| |
| |||||||
Log-Analyse und Auswertung: Avast Schädliche Datei Blockade Mozilla FirefoxWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
13.11.2014, 14:20
| #1 |
| |  Avast Schädliche Datei Blockade Mozilla Firefox Avast findet permanent Schädliche Datein und blockiert sie, sobald ich Mozilla Firefox öffne. Avast findet aber keine Viren, aus diesem Grund bin ich Planlos.  Ich habe bemerkt, dass es meine Logindaten im Facebook nicht abspeichert, obwohl ich "Eingelogt bleiben" anklicke. Das trifft eigentlich auf alle Seiten zu, wo man sich anmelden muss. Unter anderen auch Yahoo, Last.fm und der gleichen. Ich bitte um Hilfe |
|
13.11.2014, 14:39
| #2 |
| Ruhe in Frieden † 2019     | Avast Schädliche Datei Blockade Mozilla Firefox Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist. Posten in Code Tags Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke. Dazu:
Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
13.11.2014, 14:47
| #3 |
| | ScansFRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014 Ran by Scotty (administrator) on SCOTT on 13-11-2014 14:45:20 Running from C:\Users\Scotty\Desktop Loaded Profile: Scotty (Available profiles: Scotty) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) D:\Programme\Avast\AvastSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Windows\SysWOW64\SMITSC.exe (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe (Avast Software) D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) D:\Programme\Avast\ng\ngservice.exe (Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe () C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe () C:\Program Files\TOSHIBA\Hotkey\Hotkey\TCrdKBB.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe (TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe () C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe (AVAST Software) D:\Programme\Avast\avastui.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (Valve Corporation) D:\SteamLibrary\Steam\Steam.exe (Valve Corporation) D:\SteamLibrary\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) D:\SteamLibrary\Steam\bin\steamwebhelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13261456 2012-12-10] (Realtek Semiconductor) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [SRS Premium Sound 3D] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-19] (SRS Labs, Inc.) HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-30] () HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation) HKLM\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-04] (TOSHIBA Corporation) HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] () HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation) HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated) HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation) HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software) HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.) AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-09-06] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShA64.dll (AVAST Software) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com SearchScopes: HKLM - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM-x32 - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM-x32 - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE.dll (AVAST Software) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll () FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin HKU\S-1-5-21-549461420-2757155598-784121854-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: YoutubeAdBlocke - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\CnZ@P.edu [2014-11-12] FF Extension: Deutsch (DE) Language Pack - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-07-19] FF Extension: Download Status Bar - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2014-07-19] FF Extension: Gutscheinaffe - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9220f99f-5b7d-4a4d-97ca-209991796400}.xpi [2014-07-19] FF Extension: ImTranslator - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-07-19] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\Avast\WebRep\FF FF Extension: Avast Online Security - D:\Programme\Avast\WebRep\FF [2014-11-01] FF Extension: No Name - wrc@avast.com [Not Found] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-01] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-01] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; D:\Programme\Avast\AvastSvc.exe [50344 2014-11-01] (AVAST Software) R3 AvastVBoxSvc; D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-01] (Avast Software) S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-24] (Microsoft Corporation) R2 MBAMScheduler; D:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation) R2 MBAMService; D:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] () S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-24] (Microsoft Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor) R2 SMITS; C:\windows\SysWOW64\SMITSC.exe [13312 2014-03-06] () [File not signed] S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-01] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-01] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-01] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-01] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-01] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-01] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-01] () R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-13] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3349984 2014-04-17] (Intel Corporation) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated) R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider) R2 VBoxAswDrv; D:\Programme\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-11-01] (Avast Software) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-13 14:45 - 2014-11-13 14:45 - 00014219 _____ () C:\Users\Scotty\Desktop\FRST.txt 2014-11-13 14:45 - 2014-11-13 14:45 - 00000000 ____D () C:\FRST 2014-11-13 14:43 - 2014-11-13 14:43 - 02116096 _____ (Farbar) C:\Users\Scotty\Desktop\FRST64.exe 2014-11-13 14:02 - 2014-11-13 14:02 - 05597734 _____ (Swearware) C:\Users\Scotty\Downloads\ComboFix.exe 2014-11-13 14:00 - 2014-11-13 14:00 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-13-00-07.064-AvastVBoxSVC.exe-3616.log 2014-11-13 13:51 - 2014-11-13 13:58 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-11-13 13:51 - 2014-11-13 13:51 - 00000762 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-11-13 13:51 - 2014-11-13 13:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-11-13 13:51 - 2014-11-13 13:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-13 13:51 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-11-13 13:51 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-11-13 13:51 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-11-13 13:50 - 2014-11-13 13:50 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-13 13:50 - 2014-11-13 13:50 - 00451205 _____ () C:\Users\Scotty\Downloads\Last.fm_Scrobbler_1.0.2.29.mmip 2014-11-13 13:38 - 2014-11-13 13:38 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-12-38-51.090-AvastVBoxSVC.exe-3436.log 2014-11-12 22:46 - 2014-11-12 22:46 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-11-12 22:46 - 2014-11-12 22:46 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-12 22:34 - 2014-11-12 22:34 - 00000204 _____ () C:\Users\Scotty\Desktop\File Search Engine FileTram.URL 2014-11-12 22:33 - 2014-11-12 22:33 - 00000217 _____ () C:\Users\Scotty\Desktop\Google.URL 2014-11-12 22:33 - 2014-11-12 22:33 - 00000212 _____ () C:\Users\Scotty\Desktop\Google Übersetzer.URL 2014-11-12 22:33 - 2014-11-12 22:33 - 00000208 _____ () C:\Users\Scotty\Desktop\FilesTube - Files Search Engine, Search & Download.URL 2014-11-12 22:33 - 2014-11-12 22:33 - 00000000 ____D () C:\Users\Scotty\Desktop\Musik 2014-11-12 22:32 - 2014-11-12 22:33 - 00000321 _____ () C:\Users\Scotty\Desktop\Facebook.URL 2014-11-12 22:32 - 2014-11-12 22:32 - 00000433 _____ () C:\Users\Scotty\Desktop\Chronik-Fotos - Hot Schönheiten aus dem Osten.URL 2014-11-12 22:32 - 2014-11-12 22:32 - 00000245 _____ () C:\Users\Scotty\Desktop\(179 ungelesen) – superscotttom – Yahoo Mail.URL 2014-11-12 22:32 - 2014-11-12 22:32 - 00000225 _____ () C:\Users\Scotty\Desktop\Ports, die Sie in Windows-Firewall öffnen müssen, um ein Multiplayer-Spiel von Age of Empires III zu spielen oder Gastgeber .URL 2014-11-12 22:32 - 2014-11-12 22:32 - 00000209 _____ () C:\Users\Scotty\Desktop\Startseite – Last.fm.URL 2014-11-12 22:22 - 2014-11-12 22:22 - 00000000 ____D () C:\ProgramData\4015569669760776887 2014-11-12 22:21 - 2014-11-12 22:21 - 00001631 _____ () C:\Users\Scotty\Desktop\MediaMonkey Gold.lnk 2014-11-12 22:02 - 2014-11-12 22:02 - 15204184 _____ (Ventis Media Inc. ) C:\Users\Scotty\Downloads\MediaMonkey_4.1.5.1719.exe 2014-11-12 21:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-11-12 21:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2014-11-12 21:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-11-12 21:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-11-12 21:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll 2014-11-12 21:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2014-11-12 21:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2014-11-12 21:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2014-11-12 21:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-11-12 21:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll 2014-11-12 21:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2014-11-12 21:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-11-12 21:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-11-12 21:12 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2014-11-12 21:12 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2014-11-12 21:12 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2014-11-12 21:12 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2014-11-12 21:12 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2014-11-12 21:11 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-11-12 21:11 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-11-12 21:11 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2014-11-12 21:11 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-11-12 21:11 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll 2014-11-12 21:11 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-11-12 21:11 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-11-12 21:11 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-11-12 21:11 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-11-12 21:11 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-11-12 21:11 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-11-12 21:11 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-11-12 21:11 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-11-12 21:11 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-11-12 21:11 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-11-12 21:11 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-11-12 21:11 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-11-12 21:11 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-11-12 21:11 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2014-11-12 21:11 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2014-11-12 21:11 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2014-11-12 21:11 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2014-11-12 21:11 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll 2014-11-12 21:11 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll 2014-11-12 21:11 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-11-12 21:11 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-11-12 21:10 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-11-12 21:10 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-11-12 21:10 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2014-11-12 21:10 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-11-12 21:10 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-11-12 21:10 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-11-12 21:10 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2014-11-12 21:10 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll 2014-11-12 21:10 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll 2014-11-12 21:09 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe 2014-11-12 21:09 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe 2014-11-12 21:09 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe 2014-11-12 21:09 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll 2014-11-12 21:09 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2014-11-12 21:09 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-11-12 21:09 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-11-12 21:09 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2014-11-12 21:09 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2014-11-12 21:09 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-11-12 21:09 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-11-12 21:09 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll 2014-11-12 21:09 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2014-11-12 21:09 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2014-11-12 21:09 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2014-11-12 21:09 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-11-12 21:09 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-11-12 21:09 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-11-12 21:09 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-11-12 21:09 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2014-11-12 21:09 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-11-12 21:09 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll 2014-11-12 21:09 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll 2014-11-12 21:09 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2014-11-12 21:09 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll 2014-11-12 21:09 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-11-12 21:09 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-11-12 21:09 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2014-11-12 21:09 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2014-11-12 21:09 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-11-12 21:09 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2014-11-12 21:09 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2014-11-12 21:09 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2014-11-12 21:09 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2014-11-12 21:09 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-11-12 21:09 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-11-12 21:09 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-11-12 21:09 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-11-12 21:09 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-11-12 21:09 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-11-12 21:09 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll 2014-11-12 21:09 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-11-12 21:09 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe 2014-11-12 21:09 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe 2014-11-12 21:09 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe 2014-11-12 21:09 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll 2014-11-12 21:09 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2014-11-12 21:09 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-11-12 21:09 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll 2014-11-12 21:09 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-11-12 21:09 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2014-11-12 21:09 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-11-12 21:09 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2014-11-12 21:09 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-11-12 21:09 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-11-12 21:09 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-11-12 21:09 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-11-12 21:09 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll 2014-11-12 21:09 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2014-11-12 21:09 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2014-11-12 21:09 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2014-11-12 21:09 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-11-12 21:09 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-11-12 21:09 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll 2014-11-12 21:09 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-11-12 21:09 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2014-11-12 21:09 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-11-12 21:09 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2014-11-12 21:09 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-11-12 21:09 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2014-11-12 21:09 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-11-12 21:09 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll 2014-11-12 21:09 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-11-12 21:09 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2014-11-12 21:09 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2014-11-12 21:09 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-11-12 21:09 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-11-12 21:09 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-11-12 21:09 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-11-12 21:09 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-11-12 21:09 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll 2014-11-12 21:09 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-11-12 21:09 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-11-12 21:09 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-11-12 21:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll 2014-11-12 21:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll 2014-11-12 21:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-11-12 21:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2014-11-12 21:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-11-12 21:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-11-12 21:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-11-12 21:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-11-12 21:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-11-12 21:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-11-12 21:09 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2014-11-12 21:09 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-11-12 21:09 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-11-12 21:09 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-11-12 21:09 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-11-12 21:09 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-11-12 21:09 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-11-12 21:09 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-11-12 21:09 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2014-11-12 21:09 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2014-11-12 21:09 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-11-12 21:09 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-11-12 21:09 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-11-12 21:09 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll 2014-11-12 21:09 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll 2014-11-12 21:09 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-11-12 21:09 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll 2014-11-12 21:09 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-11-12 21:09 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-11-12 21:09 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-11-12 21:09 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-11-12 21:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-11-12 21:09 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-11-12 21:09 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-11-12 21:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-11-12 21:09 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-11-12 21:09 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2014-11-12 21:09 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2014-11-11 15:50 - 2014-11-11 15:50 - 00000157 _____ () C:\WINDOWS\system32\2014-11-11-14-50-38.003-AvastVBoxSVC.exe-3684.log 2014-11-11 15:48 - 2014-11-11 15:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-11-11 15:44 - 2014-11-12 22:50 - 00000000 ____D () C:\AdwCleaner 2014-11-11 15:43 - 2014-11-11 15:43 - 02140160 _____ () C:\Users\Scotty\Desktop\AdwCleaner_4.101.exe 2014-11-08 19:37 - 2014-11-12 22:49 - 00000000 ____D () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7 2014-11-08 19:10 