39 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-11-03 00:39 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-11-03 00:39 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-03 00:39 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-03 00:39 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-11-03 00:39 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-11-03 00:39 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-11-03 00:39 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-11-03 00:39 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-11-03 00:39 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-03 00:39 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-03 00:39 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-03 00:39 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-03 00:39 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-11-03 00:39 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-03 00:39 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-03 00:39 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-03 00:39 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-03 00:38 - 2014-11-03 00:42 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-11-03 00:38 - 2014-11-03 00:41 - 00000000 ____D () C:\Program Files\Intel
2014-11-03 00:38 - 2014-11-03 00:40 - 00000206 _____ () C:\Install.log
2014-11-03 00:38 - 2014-11-03 00:40 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____H () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____D () C:\Users\Lukas\Intel
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____D () C:\ProgramData\Intel
2014-11-03 00:38 - 2014-11-03 00:38 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-11-03 00:38 - 2014-02-26 08:16 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-11-03 00:38 - 2014-02-18 10:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-03 00:38 - 2013-10-15 20:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-03 00:38 - 2013-10-11 05:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-03 00:38 - 2013-10-06 17:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-11-03 00:38 - 2013-10-06 17:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-11-03 00:38 - 2013-10-06 17:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-11-03 00:38 - 2013-09-09 21:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-11-03 00:38 - 2013-09-09 21:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-11-03 00:38 - 2013-09-09 21:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-11-03 00:38 - 2013-09-09 21:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-11-03 00:38 - 2013-06-21 04:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-11-03 00:38 - 2012-07-26 05:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-11-03 00:38 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-11-03 00:38 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-11-03 00:38 - 2012-06-02 15:35 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-11-03 00:38 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-11-03 00:38 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-11-03 00:37 - 2014-11-07 21:08 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-03 00:37 - 2014-11-02 18:19 - 00000000 ____D () C:\ProgramData\Norton
2014-11-03 00:36 - 2014-11-03 00:36 - 01558224 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-11-03 00:36 - 2009-11-25 11:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2014-11-03 00:36 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2014-11-03 00:36 - 2009-11-25 11:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2014-11-03 00:36 - 2009-11-25 11:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2014-11-03 00:35 - 2014-11-07 23:13 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-03 00:35 - 2014-11-07 22:48 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-03 00:35 - 2014-11-07 22:11 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-03 00:35 - 2014-11-06 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-11-03 00:35 - 2014-11-04 20:27 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Google
2014-11-03 00:35 - 2014-11-03 19:43 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-03 00:35 - 2014-11-03 19:43 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-03 00:35 - 2014-11-03 00:35 - 00000000 ____D () C:\Users\Lukas\AppData\LocalGoogle
2014-11-03 00:35 - 2014-11-03 00:35 - 00000000 ____D () C:\ProgramData\Google
2014-11-03 00:35 - 2014-11-03 00:35 - 00000000 ____D () C:\Program Files\Google
2014-11-03 00:34 - 2014-11-03 00:34 - 00000010 _____ () C:\Windows\GSetup.ini
2014-11-02 18:22 - 2014-11-07 23:13 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-11-02 18:22 - 2014-11-02 18:25 - 00793800 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-11-02 18:22 - 2014-11-02 18:25 - 00141320 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-11-02 18:22 - 2014-11-02 18:22 - 00001196 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-11-02 18:22 - 2014-11-02 18:22 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-11-02 18:22 - 2014-11-02 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-11-02 18:22 - 2014-11-02 18:22 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-11-02 18:22 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-11-02 18:22 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-11-02 18:07 - 2014-11-02 18:07 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Google
2014-11-02 17:58 - 2014-11-07 22:57 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-02 17:58 - 2014-11-02 17:58 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-02 17:58 - 2014-10-30 05:53 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-11-02 17:58 - 2014-10-30 05:53 - 00060744 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 06880968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 00935232 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-02 17:58 - 2014-10-30 03:10 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-02 17:58 - 2014-10-30 03:10 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-02 17:58 - 2014-10-27 01:34 - 04066553 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-02 17:57 - 2014-10-30 05:53 - 20966504 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 18497600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 00987008 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-11-02 17:57 - 2014-10-30 05:53 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-02 17:57 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll
2014-11-02 17:57 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll
2014-11-02 17:57 - 2014-10-16 17:54 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-11-02 17:57 - 2014-10-16 17:54 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-11-02 17:57 - 2014-10-16 17:54 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-11-02 17:56 - 2014-09-04 20:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-02 17:56 - 2014-09-04 20:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-01 23:54 - 2014-11-01 23:54 - 00001439 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-01 23:54 - 2014-11-01 23:54 - 00001405 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-11-01 23:53 - 2014-11-07 22:56 - 00265603 _____ () C:\Windows\WindowsUpdate.log
2014-11-01 23:53 - 2014-11-04 21:06 - 00000000 ____D () C:\Users\Lukas
2014-11-01 23:53 - 2014-11-02 17:59 - 00000000 ____D () C:\Users\Lukas\AppData\Local\VirtualStore
2014-11-01 23:53 - 2014-11-01 23:53 - 00000020 ___SH () C:\Users\Lukas\ntuser.ini
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Vorlagen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Startmenü
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Netzwerkumgebung
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Lokale Einstellungen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Eigene Dateien
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Druckumgebung
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\AppData\Local\Verlauf
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\AppData\Local\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Lukas\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-11-01 23:53 - 2014-11-01 23:53 - 00000000 __SHD () C:\Recovery
2014-11-01 23:53 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 23:53 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 23:50 - 2014-11-01 23:50 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-11-01 23:50 - 2014-11-01 23:50 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-11-01 23:50 - 2014-11-01 23:50 - 00001313 _____ () C:\Windows\TSSysprep.log
2014-11-01 23:48 - 2014-11-01 23:53 - 00000000 ____D () C:\Windows\Panther