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Chromium 2014-11-08 19:09 - 2014-11-08 19:09 - 00000000 ____D () C:\Users\Scotty\AppData\Local\The Lord of the Rings Online 2014-11-08 18:54 - 2014-11-08 18:54 - 00000816 _____ () C:\Users\Public\Desktop\Play Euro Truck Simulator 2 Multiplayer.lnk 2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\Users\Scotty\Documents\ETS2MP 2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer 2014-11-08 18:03 - 2014-11-11 15:47 - 00000000 ____D () C:\Program Files (x86)\EnterDigital 2014-11-08 18:02 - 2014-11-08 18:02 - 00860576 _____ ( ) C:\Users\Scotty\Downloads\OpenofficeSetup.exe 2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieUserList 2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieSiteList 2014-11-08 15:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2014-11-08 15:05 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2014-11-08 15:04 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\Documents\The Lord of the Rings Online 2014-11-08 15:04 - 2014-11-08 15:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Turbine 2014-11-08 15:04 - 2014-11-08 15:04 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Akamai 2014-11-02 23:19 - 2014-11-02 23:19 - 00000097 _____ () C:\Users\Scotty\AppData\Roaming\LauncherSettings_live.cfg 2014-11-02 22:40 - 2014-11-02 22:40 - 00000040 _____ () C:\Users\Scotty\AppData\Roaming\TheHunterSettings_steam_live.cfg 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\Documents\theHunter 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunter 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\theHunter 2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunterSteam 2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\ProgramData\Hunter 2014-11-01 16:54 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-54-58.025-aswFe.exe-7940.log 2014-11-01 16:52 - 2014-11-13 13:51 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-11-01 16:52 - 2014-11-01 16:52 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-11-01 16:50 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-50-59.092-aswFe.exe-3560.log 2014-11-01 16:50 - 2014-11-01 16:51 - 00000157 _____ () C:\WINDOWS\system32\2014-11-01-15-50-58.091-AvastVBoxSVC.exe-5864.log 2014-11-01 16:50 - 2014-11-01 16:50 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\AVAST Software 2014-11-01 16:49 - 2014-11-04 16:09 - 00004144 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2014-11-01 16:49 - 2014-11-01 16:49 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-11-01 16:49 - 2014-11-01 16:49 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-11-01 16:49 - 2014-11-01 16:49 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00000838 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\system32\vbox 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-11-01 16:46 - 2014-11-01 16:46 - 131078000 _____ (AVAST Software) C:\Users\Scotty\Downloads\avast_free_antivirus_setup.exe 2014-10-27 00:14 - 2014-11-04 16:16 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Nero 2014-10-27 00:14 - 2014-11-04 16:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero 2014-10-27 00:14 - 2014-10-27 00:14 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero_AG 2014-10-24 17:58 - 2014-10-24 17:58 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-10-23 20:31 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys 2014-10-23 20:29 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-10-23 20:29 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-10-23 20:29 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll 2014-10-23 20:29 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll 2014-10-23 20:29 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-10-23 20:29 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-10-23 20:29 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-10-23 20:29 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-10-23 20:29 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-10-23 20:29 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-10-23 20:29 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-10-23 20:29 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2014-10-23 20:29 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-10-23 20:29 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2014-10-23 20:29 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2014-10-23 20:29 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-10-23 20:29 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2014-10-23 20:29 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2014-10-23 20:29 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2014-10-23 20:29 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2014-10-23 20:29 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-23 20:29 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-10-23 20:29 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-10-23 20:29 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-10-23 20:29 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-23 20:29 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-10-23 20:29 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-10-23 20:29 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-10-23 20:29 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-10-23 20:29 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-10-23 20:29 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-10-23 20:29 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-10-23 20:28 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2014-10-23 20:28 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll 2014-10-23 20:28 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll 2014-10-23 20:28 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-10-23 20:28 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2014-10-23 20:28 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2014-10-23 20:28 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-10-23 20:28 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2014-10-23 20:28 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll 2014-10-23 20:28 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll 2014-10-23 20:28 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll 2014-10-23 20:28 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll 2014-10-23 20:28 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll 2014-10-23 20:28 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll 2014-10-23 20:28 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat 2014-10-23 20:28 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys 2014-10-23 20:28 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe 2014-10-23 20:28 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe 2014-10-23 20:28 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll 2014-10-23 20:28 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-10-23 20:28 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-10-23 20:28 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2014-10-23 20:28 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2014-10-23 20:28 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll 2014-10-23 20:28 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll 2014-10-23 20:28 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2014-10-23 20:28 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2014-10-23 20:28 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2014-10-23 20:28 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-10-23 20:28 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-10-23 20:28 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-10-23 20:27 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-10-23 20:27 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll 2014-10-23 20:27 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2014-10-23 20:27 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys 2014-10-23 20:27 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys 2014-10-23 20:27 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe 2014-10-23 20:27 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2014-10-23 20:27 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll 2014-10-23 20:27 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll 2014-10-23 20:27 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll 2014-10-23 17:09 - 2014-11-13 14:40 - 00000000 ____D () C:\Users\Scotty\Documents\Euro Truck Simulator 2 2014-10-23 16:33 - 2014-10-23 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\arma 2 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\SIX Networks 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\SIX Networks 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\IsolatedStorage 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\ProgramData\SIX Networks 2014-10-23 16:32 - 2014-10-23 16:32 - 15225168 _____ (SIX Networks) C:\Users\Scotty\Downloads\withSIX-Play.exe 2014-10-23 16:32 - 2014-10-23 16:32 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Downloaded Installations 2014-10-23 15:26 - 2014-11-03 15:02 - 00025088 ___SH () C:\Users\Scotty\Desktop\Thumbs.db 2014-10-19 21:25 - 2014-10-19 21:25 - 856838616 _____ () C:\WINDOWS\MEMORY.DMP 2014-10-19 21:25 - 2014-10-19 21:25 - 00301704 _____ () C:\WINDOWS\Minidump\101914-11281-01.dmp 2014-10-19 21:25 - 2014-10-19 21:25 - 00000000 ____D () C:\WINDOWS\Minidump 2014-10-19 19:38 - 2014-10-19 19:40 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\MAGIX 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\ProgramData\XDMessagingv4 2014-10-19 19:29 - 2014-11-12 21:55 - 00000000 ____D () C:\Users\Scotty\Downloads\musik 2014-10-19 13:17 - 2014-10-19 13:17 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe 2014-10-19 13:17 - 2014-10-19 12:26 - 00000000 ___DC () C:\WINDOWS\Panther 2014-10-19 13:16 - 2014-10-19 13:16 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-10-19 13:16 - 2014-10-19 13:16 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-10-19 13:16 - 2014-10-19 13:16 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\MSBuild 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-10-19 13:15 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-10-19 12:27 - 2014-10-19 12:27 - 00002088 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk 2014-10-19 12:26 - 2014-10-19 12:26 - 00001461 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-10-19 12:26 - 2014-10-19 12:26 - 00000020 ___SH () C:\Users\Scotty\ntuser.ini 2014-10-19 12:23 - 2014-10-19 12:23 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-10-19 12:21 - 2014-10-19 12:21 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-10-19 12:20 - 2014-10-23 22:34 - 00000000 ____D () C:\Users\Scotty 2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagwrn.xml 2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagerr.xml 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Vorlagen 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Startmenü 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Netzwerkumgebung 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Lokale Einstellungen 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Eigene Dateien 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Druckumgebung 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Musik 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Bilder 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Verlauf 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Anwendungsdaten 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Anwendungsdaten 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-10-19 12:18 - 2014-11-13 13:57 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-10-19 12:18 - 2014-11-13 13:49 - 01841869 _____ () C:\WINDOWS\WindowsUpdate.log 2014-10-19 12:18 - 2014-10-19 12:21 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-10-19 12:18 - 2014-10-19 12:18 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Synaptics 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Realtek 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-10-19 12:18 - 2013-12-23 11:34 - 00061216 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2014-10-19 12:18 - 2013-12-23 11:34 - 00053024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-10-19 12:18 - 2013-11-05 06:39 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-10-19 12:17 - 2014-11-13 13:58 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.dll 2014-10-19 12:17 - 2014-11-13 13:58 - 00017408 _____ () C:\WINDOWS\system32\rpcnetp.exe 2014-10-19 12:17 - 2014-11-13 13:57 - 00029336 _____ () C:\WINDOWS\system32\wpbbin.exe 2014-10-19 12:17 - 2014-11-13 13:57 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-13 14:03 - 2014-07-18 13:56 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-549461420-2757155598-784121854-1001 2014-11-13 14:02 - 2014-09-24 07:17 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-11-13 14:02 - 2014-09-24 06:43 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat 2014-11-13 14:02 - 2014-09-24 06:43 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat 2014-11-13 14:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-11-13 13:58 - 2014-07-18 14:06 - 00069792 _____ (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.dll 2014-11-13 13:57 - 2014-09-23 22:06 - 00017540 _____ () C:\WINDOWS\PFRO.log 2014-11-13 13:57 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-11-13 13:36 - 2013-08-22 15:44 - 00338184 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-11-13 06:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-11-13 01:46 - 2014-07-20 23:47 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-11-13 01:46 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-11-13 01:44 - 2014-07-20 23:47 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-11-12 22:45 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-11-11 15:44 - 2012-07-26 06:26 - 00000226 _____ () C:\WINDOWS\win.ini 2014-11-09 20:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy 2014-11-01 16:48 - 2014-07-19 16:07 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-10-30 17:28 - 2014-10-08 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\Neuer Ordner 2014-10-30 12:25 - 2014-09-01 20:48 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2014-10-30 01:55 - 2014-09-24 08:46 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-10-30 01:55 - 2014-09-24 08:46 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-10-26 22:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-10-25 02:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-10-24 18:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-10-24 17:58 - 2014-07-17 17:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Packages 2014-10-24 04:09 - 2013-08-22 15:46 - 00289910 _____ () C:\WINDOWS\setupact.log 2014-10-23 16:33 - 2014-08-08 19:02 - 00000000 ____D () C:\Users\Scotty\Documents\Arma 3 2014-10-19 21:28 - 2014-07-18 14:06 - 00069792 ____N (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.exe 2014-10-19 21:23 - 2014-08-01 20:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Last.fm 2014-10-19 19:54 - 2014-07-19 18:37 - 00000000 ____D () C:\Users\Scotty\AppData\Local\CDWLauncher 2014-10-19 19:54 - 2014-07-18 16:27 - 00000000 ____D () C:\Users\Scotty\Documents\My Games 2014-10-19 19:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-10-19 19:40 - 2012-10-19 01:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-10-19 13:17 - 2014-07-26 12:05 - 00000000 __SHD () C:\Recovery 2014-10-19 13:17 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-10-19 12:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-10-19 12:23 - 2014-07-26 10:40 - 00008125 _____ () C:\WINDOWS\comsetup.log 2014-10-19 12:23 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-10-19 12:23 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-10-19 12:23 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\de 2014-10-19 12:21 - 2014-08-08 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon 2014-10-19 12:21 - 2014-08-05 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager 2014-10-19 12:21 - 2014-08-01 20:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm 2014-10-19 12:21 - 2014-07-26 08:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2014-10-19 12:21 - 2014-07-18 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-10-19 12:21 - 2014-07-04 14:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\tr 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sv 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sk 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\ru 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pt 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pl 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\no 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\hu 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\fi 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\es 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\el 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\da 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\cs 2014-10-19 12:21 - 2014-07-04 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs 2014-10-19 12:21 - 2014-07-04 14:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-10-19 12:21 - 2014-07-04 14:04 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e 2014-10-19 12:21 - 2014-07-04 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-10-19 12:21 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-10-19 12:21 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Cursors 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-10-19 12:21 - 2012-10-19 01:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA 2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center 2014-10-19 12:21 - 2012-10-19 01:17 - 00000000 ____D () C:\ProgramData\PRICache 2014-10-19 12:21 - 2012-08-01 18:03 - 00000000 ____D () C:\WINDOWS\system32\nl 2014-10-19 12:21 - 2012-08-01 17:54 - 00000000 ____D () C:\WINDOWS\system32\it 2014-10-19 12:21 - 2012-08-01 17:46 - 00000000 ____D () C:\WINDOWS\system32\fr 2014-10-19 12:21 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2014-10-19 12:20 - 2014-08-10 17:21 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-10-19 12:18 - 2014-07-04 14:01 - 00000000 ____D () C:\Intel 2014-10-19 12:18 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log 2014-10-19 12:13 - 2014-07-17 17:40 - 01952667 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-10-19 11:57 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent Some content of TEMP: ==================== C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll C:\Users\Scotty\AppData\Local\Temp\awesomium_setup.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-13 01:44 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2014
Ran by Scotty at 2014-11-13 14:45:45
Running from C:\Users\Scotty\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (Obsolete) (HKLM-x32\...\Steam App 219540) (Version: - )
Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.6 - Atheros Communications Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software)
Awesomium Redistributable (HKLM-x32\...\{5BCB064B-9F65-4E15-BAFB-669E72E54FD9}) (Version: 1.7.4.2 - SIX Networks GmbH)
Call of Juarez Gunslinger (HKLM-x32\...\Steam App 204450) (Version: - Techland)
Combat Arms EU (HKLM-x32\...\Combat Arms EU) (Version: - )
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment)
Euro Truck Simulator 2 Multiplayer 0.1.0.9 Alpha R3 (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.0.9 Alpha R3 - ETS2MP Team)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version: - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
Far Cry® 3 Blood Dragon (HKLM-x32\...\Steam App 233270) (Version: - Ubisoft Montreal)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version: - Reto-Moto)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33268) (Version: 3.6.1.33268.15 - Intel)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{8e41467d-297e-496d-8b0f-e771b6c87c06}) (Version: 16.11.0 - Intel Corporation)
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Mount & Blade (HKLM-x32\...\Steam App 22100) (Version: - TaleWorlds Entertainment)
Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version: - TaleWorlds Entertainment)
Mount & Blade: With Fire and Sword (HKLM-x32\...\Steam App 48720) (Version: - TaleWorlds Entertainment)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1 - Mozilla)
Nero 12 Essentials Toshiba (HKLM-x32\...\{2EF76291-8647-46F0-89D8-0AA8B72A5420}) (Version: 12.0.00600 - Nero AG)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.51.0 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 327.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.65 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.65 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0604 - NVIDIA Corporation)
Painkiller: Black Edition (HKLM-x32\...\Steam App 39530) (Version: - People Can Fly)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6794 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.)
Risen (HKLM-x32\...\Steam App 40300) (Version: - Piranha – Bytes)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version: - Piranha Bytes)
Saints Row 2 (HKLM-x32\...\Steam App 9480) (Version: - Volition)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version: - Deep Silver Volition)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Sniper Elite 3 (HKLM-x32\...\Steam App 238090) (Version: - Rebellion)
SRS Premium Sound Control Panel (HKLM\...\{94F03B8E-CB73-4653-AFE9-79112C01FED2}) (Version: 1.12.5000 - SRS Labs, Inc.)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.5 - Synaptics Incorporated)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version: - Turbine, Inc.)
theHunter (HKLM-x32\...\Steam App 253710) (Version: - Expansive Worlds)
TOSHIBA Blu-ray Disc Player (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 1.0.5.207 - Toshiba Corporation)
TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.00.6625.6402 - Toshiba Corporation)
TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.5.1.1 - Toshiba Corporation)
TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA)
TOSHIBA Password Utility (HKLM-x32\...\{B1786E63-2127-42C9-95A3-146E5F727BF1}) (Version: v1.0.0.9 - TOSHIBA Corporation)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.8.17.640104 - Toshiba Corporation)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM\...\{11A5F0A4-5738-4857-9CEA-216E4F78BEB5}) (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0013 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.5.1 - Toshiba Europe GmbH)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.3.3417 - TOSHIBA Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 2.1 - Ubisoft)
Welcome App (Start-up experience) (x32 Version: 12.0.14000 - Nero AG) Hidden
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
26-10-2014 21:03:47 Windows Update
01-11-2014 15:48:41 avast! antivirus system restore point
02-11-2014 21:37:03 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert
08-11-2014 14:05:15 DirectX wurde installiert
13-11-2014 00:44:27 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {2B2120BC-BFED-4F3B-B65B-D6168C49D53B} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2012-07-27] (TOSHIBA Corporation)
Task: {5FB4302F-346E-4919-8CDE-704090A3F00A} - System32\Tasks\avast! Emergency Update => D:\Programme\Avast\AvastEmUpdate.exe [2014-11-01] (AVAST Software)
Task: {6DD9D18D-A117-43A5-A9D6-4AD3E4801B96} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-13] (Microsoft Corporation)
Task: {8A09220B-49F8-4EC6-A1E0-88A3CE316A43} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {988DD466-E223-4BE3-9644-79286E172A0C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-01] (Adobe Systems Incorporated)
Task: {F742380F-F7C4-452A-8F71-33DD759FFFF6} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2012-09-25] (Toshiba Europe GmbH)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Loaded Modules (whitelisted) =============
2014-08-01 21:14 - 2014-03-06 11:37 - 00013312 _____ () C:\windows\SysWOW64\SMITSC.exe
2014-11-01 16:49 - 2014-11-01 16:49 - 00388208 _____ () D:\Programme\Avast\ng\vbox\VBoxDDU.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 05846160 _____ () D:\Programme\Avast\ng\vbox\VBoxRT.dll
2012-08-30 13:34 - 2012-08-30 13:34 - 02609064 _____ () C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
2012-07-18 17:38 - 2012-07-18 17:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2012-07-18 17:38 - 2012-07-18 17:38 - 00049064 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnZ.dll
2011-08-12 13:57 - 2011-08-12 13:57 - 00437632 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe
2012-08-13 18:13 - 2012-08-13 18:13 - 00018344 _____ () C:\Program Files\TOSHIBA\Teco\TecoMUI.dll
2012-08-04 14:01 - 2012-08-04 14:01 - 00213136 _____ () C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
2014-11-13 13:38 - 2014-11-13 13:38 - 02902016 _____ () D:\Programme\Avast\defs\14111300\algo.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 04491192 _____ () D:\Programme\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 38561576 _____ () D:\Programme\Avast\libcef.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 01171456 _____ () D:\SteamLibrary\Steam\libavcodec-56.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00332800 _____ () D:\SteamLibrary\Steam\libavresample-2.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00442368 _____ () D:\SteamLibrary\Steam\libavutil-54.dll
2014-11-13 13:45 - 2014-11-11 19:47 - 00774656 _____ () D:\SteamLibrary\Steam\SDL2.dll
2014-11-13 13:45 - 2014-11-12 02:04 - 02227904 _____ () D:\SteamLibrary\Steam\video.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00403968 _____ () D:\SteamLibrary\Steam\libavformat-56.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00485888 _____ () D:\SteamLibrary\Steam\libswscale-3.dll
2014-11-13 13:45 - 2014-11-12 02:04 - 00690880 _____ () D:\SteamLibrary\Steam\bin\chromehtml.DLL
2014-11-13 13:45 - 2014-11-11 19:48 - 34589888 _____ () D:\SteamLibrary\Steam\bin\libcef.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00837824 _____ () D:\SteamLibrary\Steam\bin\ffmpegsumo.dll
2014-11-12 22:46 - 2014-11-07 01:09 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-549461420-2757155598-784121854-500 - Administrator - Disabled)
ASPNET (S-1-5-21-549461420-2757155598-784121854-1002 - Limited - Enabled)
Gast (S-1-5-21-549461420-2757155598-784121854-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-549461420-2757155598-784121854-1004 - Limited - Enabled)
Scotty (S-1-5-21-549461420-2757155598-784121854-1001 - Administrator - Enabled) => C:\Users\Scotty
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/13/2014 04:05:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "\\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
Error: (11/13/2014 04:05:52 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
Error: (11/13/2014 01:44:28 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service MaintainerSvc6.37.565328 since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/12/2014 11:01:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.3.9600.17284 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1b50
Startzeit: 01cffe8a2b43c1de
Endzeit: 0
Anwendungspfad: C:\WINDOWS\Explorer.EXE
Berichts-ID: 758454ec-6ab7-11e4-be94-6036dd09dd90
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/12/2014 10:45:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.17344 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1010
Startzeit: 01cffec1cacab1b7
Endzeit: 5
Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
Berichts-ID: 2e1508fd-6ab5-11e4-be94-6036dd09dd90
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/12/2014 10:23:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm MediaMonkey_4.1.5.1719.tmp, Version 51.1052.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 27c8
Startzeit: 01cffebdc5a08de8
Endzeit: 4294967295
Anwendungspfad: C:\Users\Scotty\AppData\Local\Temp\is-L781V.tmp\MediaMonkey_4.1.5.1719.tmp
Berichts-ID: 154617a2-6ab2-11e4-be94-6036dd09dd90
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/12/2014 10:22:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.3.5422, Zeitstempel: 0x545b5277
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.3.5422, Zeitstempel: 0x545b2aeb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x1dc0
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5
Error: (11/10/2014 08:14:04 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "\\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
Error: (11/10/2014 08:14:03 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
Error: (11/09/2014 03:14:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: eurotrucks2.exe, Version: 1.13.4.0, Zeitstempel: 0x5437aff9
Name des fehlerhaften Moduls: eurotrucks2.exe, Version: 1.13.4.0, Zeitstempel: 0x5437aff9
Ausnahmecode: 0xc0000094
Fehleroffset: 0x005ca645
ID des fehlerhaften Prozesses: 0x37dc
Startzeit der fehlerhaften Anwendung: 0xeurotrucks2.exe0
Pfad der fehlerhaften Anwendung: eurotrucks2.exe1
Pfad des fehlerhaften Moduls: eurotrucks2.exe2
Berichtskennung: eurotrucks2.exe3
Vollständiger Name des fehlerhaften Pakets: eurotrucks2.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: eurotrucks2.exe5
System errors:
=============
Error: (11/13/2014 01:57:54 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/13/2014 01:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (11/13/2014 01:46:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (11/13/2014 01:36:27 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/12/2014 04:05:47 PM) (Source: MEIx64) (EventID: 3) (User: )
Description: Intel(R) Management Engine Interface driver has failed to perform handshake with the Firmware.
Error: (11/11/2014 03:48:19 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/11/2014 03:48:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (11/11/2014 03:48:03 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (11/11/2014 03:48:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" ist vom Dienst "Windows Search" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1069
Error: (11/11/2014 03:48:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Microsoft Office Sessions:
=========================
Error: (11/13/2014 04:05:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: \\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\Falscher Parameter. (0x80070057)
Error: (11/13/2014 04:05:52 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: SystemFalscher Parameter. (0x80070057)
Error: (11/13/2014 01:44:28 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MaintainerSvc6.37.565328 since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/12/2014 11:01:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.3.9600.172841b5001cffe8a2b43c1de0C:\WINDOWS\Explorer.EXE758454ec-6ab7-11e4-be94-6036dd09dd90
Error: (11/12/2014 10:45:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe11.0.9600.17344101001cffec1cacab1b75C:\Program Files\Internet Explorer\iexplore.exe2e1508fd-6ab5-11e4-be94-6036dd09dd90
Error: (11/12/2014 10:23:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: MediaMonkey_4.1.5.1719.tmp51.1052.0.027c801cffebdc5a08de84294967295C:\Users\Scotty\AppData\Local\Temp\is-L781V.tmp\MediaMonkey_4.1.5.1719.tmp154617a2-6ab2-11e4-be94-6036dd09dd90
Error: (11/12/2014 10:22:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.0.3.5422545b5277mozalloc.dll33.0.3.5422545b2aeb80000003000014251dc001cffeb4fe28190dC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll0347e269-6ab2-11e4-be94-6036dd09dd90
Error: (11/10/2014 08:14:04 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: \\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\Falscher Parameter. (0x80070057)
Error: (11/10/2014 08:14:03 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: SystemFalscher Parameter. (0x80070057)
Error: (11/09/2014 03:14:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: eurotrucks2.exe1.13.4.05437aff9eurotrucks2.exe1.13.4.05437aff9c0000094005ca64537dc01cffc2767ec156bD:\SteamLibrary\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeD:\SteamLibrary\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeba024e75-681a-11e4-be93-6036dd09dd90
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Percentage of memory in use: 12%
Total physical RAM: 16336.22 MB
Available physical RAM: 14283.29 MB
Total Pagefile: 32720.22 MB
Available Pagefile: 30306.07 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB
==================== Drives ================================
Drive c: (TI30995500B) (Fixed) (Total:108.08 GB) (Free:58.26 GB) NTFS
Drive d: (HDD) (Fixed) (Total:931.51 GB) (Free:259.88 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: EFA10BF8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
14.11.2014, 02:24
| #4 |
| Ruhe in Frieden † 2019 | Avast Schädliche Datei Blockade Mozilla Firefox Hallo, hast du da auch ne Meldung von Avast zu? Ist das Absicht, dass du Chrome als einen Browser für Entwickler betreibst? Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: YoutubeAdBlocke - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\CnZ@P.edu [2014-11-12]
emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 3 Starte noch einmal FRST.
|
|
14.11.2014, 06:33
| #5 |
| | Avast Schädliche Datei Blockade Mozilla Firefox Ich nutze kein Chrome und Avast findet nichts. Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-11-2014 02
Ran by Scotty at 2014-11-14 06:17:49 Run:1
Running from C:\Users\Scotty\Desktop
Loaded Profiles: Scotty & (Available profiles: Scotty)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: YoutubeAdBlocke - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\CnZ@P.edu [2014-11-12]
emptytemp:
*****************
C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully.
C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\CnZ@P.edu => Moved successfully.
EmptyTemp: => Removed 741.8 MB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Update, 14.11.2014 06:15:28, SYSTEM, SCOTT, Scheduler, Malware Database, 2014.11.13.9, 2014.11.14.1, Protection, 14.11.2014 06:15:28, SYSTEM, SCOTT, Protection, Refresh, Starting, Protection, 14.11.2014 06:15:28, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopping, Protection, 14.11.2014 06:15:28, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopped, Protection, 14.11.2014 06:19:00, SYSTEM, SCOTT, Protection, Malware Protection, Starting, Protection, 14.11.2014 06:19:00, SYSTEM, SCOTT, Protection, Malware Protection, Started, Protection, 14.11.2014 06:19:00, SYSTEM, SCOTT, Protection, Malicious Website Protection, Starting, Protection, 14.11.2014 06:19:00, SYSTEM, SCOTT, Protection, Malicious Website Protection, Started, Protection, 14.11.2014 06:19:56, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopping, Protection, 14.11.2014 06:19:56, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopped, Protection, 14.11.2014 06:19:56, SYSTEM, SCOTT, Protection, Malware Protection, Stopping, Protection, 14.11.2014 06:19:56, SYSTEM, SCOTT, Protection, Malware Protection, Stopped, Protection, 14.11.2014 06:20:43, SYSTEM, SCOTT, Protection, Malware Protection, Starting, Protection, 14.11.2014 06:20:43, SYSTEM, SCOTT, Protection, Malware Protection, Started, Protection, 14.11.2014 06:20:43, SYSTEM, SCOTT, Protection, Malicious Website Protection, Starting, Protection, 14.11.2014 06:20:43, SYSTEM, SCOTT, Protection, Malicious Website Protection, Started, Update, 14.11.2014 06:20:46, SYSTEM, SCOTT, Manual, Rootkit Database, 2014.9.18.1, 2014.11.12.1, Update, 14.11.2014 06:20:47, SYSTEM, SCOTT, Manual, Malware Database, 2014.9.19.5, 2014.11.14.1, Protection, 14.11.2014 06:20:47, SYSTEM, SCOTT, Protection, Refresh, Starting, Protection, 14.11.2014 06:20:47, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopping, Protection, 14.11.2014 06:20:47, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopped, Protection, 14.11.2014 06:20:52, SYSTEM, SCOTT, Protection, Refresh, Success, Protection, 14.11.2014 06:20:52, SYSTEM, SCOTT, Protection, Malicious Website Protection, Starting, Protection, 14.11.2014 06:20:52, SYSTEM, SCOTT, Protection, Malicious Website Protection, Started, Scan, 14.11.2014 06:27:18, SYSTEM, SCOTT, Manual, Start: % 1 "% 2", Dauer: % 1 min 4 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, "% 1" nicht-Malware-Erkennung, Protection, 14.11.2014 06:28:15, SYSTEM, SCOTT, Protection, Malware Protection, Starting, Protection, 14.11.2014 06:28:15, SYSTEM, SCOTT, Protection, Malware Protection, Started, Protection, 14.11.2014 06:28:15, SYSTEM, SCOTT, Protection, Malicious Website Protection, Starting, Protection, 14.11.2014 06:28:17, SYSTEM, SCOTT, Protection, Malicious Website Protection, Started, (end) FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2014 02 Ran by Scotty (administrator) on SCOTT on 14-11-2014 06:30:54 Running from C:\Users\Scotty\Desktop Loaded Profile: Scotty (Available profiles: Scotty) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) D:\Programme\Avast\AvastSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Absolute Software Corp.) C:\Windows\SysWOW64\rpcnet.exe () C:\Windows\SysWOW64\SMITSC.exe (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe (Avast Software) D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) D:\Programme\Avast\ng\ngservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe () C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe (TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe () C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe () C:\Program Files\TOSHIBA\Hotkey\Hotkey\TCrdKBB.exe (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe (AVAST Software) D:\Programme\Avast\avastui.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13261456 2012-12-10] (Realtek Semiconductor) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [SRS Premium Sound 3D] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-19] (SRS Labs, Inc.) HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-30] () HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation) HKLM\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-04] (TOSHIBA Corporation) HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] () HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation) HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated) HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation) HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software) HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-09-06] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com SearchScopes: HKLM - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM-x32 - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM-x32 - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE.dll (AVAST Software) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll () FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin HKU\S-1-5-21-549461420-2757155598-784121854-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Deutsch (DE) Language Pack - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-07-19] FF Extension: Download Status Bar - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2014-07-19] FF Extension: Gutscheinaffe - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9220f99f-5b7d-4a4d-97ca-209991796400}.xpi [2014-07-19] FF Extension: ImTranslator - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-07-19] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\Avast\WebRep\FF FF Extension: Avast Online Security - D:\Programme\Avast\WebRep\FF [2014-11-01] FF Extension: No Name - wrc@avast.com [Not Found] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-01] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-01] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; D:\Programme\Avast\AvastSvc.exe [50344 2014-11-01] (AVAST Software) R3 AvastVBoxSvc; D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-01] (Avast Software) S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-24] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] () S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-24] (Microsoft Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor) R2 SMITS; C:\windows\SysWOW64\SMITSC.exe [13312 2014-03-06] () [File not signed] S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-01] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-01] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-01] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-01] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-01] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-01] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-01] () R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-14] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3349984 2014-04-17] (Intel Corporation) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated) R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider) R2 VBoxAswDrv; D:\Programme\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-11-01] (Avast Software) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-14 06:30 - 2014-11-14 06:30 - 00000157 _____ () C:\WINDOWS\system32\2014-11-14-05-30-20.025-AvastVBoxSVC.exe-3488.log 2014-11-14 06:29 - 2014-11-14 06:29 - 00002940 _____ () C:\Users\Scotty\Desktop\MB.txt 2014-11-14 06:21 - 2014-11-14 06:30 - 00000000 ____D () C:\Users\Scotty\Desktop\Neuer Ordner 2014-11-14 06:21 - 2014-11-14 06:21 - 00000157 _____ () C:\WINDOWS\system32\2014-11-14-05-21-10.036-AvastVBoxSVC.exe-4312.log 2014-11-14 06:20 - 2014-11-14 06:28 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-11-14 06:20 - 2014-11-14 06:20 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025(1).exe 2014-11-14 06:20 - 2014-11-14 