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-07 23:04 - 2009-07-14 05:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-07 23:04 - 2009-07-14 05:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-07 23:03 - 2009-07-14 18:58 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-11-07 23:03 - 2009-07-14 18:58 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-11-07 23:03 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-07 22:57 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-07 22:57 - 2009-07-14 05:51 - 00023263 _____ () C:\Windows\setupact.log
2014-11-07 22:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-11-07 21:46 - 2009-07-14 05:45 - 00281816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-07 20:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources
2014-11-05 18:08 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-04 19:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-11-04 18:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-03 00:35 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-11-03 00:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-02 17:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-11-01 23:59 - 2009-07-14 19:18 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-11-01 23:53 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-11-01 23:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-01 23:50 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-01 23:50 - 2009-07-14 05:46 - 00001774 _____ () C:\Windows\DtcInstall.log
2014-11-01 23:50 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 23:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-11-01 23:48 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-11-01 23:48 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

Some content of TEMP:
====================
C:\Users\Lukas\AppData\Local\Temp\Nv3DVisionIePlugin.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVisionIePlugin64.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVStreaming.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVStreaming64.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVStreamingIePlugin.dll
C:\Users\Lukas\AppData\Local\Temp\Nv3DVStreamingIePlugin64.dll
C:\Users\Lukas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Lukas\AppData\Local\Temp\nvStInst.exe
C:\Users\Lukas\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-05 18:37

==================== End Of Log ============================

--- --- ---

--- --- ---

Ich hab nun Firefox zurückgesetzt. Nun kannn ich wieder downloaden. Ka ob ich immer noch so viel Werbung bekomme, ich melde mich nochmal wie es mit der Werbung aussieht.

M-K-D-B · 08.11.2014, 17:36

Servus,

bitte die richtige Logdatei von MBAM posten (Suchlaufprotokoll).

Zudem erstellt FRST zwei Logdateien (FRST.txt und Addition.txt), wenn du es so ausführst, wie ich es in meiner letzten Antwort geschrieben habe.

Bitte die Logdateien nachreichen, dann kann es weitergehen.

M-K-D-B · 13.11.2014, 15:06

Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!

08.11.2014, 17:36	#6
M-K-D-B /// TB-Ausbilder	Websiten öffnen sich selbständig! & Ein Programm verhindert Downloads von Internet! Servus, bitte die richtige Logdatei von MBAM posten (Suchlaufprotokoll). Zudem erstellt FRST zwei Logdateien (FRST.txt und Addition.txt), wenn du es so ausführst, wie ich es in meiner letzten Antwort geschrieben habe. Bitte die Logdateien nachreichen, dann kann es weitergehen.

Websiten öffnen sich selbständig! & Ein Programm verhindert Downloads von Internet!

Plagegeister aller Art und deren Bekämpfung: Websiten öffnen sich selbständig! & Ein Programm verhindert Downloads von Internet!