06:20 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-11-14 06:20 - 2014-11-14 06:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-11-14 06:20 - 2014-11-14 06:20 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-11-14 06:20 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-11-14 06:20 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-11-14 06:20 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-11-14 06:17 - 2014-11-14 06:17 - 00000000 ____D () C:\Users\Scotty\Desktop\FRST-OlderVersion 2014-11-13 20:25 - 2014-11-13 20:25 - 00462912 _____ () C:\Users\Scotty\Downloads\Media_Monkesy_Gold_v_3.2.x.full.rar.exe 2014-11-13 15:34 - 2014-11-13 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm 2014-11-13 15:30 - 2014-11-13 15:30 - 00001086 _____ () C:\Users\Scotty\Desktop\WoTLauncher - Verknüpfung.lnk 2014-11-13 15:29 - 2014-11-13 15:29 - 00000284 _____ () C:\Users\Scotty\Desktop\Avast Schädliche Datei Blockade Mozilla Firefox - Trojaner-Board.URL 2014-11-13 14:45 - 2014-11-14 06:30 - 00013542 _____ () C:\Users\Scotty\Desktop\FRST.txt 2014-11-13 14:45 - 2014-11-14 06:30 - 00000000 ____D () C:\FRST 2014-11-13 14:45 - 2014-11-13 14:46 - 00027816 _____ () C:\Users\Scotty\Desktop\Addition.txt 2014-11-13 14:43 - 2014-11-14 06:17 - 02116608 _____ (Farbar) C:\Users\Scotty\Desktop\FRST64.exe 2014-11-13 14:02 - 2014-11-13 14:02 - 05597734 _____ (Swearware) C:\Users\Scotty\Downloads\ComboFix.exe 2014-11-13 14:00 - 2014-11-13 14:00 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-13-00-07.064-AvastVBoxSVC.exe-3616.log 2014-11-13 13:51 - 2014-11-13 13:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-13 13:50 - 2014-11-13 13:50 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-13 13:50 - 2014-11-13 13:50 - 00451205 _____ () C:\Users\Scotty\Downloads\Last.fm_Scrobbler_1.0.2.29.mmip 2014-11-13 13:38 - 2014-11-13 13:38 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-12-38-51.090-AvastVBoxSVC.exe-3436.log 2014-11-12 22:46 - 2014-11-12 22:46 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-11-12 22:46 - 2014-11-12 22:46 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-12 22:33 - 2014-11-12 22:33 - 00000212 _____ () C:\Users\Scotty\Desktop\Google Übersetzer.URL 2014-11-12 22:33 - 2014-11-12 22:33 - 00000000 ____D () C:\Users\Scotty\Desktop\Musik 2014-11-12 22:22 - 2014-11-12 22:22 - 00000000 ____D () C:\ProgramData\4015569669760776887 2014-11-12 22:02 - 2014-11-12 22:02 - 15204184 _____ (Ventis Media Inc. ) C:\Users\Scotty\Downloads\MediaMonkey_4.1.5.1719.exe 2014-11-12 21:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-11-12 21:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2014-11-12 21:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-11-12 21:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-11-12 21:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll 2014-11-12 21:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2014-11-12 21:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2014-11-12 21:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2014-11-12 21:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-11-12 21:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll 2014-11-12 21:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2014-11-12 21:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-11-12 21:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-11-12 21:12 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2014-11-12 21:12 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2014-11-12 21:12 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2014-11-12 21:12 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2014-11-12 21:12 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2014-11-12 21:11 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-11-12 21:11 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-11-12 21:11 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2014-11-12 21:11 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-11-12 21:11 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll 2014-11-12 21:11 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-11-12 21:11 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-11-12 21:11 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-11-12 21:11 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-11-12 21:11 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-11-12 21:11 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-11-12 21:11 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-11-12 21:11 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-11-12 21:11 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-11-12 21:11 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-11-12 21:11 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-11-12 21:11 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-11-12 21:11 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-11-12 21:11 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2014-11-12 21:11 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2014-11-12 21:11 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2014-11-12 21:11 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2014-11-12 21:11 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll 2014-11-12 21:11 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll 2014-11-12 21:11 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-11-12 21:11 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-11-12 21:10 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-11-12 21:10 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-11-12 21:10 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2014-11-12 21:10 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-11-12 21:10 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-11-12 21:10 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-11-12 21:10 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2014-11-12 21:10 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll 2014-11-12 21:10 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll 2014-11-12 21:09 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe 2014-11-12 21:09 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe 2014-11-12 21:09 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe 2014-11-12 21:09 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll 2014-11-12 21:09 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2014-11-12 21:09 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-11-12 21:09 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-11-12 21:09 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2014-11-12 21:09 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2014-11-12 21:09 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-11-12 21:09 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-11-12 21:09 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll 2014-11-12 21:09 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2014-11-12 21:09 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2014-11-12 21:09 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2014-11-12 21:09 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-11-12 21:09 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-11-12 21:09 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-11-12 21:09 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-11-12 21:09 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2014-11-12 21:09 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-11-12 21:09 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll 2014-11-12 21:09 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll 2014-11-12 21:09 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2014-11-12 21:09 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll 2014-11-12 21:09 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-11-12 21:09 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-11-12 21:09 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2014-11-12 21:09 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2014-11-12 21:09 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-11-12 21:09 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2014-11-12 21:09 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2014-11-12 21:09 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2014-11-12 21:09 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2014-11-12 21:09 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-11-12 21:09 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-11-12 21:09 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-11-12 21:09 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-11-12 21:09 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-11-12 21:09 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-11-12 21:09 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll 2014-11-12 21:09 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-11-12 21:09 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe 2014-11-12 21:09 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe 2014-11-12 21:09 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe 2014-11-12 21:09 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll 2014-11-12 21:09 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2014-11-12 21:09 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-11-12 21:09 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll 2014-11-12 21:09 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-11-12 21:09 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2014-11-12 21:09 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-11-12 21:09 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2014-11-12 21:09 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-11-12 21:09 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-11-12 21:09 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-11-12 21:09 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-11-12 21:09 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll 2014-11-12 21:09 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2014-11-12 21:09 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2014-11-12 21:09 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2014-11-12 21:09 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-11-12 21:09 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-11-12 21:09 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll 2014-11-12 21:09 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-11-12 21:09 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2014-11-12 21:09 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-11-12 21:09 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2014-11-12 21:09 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-11-12 21:09 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2014-11-12 21:09 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-11-12 21:09 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll 2014-11-12 21:09 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-11-12 21:09 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2014-11-12 21:09 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2014-11-12 21:09 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-11-12 21:09 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-11-12 21:09 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-11-12 21:09 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-11-12 21:09 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-11-12 21:09 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll 2014-11-12 21:09 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-11-12 21:09 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-11-12 21:09 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-11-12 21:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll 2014-11-12 21:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll 2014-11-12 21:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-11-12 21:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2014-11-12 21:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-11-12 21:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-11-12 21:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-11-12 21:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-11-12 21:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-11-12 21:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-11-12 21:09 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2014-11-12 21:09 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-11-12 21:09 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-11-12 21:09 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-11-12 21:09 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-11-12 21:09 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-11-12 21:09 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-11-12 21:09 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-11-12 21:09 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2014-11-12 21:09 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2014-11-12 21:09 - 2014-08-31 01:17 - 00148800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-11-12 21:09 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-11-12 21:09 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-11-12 21:09 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll 2014-11-12 21:09 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll 2014-11-12 21:09 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-11-12 21:09 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll 2014-11-12 21:09 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-11-12 21:09 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-11-12 21:09 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-11-12 21:09 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-11-12 21:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-11-12 21:09 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-11-12 21:09 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-11-12 21:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-11-12 21:09 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-11-12 21:09 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2014-11-12 21:09 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2014-11-11 15:50 - 2014-11-11 15:50 - 00000157 _____ () C:\WINDOWS\system32\2014-11-11-14-50-38.003-AvastVBoxSVC.exe-3684.log 2014-11-11 15:48 - 2014-11-14 06:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-11-11 15:44 - 2014-11-12 22:50 - 00000000 ____D () C:\AdwCleaner 2014-11-11 15:43 - 2014-11-11 15:43 - 02140160 _____ () C:\Users\Scotty\Desktop\AdwCleaner_4.101.exe 2014-11-08 19:37 - 2014-11-12 22:49 - 00000000 ____D () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7 2014-11-08 19:10 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Chromium 2014-11-08 19:09 - 2014-11-08 19:09 - 00000000 ____D () C:\Users\Scotty\AppData\Local\The Lord of the Rings Online 2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\Users\Scotty\Documents\ETS2MP 2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer 2014-11-08 18:03 - 2014-11-11 15:47 - 00000000 ____D () C:\Program Files (x86)\EnterDigital 2014-11-08 18:02 - 2014-11-08 18:02 - 00860576 _____ ( ) C:\Users\Scotty\Downloads\OpenofficeSetup.exe 2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieUserList 2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieSiteList 2014-11-08 15:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2014-11-08 15:05 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2014-11-08 15:04 - 2014-11-14 06:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Akamai 2014-11-08 15:04 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\Documents\The Lord of the Rings Online 2014-11-08 15:04 - 2014-11-08 15:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Turbine 2014-11-02 23:19 - 2014-11-02 23:19 - 00000097 _____ () C:\Users\Scotty\AppData\Roaming\LauncherSettings_live.cfg 2014-11-02 22:40 - 2014-11-02 22:40 - 00000040 _____ () C:\Users\Scotty\AppData\Roaming\TheHunterSettings_steam_live.cfg 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\Documents\theHunter 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunter 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\theHunter 2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunterSteam 2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\ProgramData\Hunter 2014-11-01 16:54 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-54-58.025-aswFe.exe-7940.log 2014-11-01 16:52 - 2014-11-13 22:51 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-11-01 16:52 - 2014-11-01 16:52 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-11-01 16:50 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-50-59.092-aswFe.exe-3560.log 2014-11-01 16:50 - 2014-11-01 16:51 - 00000157 _____ () C:\WINDOWS\system32\2014-11-01-15-50-58.091-AvastVBoxSVC.exe-5864.log 2014-11-01 16:50 - 2014-11-01 16:50 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\AVAST Software 2014-11-01 16:49 - 2014-11-04 16:09 - 00004144 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2014-11-01 16:49 - 2014-11-01 16:49 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-11-01 16:49 - 2014-11-01 16:49 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-11-01 16:49 - 2014-11-01 16:49 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00000838 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\system32\vbox 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-11-01 16:46 - 2014-11-01 16:46 - 131078000 _____ (AVAST Software) C:\Users\Scotty\Downloads\avast_free_antivirus_setup.exe 2014-10-27 00:14 - 2014-11-04 16:16 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Nero 2014-10-27 00:14 - 2014-11-04 16:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero 2014-10-27 00:14 - 2014-10-27 00:14 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero_AG 2014-10-24 17:58 - 2014-10-24 17:58 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-10-23 20:31 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys 2014-10-23 20:29 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-10-23 20:29 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-10-23 20:29 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll 2014-10-23 20:29 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll 2014-10-23 20:29 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-10-23 20:29 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-10-23 20:29 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-10-23 20:29 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-10-23 20:29 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-10-23 20:29 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-10-23 20:29 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-10-23 20:29 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2014-10-23 20:29 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-10-23 20:29 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2014-10-23 20:29 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2014-10-23 20:29 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-10-23 20:29 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2014-10-23 20:29 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2014-10-23 20:29 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2014-10-23 20:29 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2014-10-23 20:29 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-23 20:29 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-10-23 20:29 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-10-23 20:29 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-10-23 20:29 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-23 20:29 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-10-23 20:29 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-10-23 20:29 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-10-23 20:29 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-10-23 20:29 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-10-23 20:29 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-10-23 20:29 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-10-23 20:28 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2014-10-23 20:28 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll 2014-10-23 20:28 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll 2014-10-23 20:28 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-10-23 20:28 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2014-10-23 20:28 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2014-10-23 20:28 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-10-23 20:28 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2014-10-23 20:28 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll 2014-10-23 20:28 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll 2014-10-23 20:28 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll 2014-10-23 20:28 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll 2014-10-23 20:28 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll 2014-10-23 20:28 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll 2014-10-23 20:28 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat 2014-10-23 20:28 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys 2014-10-23 20:28 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe 2014-10-23 20:28 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe 2014-10-23 20:28 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll 2014-10-23 20:28 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-10-23 20:28 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-10-23 20:28 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2014-10-23 20:28 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2014-10-23 20:28 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll 2014-10-23 20:28 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll 2014-10-23 20:28 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2014-10-23 20:28 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2014-10-23 20:28 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2014-10-23 20:28 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-10-23 20:28 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-10-23 20:28 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-10-23 20:27 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-10-23 20:27 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll 2014-10-23 20:27 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2014-10-23 20:27 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys 2014-10-23 20:27 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys 2014-10-23 20:27 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe 2014-10-23 20:27 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2014-10-23 20:27 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll 2014-10-23 20:27 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll 2014-10-23 20:27 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll 2014-10-23 17:09 - 2014-11-13 15:27 - 00000000 ____D () C:\Users\Scotty\Documents\Euro Truck Simulator 2 2014-10-23 16:33 - 2014-10-23 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\arma 2 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\SIX Networks 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\SIX Networks 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\IsolatedStorage 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\ProgramData\SIX Networks 2014-10-23 16:32 - 2014-10-23 16:32 - 15225168 _____ (SIX Networks) C:\Users\Scotty\Downloads\withSIX-Play.exe 2014-10-23 16:32 - 2014-10-23 16:32 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Downloaded Installations 2014-10-23 15:26 - 2014-11-03 15:02 - 00025088 ___SH () C:\Users\Scotty\Desktop\Thumbs.db 2014-10-19 21:25 - 2014-10-19 21:25 - 856838616 _____ () C:\WINDOWS\MEMORY.DMP 2014-10-19 21:25 - 2014-10-19 21:25 - 00301704 _____ () C:\WINDOWS\Minidump\101914-11281-01.dmp 2014-10-19 21:25 - 2014-10-19 21:25 - 00000000 ____D () C:\WINDOWS\Minidump 2014-10-19 19:38 - 2014-10-19 19:40 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\MAGIX 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\ProgramData\XDMessagingv4 2014-10-19 19:29 - 2014-11-12 21:55 - 00000000 ____D () C:\Users\Scotty\Downloads\musik 2014-10-19 13:17 - 2014-10-19 13:17 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe 2014-10-19 13:17 - 2014-10-19 12:26 - 00000000 ___DC () C:\WINDOWS\Panther 2014-10-19 13:16 - 2014-10-19 13:16 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-10-19 13:16 - 2014-10-19 13:16 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-10-19 13:16 - 2014-10-19 13:16 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\MSBuild 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-10-19 13:15 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-10-19 12:27 - 2014-10-19 12:27 - 00002088 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk 2014-10-19 12:26 - 2014-10-19 12:26 - 00001461 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-10-19 12:26 - 2014-10-19 12:26 - 00000020 ___SH () C:\Users\Scotty\ntuser.ini 2014-10-19 12:23 - 2014-10-19 12:23 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-10-19 12:21 - 2014-10-19 12:21 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-10-19 12:20 - 2014-10-23 22:34 - 00000000 ____D () C:\Users\Scotty 2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagwrn.xml 2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagerr.xml 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Vorlagen 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Startmenü 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Netzwerkumgebung 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Lokale Einstellungen 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Eigene Dateien 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Druckumgebung 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Musik 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Bilder 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Verlauf 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Anwendungsdaten 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Anwendungsdaten 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-10-19 12:18 - 2014-11-14 06:28 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-10-19 12:18 - 2014-11-14 06:27 - 01911018 _____ () C:\WINDOWS\WindowsUpdate.log 2014-10-19 12:18 - 2014-10-19 12:21 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-10-19 12:18 - 2014-10-19 12:18 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Synaptics 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Realtek 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-10-19 12:18 - 2013-12-23 11:34 - 00061216 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2014-10-19 12:18 - 2013-12-23 11:34 - 00053024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-10-19 12:18 - 2013-11-05 06:39 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-10-19 12:17 - 2014-11-14 06:28 - 00029336 _____ () C:\WINDOWS\system32\wpbbin.exe 2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.exe 2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.dll 2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\system32\rpcnetp.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-14 06:28 - 2014-09-23 22:06 - 00019448 _____ () C:\WINDOWS\PFRO.log 2014-11-14 06:28 - 2014-07-18 14:06 - 00069792 _____ (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.dll 2014-11-14 06:28 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-11-14 06:25 - 2014-07-18 13:56 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-549461420-2757155598-784121854-1001 2014-11-14 06:24 - 2014-09-24 07:17 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-11-14 06:24 - 2014-09-24 06:43 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat 2014-11-14 06:24 - 2014-09-24 06:43 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat 2014-11-14 06:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy 2014-11-14 06:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-11-13 16:18 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-11-13 16:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-11-13 15:34 - 2014-08-01 20:59 - 00000663 _____ () C:\Users\Public\Desktop\Last.fm Scrobbler.lnk 2014-11-13 13:36 - 2013-08-22 15:44 - 00338184 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-11-13 06:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-11-13 01:46 - 2014-07-20 23:47 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-11-13 01:46 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-11-13 01:44 - 2014-07-20 23:47 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-11-11 15:44 - 2012-07-26 06:26 - 00000226 _____ () C:\WINDOWS\win.ini 2014-11-01 16:48 - 2014-07-19 16:07 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-10-30 17:28 - 2014-10-08 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\Neuer Ordner 2014-10-30 12:25 - 2014-09-01 20:48 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2014-10-30 01:55 - 2014-09-24 08:46 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-10-30 01:55 - 2014-09-24 08:46 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-10-25 02:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-10-24 18:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-10-24 17:58 - 2014-07-17 17:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Packages 2014-10-24 04:09 - 2013-08-22 15:46 - 00289910 _____ () C:\WINDOWS\setupact.log 2014-10-23 16:33 - 2014-08-08 19:02 - 00000000 ____D () C:\Users\Scotty\Documents\Arma 3 2014-10-19 21:28 - 2014-07-18 14:06 - 00069792 ____N (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.exe 2014-10-19 21:23 - 2014-08-01 20:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Last.fm 2014-10-19 19:54 - 2014-07-19 18:37 - 00000000 ____D () C:\Users\Scotty\AppData\Local\CDWLauncher 2014-10-19 19:54 - 2014-07-18 16:27 - 00000000 ____D () C:\Users\Scotty\Documents\My Games 2014-10-19 19:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-10-19 19:40 - 2012-10-19 01:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-10-19 13:17 - 2014-07-26 12:05 - 00000000 __SHD () C:\Recovery 2014-10-19 13:17 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-10-19 12:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-10-19 12:23 - 2014-07-26 10:40 - 00008125 _____ () C:\WINDOWS\comsetup.log 2014-10-19 12:23 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-10-19 12:23 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-10-19 12:23 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\de 2014-10-19 12:21 - 2014-08-08 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon 2014-10-19 12:21 - 2014-08-05 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager 2014-10-19 12:21 - 2014-07-26 08:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2014-10-19 12:21 - 2014-07-18 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-10-19 12:21 - 2014-07-04 14:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\tr 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sv 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sk 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\ru 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pt 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pl 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\no 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\hu 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\fi 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\es 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\el 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\da 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\cs 2014-10-19 12:21 - 2014-07-04 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs 2014-10-19 12:21 - 2014-07-04 14:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-10-19 12:21 - 2014-07-04 14:04 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e 2014-10-19 12:21 - 2014-07-04 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-10-19 12:21 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-10-19 12:21 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Cursors 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-10-19 12:21 - 2012-10-19 01:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA 2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center 2014-10-19 12:21 - 2012-10-19 01:17 - 00000000 ____D () C:\ProgramData\PRICache 2014-10-19 12:21 - 2012-08-01 18:03 - 00000000 ____D () C:\WINDOWS\system32\nl 2014-10-19 12:21 - 2012-08-01 17:54 - 00000000 ____D () C:\WINDOWS\system32\it 2014-10-19 12:21 - 2012-08-01 17:46 - 00000000 ____D () C:\WINDOWS\system32\fr 2014-10-19 12:21 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2014-10-19 12:20 - 2014-08-10 17:21 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-10-19 12:18 - 2014-07-04 14:01 - 00000000 ____D () C:\Intel 2014-10-19 12:18 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log 2014-10-19 12:13 - 2014-07-17 17:40 - 01952667 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-10-19 11:57 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent Some content of TEMP: ==================== C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-13 16:17 ==================== End Of Log ============================ |
|
14.11.2014, 14:03
| #6 |
| Ruhe in Frieden † 2019 | Avast Schädliche Datei Blockade Mozilla Firefox Hallo, du hast mir das Schutzprotokoll von Malwarebytes gepostet. Ich brauche aber das Suchlaufsprotokoll.
__________________ --> Avast Schädliche Datei Blockade Mozilla Firefox |
|
14.11.2014, 14:26
| #7 |
| | Avast Schädliche Datei Blockade Mozilla Firefox Ich bitte um Verzeihung! Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 14.11.2014 Suchlauf-Zeit: 06:21:23 Logdatei: Suchlauf.txt Administrator: Ja Version: 2.00.3.1025 Malware Datenbank: v2014.11.14.01 Rootkit Datenbank: v2014.11.12.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Scotty Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 359876 Verstrichene Zeit: 4 Min, 59 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 1 PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-549461420-2757155598-784121854-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, In Quarantäne, [1891bf7c077501351dc1860007fdc838], Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 0 (Keine schädliche Elemente erkannt) Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) |
|
15.11.2014, 04:37
| #8 |
| Ruhe in Frieden † 2019 | Avast Schädliche Datei Blockade Mozilla Firefox Hallo, das sieht doch gut aus. Dann bitte so weiter  Schritt 1 Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern  ESET Online Scanner
Schritt 2 Starte noch einmal FRST.
|
|
16.11.2014, 19:35
| #9 |
| | Avast Schädliche Datei Blockade Mozilla FirefoxCode:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=2e54f9445a7b644e95f09c72920fc1f2
# engine=21104
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-15 01:29:45
# local_time=2014-11-15 02:29:45 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 94 340889 1204949 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 203202 6362504 0 0
# scanned=687364
# found=35
# cleaned=0
# scan_time=12651
sh=B825F8CBC9DFF5563B8D1A3D47F4217FAE6AD0C3 ft=0 fh=0000000000000000 vn="Win32/BrowseFox.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\cpoomjocjelojiflbhbplglmkggfcjgd.crx.vir"
sh=26B23789D9A72EFD081B7433BA173699236340C0 ft=1 fh=df276d9722cf3a18 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\EnterDigital.FirstRun.exe.vir"
sh=3578A2878098606DA8230BEF78AE2815FF9320E2 ft=1 fh=cf2c7b3b381b00c5 vn="Variante von Win32/BrowseFox.O evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\EnterDigitalbho.dll.vir"
sh=0DDC9546E916F18ED36682634A8DD29E277C84AD ft=1 fh=da586ef9a06ddc8a vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\updateEnterDigital.exe.vir"
sh=96CC08EEF31CE5AB3B71286B73A1D4D45E7AFBC8 ft=1 fh=59321c4896c8916f vn="Variante von Win32/BrowseFox.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\9015bae7cdbb4473a5d0.dll.vir"
sh=E771C5E2CD860880048540238178753FDBADF53C ft=1 fh=eb08195b0cefe8c6 vn="Variante von Win32/BrowseFox.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\dbe9acb7ca744c18ad13.dll.vir"
sh=1022CF8EB3AA7BA21E181D8E3EA0614F7575D5FC ft=1 fh=63d2c93c31451cd4 vn="Variante von Win32/BrowseFox.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\EnterDigital.BOAS.exe.vir"
sh=C01703102021C3FC6053A9CCAC43F9AE87BB73F3 ft=1 fh=b2307a0f5f0dd166 vn="Variante von Win32/BrowseFox.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\EnterDigital.BOASHelper.exe.vir"
sh=44C8C467CBA83BD5F02846D49ADB9FC453EAFC33 ft=1 fh=75e9e36a4bcf75cd vn="Variante von Win32/BrowseFox.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\EnterDigital.BOASPRT.exe.vir"
sh=92B0FE3D7EF857DB608E1B3049213D53A719D986 ft=1 fh=df18c1a940d117ac vn="Variante von Win64/BrowseFox.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\EnterDigital.BrowserAdapter64.exe.vir"
sh=761D3915E91D9B526E71280A148FAC90FA334198 ft=1 fh=d0466f763f597d79 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp3B5B.tmp.vir"
sh=4F0CF0B91786B4800A12D0B1BD5C087A4AB13595 ft=1 fh=ae2fc6b8e18d7d7d vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp4B07.tmp.vir"
sh=10C5085A195C8D301886A3403182A73AAA51DFE5 ft=1 fh=47bdf92d363a0c1d vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp5133.tmp.vir"
sh=D80AEC5B4CDDC9E34645D54E8A3C65E1FC1C7834 ft=1 fh=58ba924d8057b81c vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp67CC.tmp.vir"
sh=2510B89AE35CD500FABE4A8D42F0EABD5C5D4DB0 ft=1 fh=a04e3dfcf81dc242 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp7FC3.tmp.vir"
sh=3ACBDB1F98F857372C9C224ABB652625DAF31CEC ft=1 fh=909998afd384b3b2 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmpA7B6.tmp.vir"
sh=F013B1011257EDF7644DD56F44BF4A0E694511EE ft=1 fh=219913d957ded619 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmpDB31.tmp.vir"
sh=0DDC9546E916F18ED36682634A8DD29E277C84AD ft=1 fh=da586ef9a06ddc8a vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\utilEnterDigital.exe.vir"
sh=7D640D8CCB602A777EB1521C710D6423D9914EC1 ft=1 fh=d1f52a61c288f237 vn="Win64/BrowseFox.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}64.dll.vir"
sh=FA9784C7C8FC81B3F8583D9E799334689DD109AE ft=1 fh=a6d203875e1987d4 vn="Win64/BrowseFox.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}64.dll.vir"
sh=DE76B8D256FDEF881C77E24A1A44BE1B3C51494B ft=1 fh=5fbfaa6425b94337 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.BOAS.dll.vir"
sh=FB1F93F97AC8FD958CCFF1EFBF11A948C4489831 ft=1 fh=9f404a1dab3379e0 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.Bromon.dll.vir"
sh=B62308F63ED49BAD5062C5F4B0B2D93FC3DF4542 ft=1 fh=82f60c019e2e56de vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.BroStats.dll.vir"
sh=9A1F2C179B121E8888901E4A1D1E940C0A8F88A0 ft=1 fh=84c164e0c0b25443 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.CompatibilityChecker.dll.vir"
sh=0E99EC75A950F886992B0BFB5A31FD51F1427ABA ft=1 fh=90a65b889bf98a4e vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.GCUpdate.dll.vir"
sh=A8BBCA40415525489EA0C5EDB370D8F53C34E70F ft=1 fh=e88399f729aad936 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.Msvcmon.dll.vir"
sh=0DB3DCFF991642E98B2A1ACBD1D2058E4EFF3CD6 ft=1 fh=f77eabf3d75b1bad vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.PurBrowseG.dll.vir"
sh=3DF50126BB1FEF0A639DBA9ED499E5F3F5D66A5B ft=1 fh=2d2d599767c17a2d vn="Variante von Win64/BrowseFox.CG evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}Gw64.sys.vir"
sh=72B6F7BDC642DD09E0812137B50B53294DD787DB ft=1 fh=0a07b2223f7931b4 vn="Variante von Win64/BrowseFox.CG evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64.sys.vir"
sh=986E11826FA848AC8C39CAB33A95CAEAB48B9976 ft=1 fh=cf1c6312ac080124 vn="Variante von Win32/InstallCore.RB evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Scotty\Downloads\OpenofficeSetup.exe"
sh=91BACB2F469F2A0C5640E31D841CB22B458D5E07 ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo Anwendung" ac=I fn="G:\SCOTT\Backup Set 2013-05-05 190008\Backup Files 2013-06-09 190002\Backup files 2.zip"
sh=E9A348989C23D0F9B7FA3677AF80C1FFF68ED114 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SCOTT\Backup Set 2013-05-05 190008\Backup Files 2013-06-09 190002\Backup files 4.zip"
sh=B5089A45FF8948E9F91149C7A7AB6AB1321E5CEC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\SCOTT\Backup Set 2013-05-05 190008\Backup Files 2013-08-04 190001\Backup files 1.zip"
sh=ACADF2B82AECDEDB4D590808EEB01D436999E91E ft=1 fh=f1e915411acfaf75 vn="Variante von Win32/Packed.VMProtect.AAA Trojaner" ac=I fn="G:\$RECYCLE.BIN\$R6Q1911\Ubisoft Game Launcher\ubiorbitapi_r2.dll"
sh=480FA2E02978E8173DE15B98EC3C8FEC9A4A424C ft=1 fh=1e3ce5e42604fd71 vn="Variante von Win32/Packed.VMProtect.AAD Trojaner" ac=I fn="G:\Spiele\^games\Bulletstorm\Fairlight\xlive.dll"
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2014 02 Ran by Scotty (administrator) on SCOTT on 15-11-2014 16:43:57 Running from C:\Users\Scotty\Desktop Loaded Profile: Scotty (Available profiles: Scotty) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) D:\Programme\Avast\AvastSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Windows\SysWOW64\SMITSC.exe (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe (Avast Software) D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) D:\Programme\Avast\ng\ngservice.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe () C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe () C:\Program Files\TOSHIBA\Hotkey\Hotkey\TCrdKBB.exe (TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe () C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe (AVAST Software) D:\Programme\Avast\avastui.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13261456 2012-12-10] (Realtek Semiconductor) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [SRS Premium Sound 3D] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-19] (SRS Labs, Inc.) HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-30] () HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation) HKLM\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-04] (TOSHIBA Corporation) HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] () HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation) HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated) HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation) HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software) HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-09-06] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com SearchScopes: HKLM - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM-x32 - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS SearchScopes: HKLM-x32 - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE.dll (AVAST Software) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll () FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin HKU\S-1-5-21-549461420-2757155598-784121854-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Deutsch (DE) Language Pack - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-07-19] FF Extension: Download Status Bar - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2014-07-19] FF Extension: Gutscheinaffe - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9220f99f-5b7d-4a4d-97ca-209991796400}.xpi [2014-07-19] FF Extension: ImTranslator - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-07-19] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\Avast\WebRep\FF FF Extension: Avast Online Security - D:\Programme\Avast\WebRep\FF [2014-11-01] FF Extension: No Name - wrc@avast.com [Not Found] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-01] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-01] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; D:\Programme\Avast\AvastSvc.exe [50344 2014-11-01] (AVAST Software) R3 AvastVBoxSvc; D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-01] (Avast Software) S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-24] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] () S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-24] (Microsoft Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor) R2 SMITS; C:\windows\SysWOW64\SMITSC.exe [13312 2014-03-06] () [File not signed] S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-01] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-01] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-01] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-01] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-01] (AVAST Software) S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-01] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-01] () R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-15] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3349984 2014-04-17] (Intel Corporation) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated) R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider) R2 VBoxAswDrv; D:\Programme\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-11-01] (Avast Software) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-15 12:54 - 2014-11-15 12:55 - 00000000 ____D () C:\Users\Scotty\Desktop\Mutti 2014-11-15 10:54 - 2014-11-15 10:54 - 02347384 _____ (ESET) C:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe 2014-11-15 10:54 - 2014-11-15 10:54 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-11-14 14:25 - 2014-11-14 14:25 - 00001354 _____ () C:\Users\Scotty\Downloads\Suchlauf.txt 2014-11-14 14:24 - 2014-11-14 14:24 - 00002940 _____ () C:\Users\Scotty\Downloads\mb.txt 2014-11-14 06:30 - 2014-11-14 06:30 - 00000157 _____ () C:\WINDOWS\system32\2014-11-14-05-30-20.025-AvastVBoxSVC.exe-3488.log 2014-11-14 06:21 - 2014-11-14 06:30 - 00000000 ____D () C:\Users\Scotty\Desktop\Neuer Ordner 2014-11-14 06:21 - 2014-11-14 06:21 - 00000157 _____ () C:\WINDOWS\system32\2014-11-14-05-21-10.036-AvastVBoxSVC.exe-4312.log 2014-11-14 06:20 - 2014-11-15 14:57 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-11-14 06:20 - 2014-11-14 06:20 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025(1).exe 2014-11-14 06:20 - 2014-11-14 06:20 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-11-14 06:20 - 2014-11-14 06:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-11-14 06:20 - 2014-11-14 06:20 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-11-14 06:20 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-11-14 06:20 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-11-14 06:20 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-11-14 06:17 - 2014-11-14 06:17 - 00000000 ____D () C:\Users\Scotty\Desktop\FRST-OlderVersion 2014-11-13 20:25 - 2014-11-13 20:25 - 00462912 _____ () C:\Users\Scotty\Downloads\Media_Monkesy_Gold_v_3.2.x.full.rar.exe 2014-11-13 15:34 - 2014-11-13 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm 2014-11-13 15:30 - 2014-11-13 15:30 - 00001086 _____ () C:\Users\Scotty\Desktop\WoTLauncher - Verknüpfung.lnk 2014-11-13 14:45 - 2014-11-15 16:44 - 00013629 _____ () C:\Users\Scotty\Desktop\FRST.txt 2014-11-13 14:45 - 2014-11-15 16:43 - 00000000 ____D () C:\FRST 2014-11-13 14:45 - 2014-11-13 14:46 - 00027816 _____ () C:\Users\Scotty\Desktop\Addition.txt 2014-11-13 14:43 - 2014-11-14 06:17 - 02116608 _____ (Farbar) C:\Users\Scotty\Desktop\FRST64.exe 2014-11-13 14:02 - 2014-11-13 14:02 - 05597734 _____ (Swearware) C:\Users\Scotty\Downloads\ComboFix.exe 2014-11-13 14:00 - 2014-11-13 14:00 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-13-00-07.064-AvastVBoxSVC.exe-3616.log 2014-11-13 13:51 - 2014-11-13 13:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-13 13:50 - 2014-11-13 13:50 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-13 13:50 - 2014-11-13 13:50 - 00451205 _____ () C:\Users\Scotty\Downloads\Last.fm_Scrobbler_1.0.2.29.mmip 2014-11-13 13:38 - 2014-11-13 13:38 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-12-38-51.090-AvastVBoxSVC.exe-3436.log 2014-11-12 22:46 - 2014-11-12 22:46 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-11-12 22:46 - 2014-11-12 22:46 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-12 22:33 - 2014-11-12 22:33 - 00000212 _____ () C:\Users\Scotty\Desktop\Google Übersetzer.URL 2014-11-12 22:33 - 2014-11-12 22:33 - 00000000 ____D () C:\Users\Scotty\Desktop\Musik 2014-11-12 22:22 - 2014-11-12 22:22 - 00000000 ____D () C:\ProgramData\4015569669760776887 2014-11-12 22:02 - 2014-11-12 22:02 - 15204184 _____ (Ventis Media Inc. ) C:\Users\Scotty\Downloads\MediaMonkey_4.1.5.1719.exe 2014-11-12 21:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-11-12 21:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2014-11-12 21:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-11-12 21:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-11-12 21:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll 2014-11-12 21:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2014-11-12 21:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2014-11-12 21:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2014-11-12 21:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-11-12 21:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll 2014-11-12 21:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2014-11-12 21:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-11-12 21:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-11-12 21:12 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2014-11-12 21:12 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2014-11-12 21:12 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2014-11-12 21:12 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2014-11-12 21:12 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2014-11-12 21:11 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-11-12 21:11 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-11-12 21:11 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2014-11-12 21:11 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-11-12 21:11 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll 2014-11-12 21:11 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-11-12 21:11 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-11-12 21:11 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-11-12 21:11 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-11-12 21:11 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-11-12 21:11 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-11-12 21:11 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-11-12 21:11 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-11-12 21:11 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-11-12 21:11 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-11-12 21:11 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-11-12 21:11 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-11-12 21:11 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-11-12 21:11 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2014-11-12 21:11 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2014-11-12 21:11 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2014-11-12 21:11 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2014-11-12 21:11 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll 2014-11-12 21:11 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll 2014-11-12 21:11 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-11-12 21:11 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-11-12 21:10 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-11-12 21:10 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-11-12 21:10 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2014-11-12 21:10 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-11-12 21:10 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-11-12 21:10 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-11-12 21:10 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2014-11-12 21:10 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll 2014-11-12 21:10 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll 2014-11-12 21:09 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe 2014-11-12 21:09 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe 2014-11-12 21:09 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe 2014-11-12 21:09 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll 2014-11-12 21:09 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2014-11-12 21:09 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-11-12 21:09 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-11-12 21:09 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-11-12 21:09 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2014-11-12 21:09 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2014-11-12 21:09 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-11-12 21:09 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-11-12 21:09 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll 2014-11-12 21:09 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2014-11-12 21:09 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2014-11-12 21:09 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2014-11-12 21:09 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-11-12 21:09 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-11-12 21:09 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-11-12 21:09 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-11-12 21:09 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2014-11-12 21:09 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-11-12 21:09 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll 2014-11-12 21:09 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll 2014-11-12 21:09 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2014-11-12 21:09 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll 2014-11-12 21:09 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-11-12 21:09 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-11-12 21:09 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2014-11-12 21:09 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2014-11-12 21:09 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-11-12 21:09 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2014-11-12 21:09 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2014-11-12 21:09 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2014-11-12 21:09 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2014-11-12 21:09 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-11-12 21:09 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-11-12 21:09 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-11-12 21:09 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-11-12 21:09 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-11-12 21:09 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-11-12 21:09 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll 2014-11-12 21:09 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-11-12 21:09 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe 2014-11-12 21:09 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe 2014-11-12 21:09 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe 2014-11-12 21:09 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll 2014-11-12 21:09 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2014-11-12 21:09 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-11-12 21:09 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll 2014-11-12 21:09 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-11-12 21:09 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2014-11-12 21:09 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-11-12 21:09 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2014-11-12 21:09 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-11-12 21:09 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-11-12 21:09 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-11-12 21:09 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-11-12 21:09 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll 2014-11-12 21:09 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2014-11-12 21:09 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2014-11-12 21:09 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2014-11-12 21:09 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-11-12 21:09 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-11-12 21:09 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll 2014-11-12 21:09 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-11-12 21:09 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll 2014-11-12 21:09 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2014-11-12 21:09 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-11-12 21:09 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2014-11-12 21:09 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-11-12 21:09 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2014-11-12 21:09 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-11-12 21:09 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll 2014-11-12 21:09 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-11-12 21:09 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2014-11-12 21:09 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2014-11-12 21:09 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-11-12 21:09 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-11-12 21:09 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-11-12 21:09 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-11-12 21:09 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-11-12 21:09 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll 2014-11-12 21:09 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-11-12 21:09 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-11-12 21:09 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-11-12 21:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll 2014-11-12 21:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll 2014-11-12 21:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-11-12 21:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-11-12 21:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2014-11-12 21:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-11-12 21:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-11-12 21:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-11-12 21:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-11-12 21:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-11-12 21:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-11-12 21:09 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2014-11-12 21:09 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-11-12 21:09 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-11-12 21:09 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-11-12 21:09 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-11-12 21:09 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-11-12 21:09 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-11-12 21:09 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-11-12 21:09 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2014-11-12 21:09 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2014-11-12 21:09 - 2014-08-31 01:17 - 00148800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-11-12 21:09 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-11-12 21:09 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-11-12 21:09 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll 2014-11-12 21:09 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll 2014-11-12 21:09 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-11-12 21:09 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll 2014-11-12 21:09 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-11-12 21:09 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-11-12 21:09 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-11-12 21:09 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-11-12 21:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-11-12 21:09 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-11-12 21:09 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-11-12 21:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-11-12 21:09 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-11-12 21:09 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2014-11-12 21:09 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2014-11-11 15:50 - 2014-11-11 15:50 - 00000157 _____ () C:\WINDOWS\system32\2014-11-11-14-50-38.003-AvastVBoxSVC.exe-3684.log 2014-11-11 15:48 - 2014-11-14 06:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-11-11 15:44 - 2014-11-12 22:50 - 00000000 ____D () C:\AdwCleaner 2014-11-11 15:43 - 2014-11-11 15:43 - 02140160 _____ () C:\Users\Scotty\Desktop\AdwCleaner_4.101.exe 2014-11-08 19:37 - 2014-11-12 22:49 - 00000000 ____D () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7 2014-11-08 19:10 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Chromium 2014-11-08 19:09 - 2014-11-08 19:09 - 00000000 ____D () C:\Users\Scotty\AppData\Local\The Lord of the Rings Online 2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\Users\Scotty\Documents\ETS2MP 2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer 2014-11-08 18:03 - 2014-11-11 15:47 - 00000000 ____D () C:\Program Files (x86)\EnterDigital 2014-11-08 18:02 - 2014-11-08 18:02 - 00860576 _____ ( ) C:\Users\Scotty\Downloads\OpenofficeSetup.exe 2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieUserList 2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieSiteList 2014-11-08 15:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2014-11-08 15:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2014-11-08 15:05 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2014-11-08 15:04 - 2014-11-14 06:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Akamai 2014-11-08 15:04 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\Documents\The Lord of the Rings Online 2014-11-08 15:04 - 2014-11-08 15:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Turbine 2014-11-02 23:19 - 2014-11-02 23:19 - 00000097 _____ () C:\Users\Scotty\AppData\Roaming\LauncherSettings_live.cfg 2014-11-02 22:40 - 2014-11-02 22:40 - 00000040 _____ () C:\Users\Scotty\AppData\Roaming\TheHunterSettings_steam_live.cfg 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\Documents\theHunter 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunter 2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\theHunter 2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunterSteam 2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\ProgramData\Hunter 2014-11-01 16:54 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-54-58.025-aswFe.exe-7940.log 2014-11-01 16:52 - 2014-11-15 15:51 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-11-01 16:52 - 2014-11-01 16:52 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-11-01 16:50 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-50-59.092-aswFe.exe-3560.log 2014-11-01 16:50 - 2014-11-01 16:51 - 00000157 _____ () C:\WINDOWS\system32\2014-11-01-15-50-58.091-AvastVBoxSVC.exe-5864.log 2014-11-01 16:50 - 2014-11-01 16:50 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\AVAST Software 2014-11-01 16:49 - 2014-11-04 16:09 - 00004144 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2014-11-01 16:49 - 2014-11-01 16:49 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-11-01 16:49 - 2014-11-01 16:49 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-11-01 16:49 - 2014-11-01 16:49 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-11-01 16:49 - 2014-11-01 16:49 - 00000838 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\system32\vbox 2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-11-01 16:46 - 2014-11-01 16:46 - 131078000 _____ (AVAST Software) C:\Users\Scotty\Downloads\avast_free_antivirus_setup.exe 2014-10-27 00:14 - 2014-11-04 16:16 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Nero 2014-10-27 00:14 - 2014-11-04 16:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero 2014-10-27 00:14 - 2014-10-27 00:14 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero_AG 2014-10-24 17:58 - 2014-10-24 17:58 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-10-23 20:31 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys 2014-10-23 20:29 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-10-23 20:29 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-10-23 20:29 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll 2014-10-23 20:29 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll 2014-10-23 20:29 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-10-23 20:29 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-10-23 20:29 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-10-23 20:29 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-10-23 20:29 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-10-23 20:29 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-10-23 20:29 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-10-23 20:29 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2014-10-23 20:29 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-10-23 20:29 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2014-10-23 20:29 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2014-10-23 20:29 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-10-23 20:29 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2014-10-23 20:29 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2014-10-23 20:29 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2014-10-23 20:29 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2014-10-23 20:29 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-23 20:29 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-10-23 20:29 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-10-23 20:29 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-10-23 20:29 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-23 20:29 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-10-23 20:29 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-10-23 20:29 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-10-23 20:29 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-10-23 20:29 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-10-23 20:29 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-10-23 20:29 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-10-23 20:29 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-10-23 20:28 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2014-10-23 20:28 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll 2014-10-23 20:28 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll 2014-10-23 20:28 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-10-23 20:28 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2014-10-23 20:28 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2014-10-23 20:28 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-10-23 20:28 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2014-10-23 20:28 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll 2014-10-23 20:28 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll 2014-10-23 20:28 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll 2014-10-23 20:28 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll 2014-10-23 20:28 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll 2014-10-23 20:28 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll 2014-10-23 20:28 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat 2014-10-23 20:28 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2014-10-23 20:28 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys 2014-10-23 20:28 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe 2014-10-23 20:28 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe 2014-10-23 20:28 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2014-10-23 20:28 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll 2014-10-23 20:28 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-10-23 20:28 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-10-23 20:28 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2014-10-23 20:28 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2014-10-23 20:28 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll 2014-10-23 20:28 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll 2014-10-23 20:28 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2014-10-23 20:28 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2014-10-23 20:28 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2014-10-23 20:28 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-10-23 20:28 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-10-23 20:28 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-10-23 20:27 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-10-23 20:27 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll 2014-10-23 20:27 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2014-10-23 20:27 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys 2014-10-23 20:27 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys 2014-10-23 20:27 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe 2014-10-23 20:27 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2014-10-23 20:27 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll 2014-10-23 20:27 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll 2014-10-23 20:27 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll 2014-10-23 17:09 - 2014-11-13 15:27 - 00000000 ____D () C:\Users\Scotty\Documents\Euro Truck Simulator 2 2014-10-23 16:33 - 2014-10-23 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\arma 2 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\SIX Networks 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\SIX Networks 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\IsolatedStorage 2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\ProgramData\SIX Networks 2014-10-23 16:32 - 2014-10-23 16:32 - 15225168 _____ (SIX Networks) C:\Users\Scotty\Downloads\withSIX-Play.exe 2014-10-23 16:32 - 2014-10-23 16:32 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Downloaded Installations 2014-10-23 15:26 - 2014-11-03 15:02 - 00025088 ___SH () C:\Users\Scotty\Desktop\Thumbs.db 2014-10-19 21:25 - 2014-10-19 21:25 - 856838616 _____ () C:\WINDOWS\MEMORY.DMP 2014-10-19 21:25 - 2014-10-19 21:25 - 00301704 _____ () C:\WINDOWS\Minidump\101914-11281-01.dmp 2014-10-19 21:25 - 2014-10-19 21:25 - 00000000 ____D () C:\WINDOWS\Minidump 2014-10-19 19:38 - 2014-10-19 19:40 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\MAGIX 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Abelssoft 2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\ProgramData\XDMessagingv4 2014-10-19 19:29 - 2014-11-12 21:55 - 00000000 ____D () C:\Users\Scotty\Downloads\musik 2014-10-19 13:17 - 2014-10-19 13:17 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-10-19 13:17 - 2014-10-19 13:17 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe 2014-10-19 13:17 - 2014-10-19 12:26 - 00000000 ___DC () C:\WINDOWS\Panther 2014-10-19 13:16 - 2014-10-19 13:16 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-10-19 13:16 - 2014-10-19 13:16 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-10-19 13:16 - 2014-10-19 13:16 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\MSBuild 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-10-19 13:15 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-10-19 13:15 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-10-19 12:27 - 2014-10-19 12:27 - 00002088 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk 2014-10-19 12:26 - 2014-10-19 12:26 - 00001461 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-10-19 12:26 - 2014-10-19 12:26 - 00000020 ___SH () C:\Users\Scotty\ntuser.ini 2014-10-19 12:23 - 2014-10-19 12:23 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-10-19 12:21 - 2014-10-19 12:21 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-10-19 12:20 - 2014-10-23 22:34 - 00000000 ____D () C:\Users\Scotty 2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagwrn.xml 2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagerr.xml 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Vorlagen 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Startmenü 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Netzwerkumgebung 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Lokale Einstellungen 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Eigene Dateien 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Druckumgebung 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Musik 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Bilder 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Verlauf 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Anwendungsdaten 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Anwendungsdaten 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-10-19 12:18 - 2014-11-15 16:30 - 02004545 _____ () C:\WINDOWS\WindowsUpdate.log 2014-10-19 12:18 - 2014-11-14 06:28 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-10-19 12:18 - 2014-10-19 12:21 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-10-19 12:18 - 2014-10-19 12:18 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Synaptics 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Realtek 2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-10-19 12:18 - 2013-12-23 11:34 - 00061216 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2014-10-19 12:18 - 2013-12-23 11:34 - 00053024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-10-19 12:18 - 2013-11-05 06:39 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-10-19 12:18 - 2013-11-05 06:39 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-10-19 12:17 - 2014-11-14 14:22 - 00017408 _____ () C:\WINDOWS\system32\rpcnetp.exe 2014-10-19 12:17 - 2014-11-14 06:28 - 00029336 _____ () C:\WINDOWS\system32\wpbbin.exe 2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.exe 2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.dll ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-15 16:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-11-15 13:00 - 2014-09-24 07:17 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-11-15 13:00 - 2014-09-24 06:43 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat 2014-11-15 13:00 - 2014-09-24 06:43 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat 2014-11-15 12:56 - 2013-08-22 15:46 - 00292297 _____ () C:\WINDOWS\setupact.log 2014-11-15 11:03 - 2014-07-18 13:56 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-549461420-2757155598-784121854-1001 2014-11-14 06:28 - 2014-09-23 22:06 - 00019448 _____ () C:\WINDOWS\PFRO.log 2014-11-14 06:28 - 2014-07-18 14:06 - 00069792 _____ (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.dll 2014-11-14 06:28 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-11-14 06:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy 2014-11-13 16:18 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-11-13 16:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-11-13 15:34 - 2014-08-01 20:59 - 00000663 _____ () C:\Users\Public\Desktop\Last.fm Scrobbler.lnk 2014-11-13 13:36 - 2013-08-22 15:44 - 00338184 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-11-13 06:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-11-13 01:46 - 2014-07-20 23:47 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-11-13 01:46 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-11-13 01:44 - 2014-07-20 23:47 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-11-11 15:44 - 2012-07-26 06:26 - 00000226 _____ () C:\WINDOWS\win.ini 2014-11-01 16:48 - 2014-07-19 16:07 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-10-30 17:28 - 2014-10-08 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\Neuer Ordner 2014-10-30 12:25 - 2014-09-01 20:48 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2014-10-30 01:55 - 2014-09-24 08:46 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-10-30 01:55 - 2014-09-24 08:46 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-10-25 02:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-10-24 18:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-10-24 17:58 - 2014-07-17 17:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Packages 2014-10-23 16:33 - 2014-08-08 19:02 - 00000000 ____D () C:\Users\Scotty\Documents\Arma 3 2014-10-19 21:28 - 2014-07-18 14:06 - 00069792 ____N (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.exe 2014-10-19 21:23 - 2014-08-01 20:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Last.fm 2014-10-19 19:54 - 2014-07-19 18:37 - 00000000 ____D () C:\Users\Scotty\AppData\Local\CDWLauncher 2014-10-19 19:54 - 2014-07-18 16:27 - 00000000 ____D () C:\Users\Scotty\Documents\My Games 2014-10-19 19:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-10-19 19:40 - 2012-10-19 01:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-10-19 13:17 - 2014-07-26 12:05 - 00000000 __SHD () C:\Recovery 2014-10-19 13:17 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-10-19 12:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-10-19 12:23 - 2014-07-26 10:40 - 00008125 _____ () C:\WINDOWS\comsetup.log 2014-10-19 12:23 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-10-19 12:23 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-10-19 12:23 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\de 2014-10-19 12:21 - 2014-08-08 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon 2014-10-19 12:21 - 2014-08-05 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager 2014-10-19 12:21 - 2014-07-26 08:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2014-10-19 12:21 - 2014-07-18 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-10-19 12:21 - 2014-07-04 14:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\tr 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sv 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sk 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\ru 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pt 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pl 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\no 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\hu 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\fi 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\es 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\el 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\da 2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\cs 2014-10-19 12:21 - 2014-07-04 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs 2014-10-19 12:21 - 2014-07-04 14:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-10-19 12:21 - 2014-07-04 14:04 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e 2014-10-19 12:21 - 2014-07-04 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-10-19 12:21 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-10-19 12:21 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Cursors 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-10-19 12:21 - 2012-10-19 01:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA 2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center 2014-10-19 12:21 - 2012-10-19 01:17 - 00000000 ____D () C:\ProgramData\PRICache 2014-10-19 12:21 - 2012-08-01 18:03 - 00000000 ____D () C:\WINDOWS\system32\nl 2014-10-19 12:21 - 2012-08-01 17:54 - 00000000 ____D () C:\WINDOWS\system32\it 2014-10-19 12:21 - 2012-08-01 17:46 - 00000000 ____D () C:\WINDOWS\system32\fr 2014-10-19 12:21 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2014-10-19 12:20 - 2014-08-10 17:21 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-10-19 12:18 - 2014-07-04 14:01 - 00000000 ____D () C:\Intel 2014-10-19 12:18 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log 2014-10-19 12:13 - 2014-07-17 17:40 - 01952667 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-10-19 11:57 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent Some content of TEMP: ==================== C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-15 11:03 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-11-2014 02
Ran by Scotty at 2014-11-15 16:44:21
Running from C:\Users\Scotty\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (Obsolete) (HKLM-x32\...\Steam App 219540) (Version: - )
Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.6 - Atheros Communications Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software)
Awesomium Redistributable (HKLM-x32\...\{5BCB064B-9F65-4E15-BAFB-669E72E54FD9}) (Version: 1.7.4.2 - SIX Networks GmbH)
Call of Juarez Gunslinger (HKLM-x32\...\Steam App 204450) (Version: - Techland)
Combat Arms EU (HKLM-x32\...\Combat Arms EU) (Version: - )
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Euro Truck Simulator 2 Multiplayer 0.1.0.9 Alpha R3 (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.0.9 Alpha R3 - ETS2MP Team)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version: - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
Far Cry® 3 Blood Dragon (HKLM-x32\...\Steam App 233270) (Version: - Ubisoft Montreal)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version: - Reto-Moto)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33268) (Version: 3.6.1.33268.15 - Intel)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{8e41467d-297e-496d-8b0f-e771b6c87c06}) (Version: 16.11.0 - Intel Corporation)
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Mount & Blade (HKLM-x32\...\Steam App 22100) (Version: - TaleWorlds Entertainment)
Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version: - TaleWorlds Entertainment)
Mount & Blade: With Fire and Sword (HKLM-x32\...\Steam App 48720) (Version: - TaleWorlds Entertainment)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1 - Mozilla)
Nero 12 Essentials Toshiba (HKLM-x32\...\{2EF76291-8647-46F0-89D8-0AA8B72A5420}) (Version: 12.0.00600 - Nero AG)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.51.0 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 327.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.65 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.65 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0604 - NVIDIA Corporation)
Painkiller: Black Edition (HKLM-x32\...\Steam App 39530) (Version: - People Can Fly)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6794 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.)
Risen (HKLM-x32\...\Steam App 40300) (Version: - Piranha – Bytes)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version: - Piranha Bytes)
Saints Row 2 (HKLM-x32\...\Steam App 9480) (Version: - Volition)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version: - Deep Silver Volition)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Sniper Elite 3 (HKLM-x32\...\Steam App 238090) (Version: - Rebellion)
SRS Premium Sound Control Panel (HKLM\...\{94F03B8E-CB73-4653-AFE9-79112C01FED2}) (Version: 1.12.5000 - SRS Labs, Inc.)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.5 - Synaptics Incorporated)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version: - Turbine, Inc.)
theHunter (HKLM-x32\...\Steam App 253710) (Version: - Expansive Worlds)
TOSHIBA Blu-ray Disc Player (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 1.0.5.207 - Toshiba Corporation)
TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.00.6625.6402 - Toshiba Corporation)
TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.5.1.1 - Toshiba Corporation)
TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA)
TOSHIBA Password Utility (HKLM-x32\...\{B1786E63-2127-42C9-95A3-146E5F727BF1}) (Version: v1.0.0.9 - TOSHIBA Corporation)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.8.17.640104 - Toshiba Corporation)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM\...\{11A5F0A4-5738-4857-9CEA-216E4F78BEB5}) (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0013 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.5.1 - Toshiba Europe GmbH)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.3.3417 - TOSHIBA Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 2.1 - Ubisoft)
Welcome App (Start-up experience) (x32 Version: 12.0.14000 - Nero AG) Hidden
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
26-10-2014 21:03:47 Windows Update
01-11-2014 15:48:41 avast! antivirus system restore point
02-11-2014 21:37:03 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert
08-11-2014 14:05:15 DirectX wurde installiert
13-11-2014 00:44:27 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {2B2120BC-BFED-4F3B-B65B-D6168C49D53B} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2012-07-27] (TOSHIBA Corporation)
Task: {5FB4302F-346E-4919-8CDE-704090A3F00A} - System32\Tasks\avast! Emergency Update => D:\Programme\Avast\AvastEmUpdate.exe [2014-11-01] (AVAST Software)
Task: {8A09220B-49F8-4EC6-A1E0-88A3CE316A43} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {988DD466-E223-4BE3-9644-79286E172A0C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-01] (Adobe Systems Incorporated)
Task: {EB66C861-EB85-45F2-9BDD-0F49F3207335} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-13] (Microsoft Corporation)
Task: {F742380F-F7C4-452A-8F71-33DD759FFFF6} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2012-09-25] (Toshiba Europe GmbH)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Loaded Modules (whitelisted) =============
2014-08-01 21:14 - 2014-03-06 11:37 - 00013312 _____ () C:\windows\SysWOW64\SMITSC.exe
2014-11-01 16:49 - 2014-11-01 16:49 - 00388208 _____ () D:\Programme\Avast\ng\vbox\VBoxDDU.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 05846160 _____ () D:\Programme\Avast\ng\vbox\VBoxRT.dll
2012-08-30 13:34 - 2012-08-30 13:34 - 02609064 _____ () C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
2012-07-18 17:38 - 2012-07-18 17:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2012-07-18 17:38 - 2012-07-18 17:38 - 00049064 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnZ.dll
2012-08-13 18:13 - 2012-08-13 18:13 - 00018344 _____ () C:\Program Files\TOSHIBA\Teco\TecoMUI.dll
2011-08-12 13:57 - 2011-08-12 13:57 - 00437632 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe
2012-08-04 14:01 - 2012-08-04 14:01 - 00213136 _____ () C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
2014-11-13 19:32 - 2014-11-13 19:32 - 02902016 _____ () D:\Programme\Avast\defs\14111301\algo.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 04491192 _____ () D:\Programme\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-11-15 14:58 - 2014-11-15 14:58 - 02903040 _____ () D:\Programme\Avast\defs\14111500\algo.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 38561576 _____ () D:\Programme\Avast\libcef.dll
2014-11-12 22:46 - 2014-11-07 01:09 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-549461420-2757155598-784121854-500 - Administrator - Disabled)
ASPNET (S-1-5-21-549461420-2757155598-784121854-1002 - Limited - Enabled)
Gast (S-1-5-21-549461420-2757155598-784121854-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-549461420-2757155598-784121854-1004 - Limited - Enabled)
Scotty (S-1-5-21-549461420-2757155598-784121854-1001 - Administrator - Enabled) => C:\Users\Scotty
==================== Faulty Device Manager Devices =============
Name: Intel(R) Management Engine Interface
Description: Intel(R) Management Engine Interface
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: MEIx64
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/15/2014 00:30:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/15/2014 11:04:19 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/15/2014 10:54:24 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/15/2014 10:54:17 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/15/2014 10:54:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/15/2014 10:54:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/13/2014 04:05:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "\\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
Error: (11/13/2014 04:05:52 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
Error: (11/13/2014 01:44:28 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service MaintainerSvc6.37.565328 since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/12/2014 11:01:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.3.9600.17284 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1b50
Startzeit: 01cffe8a2b43c1de
Endzeit: 0
Anwendungspfad: C:\WINDOWS\Explorer.EXE
Berichts-ID: 758454ec-6ab7-11e4-be94-6036dd09dd90
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
System errors:
=============
Error: (11/15/2014 11:04:13 AM) (Source: DCOM) (EventID: 10010) (User: scott)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (11/14/2014 02:22:07 PM) (Source: MEIx64) (EventID: 3) (User: )
Description: Intel(R) Management Engine Interface driver has failed to perform handshake with the Firmware.
Error: (11/14/2014 06:28:07 AM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/14/2014 06:18:48 AM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/14/2014 06:14:16 AM) (Source: MEIx64) (EventID: 3) (User: )
Description: Intel(R) Management Engine Interface driver has failed to perform handshake with the Firmware.
Error: (11/13/2014 04:18:59 PM) (Source: DCOM) (EventID: 10010) (User: scott)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (11/13/2014 04:18:28 PM) (Source: DCOM) (EventID: 10010) (User: scott)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (11/13/2014 01:57:54 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/13/2014 01:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (11/13/2014 01:46:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Microsoft Office Sessions:
=========================
Error: (11/15/2014 00:30:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (11/15/2014 11:04:19 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (11/15/2014 10:54:24 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe
Error: (11/15/2014 10:54:17 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe
Error: (11/15/2014 10:54:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe
Error: (11/15/2014 10:54:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe
Error: (11/13/2014 04:05:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: \\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\Falscher Parameter. (0x80070057)
Error: (11/13/2014 04:05:52 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: SystemFalscher Parameter. (0x80070057)
Error: (11/13/2014 01:44:28 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MaintainerSvc6.37.565328 since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/12/2014 11:01:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.3.9600.172841b5001cffe8a2b43c1de0C:\WINDOWS\Explorer.EXE758454ec-6ab7-11e4-be94-6036dd09dd90
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Percentage of memory in use: 15%
Total physical RAM: 16336.22 MB
Available physical RAM: 13817.08 MB
Total Pagefile: 32720.22 MB
Available Pagefile: 29739.4 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
==================== Drives ================================
Drive c: (TI30995500B) (Fixed) (Total:108.08 GB) (Free:59.37 GB) NTFS
Drive d: (HDD) (Fixed) (Total:931.51 GB) (Free:256.03 GB) NTFS
Drive f: (USB(SCOTT)) (Removable) (Total:7.45 GB) (Free:7.45 GB) FAT32
Drive g: (SATAN) (Fixed) (Total:931.28 GB) (Free:122.89 GB) FAT32
Drive h: (MINION) (Removable) (Total:31.79 GB) (Free:21.49 GB) NTFS
Drive i: (Minion) (Removable) (Total:62.5 GB) (Free:60.97 GB) exFAT
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: EFA10BF8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7.5 GB) - (Type=0B)
========================================================
Disk: 3 (Size: 931.5 GB) (Disk ID: 692686E8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C)
========================================================
Disk: 4 (Size: 31.8 GB) (Disk ID: 0DC5F247)
Partition 1: (Not Active) - (Size=31.8 GB) - (Type=07 NTFS)
========================================================
Disk: 5 (Size: 62.5 GB) (Disk ID: 1DD6F8F7)
Partition 1: (Not Active) - (Size=62.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
16.11.2014, 22:10
| #10 |
| Ruhe in Frieden † 2019 | Avast Schädliche Datei Blockade Mozilla Firefox Hallo, danke Ganz viel liegt in der Quarantäne vom Adwarecleaner. Bitte lösche die in ESET gelisteten Backups. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\Scotty\Downloads\OpenofficeSetup.exe
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
OK So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber. Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir. Schritt 1 Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren. Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen. Schritt 2 Downloade dir bitte delfix auf deinen Desktop.
Updates / Programme aktualisieren
Stelle sicher, dass dein FlashPlayer nach Updates sucht. Den FlashPlayer kann man direkt bei der Installation so konfigurieren, dass er nach Updates automatisch sucht, nachträglich kann man das über folgenden Link machen: Adobe - Flash Player: Einstellungsmanager - Globale Benachrichtigungseinstellungen
Lade dir bitte von hier den aktuellen Firefox herunter. Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems. Ändere regelmäßig alle deine Passwörter, jetzt, nach der Bereinigung ist ein idealer Zeitpunkt dafür
Aktualität des Systems Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.
Antivirensoftware
Zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Systemleistung Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu die Datenträgerbereinigung von Windows. Windows Vista
Windows 7
Windows 8
Halte dich fern von jeglichen Registry Cleanern. Diese schaden deinem System mehr als dass sie es schneller machen. Verhaltensregeln zum sichereren Surfen
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen. Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind. Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun. Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun. |
|
17.11.2014, 00:36
| #11 |
| | Avast Schädliche Datei Blockade Mozilla FirefoxCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-11-2014 03
Ran by Scotty at 2014-11-16 23:25:33 Run:2
Running from C:\Users\Scotty\Desktop
Loaded Profile: Scotty (Available profiles: Scotty)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Users\Scotty\Downloads\OpenofficeSetup.exe
*****************
C:\Users\Scotty\Downloads\OpenofficeSetup.exe => Moved successfully.
==== End of Fixlog ====
Was mich halt noch wundert ist, dass ich mich auf allen Seiten(ebenfalls Trojaner-Board) immer wieder neu anmelden muss, sobald ich den Browser schließe und erneut öffne, obwohl angemeldet bleiben angeklickt worden ist.  Ich nutze den Passwortspeicher nur bei Facebook, wo ich so oder so keine direkten Infos von mir preis gebe. Falls die Informationen Hilfreich sein könnten *gg* PC: Toshiba Qosmio Intel(R) Core(TM) i7-3630QM CPU @ 2,40GHz 2,40GHz Installierter Arbeitsspeicher (RAM): 16,0 GB Systemtyp: 64-Bit-Betriebssystem, x64-basierter Prozessor Grafikkarte: GeForce GTX 670M Ich nutze Mozilla Firefox und habe dafür nun auch die beiden empfohlenen Add-Ons installiert, danke dafür. Aus diesem Grund verstehe ich auch nicht, weshalb auf meinem PC Chrome gewesen sein sollte. Avast habe ich als Browser, PC und Handyschutz. Hierbei besitze ich aber nur die Kostenfreie Version. Ich habe mir schon überlegt die Kostenpflichtige Version zu kaufen, da ich mit der Sandbox sicherer Online-Banking durchführen kann. Von Malwarebytes habe ich die Premium-Version gekauft.  Falls noch weitere Tipps für Programme, Apps(Android) oder Add-Ons vorhanden sind, ich nehme sie äußerst gern entgegen. Was ich ebenfalls nicht verstehe ist, dass ich bei meinem PC keine Recovery-CD erstellen kann. Und was ist zudem auch besser dafür, CD oder Speichermedium wie USB Stick? Und was ist mit Java? Immer wenn ich Java auf dem PC hatte, war er von Viren befallen. Ist Java wirklich vertrauenswürdig und wofür brauche ich es wirklich? Ich bedanke mich vielmals für die tadellose Hilfe! "Für ein besseres Nutzererlebnis auf Facebook aktiviere JavaScript in deinem Browser oder wechsle zu unserer Webseite für Mobilgeräte." Ich muss noch weiter stören, mein Facebook lädt nicht mehr richtig, und oben steht die Nachricht. Er ist aber eigentlich unter "true" statt "false" geschalten. Geändert von Horncrowned (17.11.2014 um 00:29 Uhr) |
|
17.11.2014, 23:52
| #12 | |||||
| Ruhe in Frieden † 2019 | Avast Schädliche Datei Blockade Mozilla Firefox Hallo, Zitat:
Zitat:
Zitat:
Zitat:
Zitat:
Falls du noch weitere Fragen hast, immer her damit |
|
18.11.2014, 08:40
| #13 | |||
| | Avast Schädliche Datei Blockade Mozilla FirefoxZitat:
Zitat:
Zitat:
Wegen Java, das rät mir jeder ab, weil das nur mit Vieren in Verbindung hängen soll. und ich selbst hatte auch schon Java Probleme auf dem alten Pc |
|
18.11.2014, 21:52
| #14 | |||
| Ruhe in Frieden † 2019 | Avast Schädliche Datei Blockade Mozilla Firefox Hallo, Zitat:
https://support.mozilla.org/de/kb/co...n-und-ablehnen Chrome https://support.google.com/accounts/answer/61416?hl=de Internet Explorer Löschen und Verwalten von Cookies in Internet Explorer - Windows-Hilfe Zitat:
Zitat:
|
|
22.11.2014, 17:41
| #15 |
| | Avast Schädliche Datei Blockade Mozilla Firefox Ok, alles bereinigt und Mozilla speichert wieder ab, vielen Dank! Wie sieht es nun aus mit der Recovery CD? Wie schon geschrieben, weitere Tipps nehme ich gern an. |
|
