Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/

TORFdaniel · 07.08.2013, 22:36

Habe ich was soll ich denn jetzt tun?

markusg · 08.08.2013, 00:12

ein neues frst log

TORFdaniel · 08.08.2013, 13:47

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-08-2013
Ran by Daniel (administrator) on 08-08-2013 14:45:36
Running from H:\Users\Daniel\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) H:\Windows\system32\atiesrxx.exe
(Sandboxie Holdings, LLC) H:\Program Files\Sandboxie\SbieSvc.exe
(AMD) H:\Windows\system32\atieclxx.exe
(AVAST Software) H:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) H:\Program Files\avmwlanstick\WlanNetService.exe
(Apple Inc.) H:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn Inc.) H:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corp.) H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Oracle Corporation) H:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) H:\Program Files\AVAST Software\Avast\AvastUI.exe
(Valve Corporation) H:\Program Files\Steam\Steam.exe
(Skype Technologies S.A.) H:\Program Files\Skype\Phone\Skype.exe
(Sandboxie Holdings, LLC) H:\Program Files\Sandboxie\SbieCtrl.exe
(Windows Net) H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe
(Valve Corporation) H:\Program Files\Common Files\Steam\SteamService.exe
(Google Inc.) H:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) H:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) H:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe
(AVAST Software) H:\Program Files\AVAST Software\Avast\setup\avast.setup
(Google Inc.) H:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) H:\Windows\system32\wuauclt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SunJavaUpdateSched] - H:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avast] - H:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKCU\...\Run: [Google Update] - H:\Users\Daniel\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-02] (Google Inc.)
HKCU\...\Run: [Steam] - H:\Program Files\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation)
HKCU\...\Run: [Skype] - H:\Program Files\Skype\Phone\Skype.exe [19873896 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [SandboxieControl] - H:\Program Files\Sandboxie\SbieCtrl.exe [543320 2013-07-08] (Sandboxie Holdings, LLC)
MountPoints2: {1841e9a7-f93e-11e2-b8a9-00248ce625ea} - I:\pushinst.exe
MountPoints2: {2a6149da-501e-11e2-9cd9-001c4af6e8a4} - I:\HTC_Sync_Manager_PC.exe
MountPoints2: {af38bbab-0724-11e2-a9e4-00248ce625ea} - I:\pushinst.exe
MountPoints2: {cc807940-dce3-11e1-ae98-00248ce625ea} - I:\pushinst.exe
MountPoints2: {e79bbbfa-dce2-11e1-8875-806e6f6e6963} - G:\Autorun.exe
Startup: H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - H:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Handler: msdaipp - No CLSID Value - 
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 05 H:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://feed.snapdo.com/?publisher=Bundlore&dpid=Bundlore&co=DE&userid=1f5205d7-4b77-4c17-bb42-141a3005900f&searchtype=hp&installDate=21/04/2013
CHR RestoreOnStartup:         "urls_to_restore_on_startup": [
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - H:\Users\Daniel\AppData\Local\Google\Chrome\Application\21.0.1180.60\PepperFlash\pepflashplayer.dll No File
CHR Extension: () - H:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - H:\Users\Daniel\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx

========================== Services (Whitelisted) =================

R2 avast! Antivirus; H:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVM WLAN Connection Service; H:\Program Files\avmwlanstick\WlanNetService.exe [364544 2008-02-25] (AVM Berlin)
R2 Hamachi2Svc; H:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)
S2 HiPatchService; H:\Program Files\Hi-Rez Studios\HiPatchService.exe [8704 2012-08-30] (Hi-Rez Studios)
R2 MBAMScheduler; H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SbieSvc; H:\Program Files\Sandboxie\SbieSvc.exe [129112 2013-07-08] (Sandboxie Holdings, LLC)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; H:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; H:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 aswRdr; H:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)
R0 aswRvrt; H:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; H:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-08] (AVAST Software)
R1 aswSP; H:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-08] (AVAST Software)
R1 aswTdi; H:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; H:\Windows\System32\Drivers\aswVmm.sys [175176 2013-08-08] ()
R2 atksgt; H:\Windows\System32\DRIVERS\atksgt.sys [83872 2013-06-20] ()
S3 avmeject; H:\Windows\System32\drivers\avmeject.sys [4352 2007-11-07] (AVM Berlin)
R3 FWLANUSB; H:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH)
S3 fwlanusbn; H:\Windows\System32\DRIVERS\fwlanusbn.sys [401920 2007-12-19] (AVM GmbH)
R3 hamachi; H:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 L1E; H:\Windows\System32\DRIVERS\L1E62x86.sys [47104 2009-07-14] (Atheros Communications, Inc.)
R2 lirsgt; H:\Windows\System32\DRIVERS\lirsgt.sys [25888 2013-06-20] ()
R3 MBAMProtector; H:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; H:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 SbieDrv; H:\Program Files\Sandboxie\SbieDrv.sys [159208 2013-07-08] (Sandboxie Holdings, LLC)
S3 catchme; \??\H:\Users\Daniel\AppData\Local\Temp\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-08 14:45 - 2013-08-08 14:45 - 00000000 ____D H:\FRST
2013-08-08 14:44 - 2013-08-08 14:45 - 01229980 _____ (Farbar) H:\Users\Daniel\Desktop\FRST.exe
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswVmm.sys.sum
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSP.sys.sum
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSnx.sys.sum
2013-08-07 23:02 - 2013-08-07 23:50 - 00003510 _____ H:\Windows\Sandboxie.ini
2013-08-07 23:02 - 2013-08-07 23:01 - 00001073 _____ H:\Users\Daniel\Desktop\Sandboxed Web Browser.lnk
2013-08-07 23:01 - 2013-08-07 23:01 - 00000000 ____D H:\Program Files\Sandboxie
2013-08-07 22:55 - 2013-08-08 14:43 - 00770344 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSnx.sys
2013-08-07 22:55 - 2013-08-08 14:43 - 00369584 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSP.sys
2013-08-07 22:55 - 2013-08-08 14:43 - 00175176 _____ H:\Windows\system32\Drivers\aswVmm.sys
2013-08-07 22:55 - 2013-08-07 22:55 - 00002081 _____ H:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-08-07 22:55 - 2013-05-09 10:59 - 00061680 _____ (AVAST Software) H:\Windows\system32\Drivers\aswRdr2.sys
2013-08-07 22:55 - 2013-05-09 10:59 - 00056080 _____ (AVAST Software) H:\Windows\system32\Drivers\aswTdi.sys
2013-08-07 22:55 - 2013-05-09 10:59 - 00049376 _____ H:\Windows\system32\Drivers\aswRvrt.sys
2013-08-07 22:55 - 2013-05-09 10:59 - 00029816 _____ (AVAST Software) H:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-07 22:54 - 2013-08-07 22:54 - 00000000 ____D H:\Program Files\AVAST Software
2013-08-07 22:54 - 2013-05-09 10:59 - 00066336 _____ (AVAST Software) H:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-07 22:54 - 2013-05-09 10:58 - 00229648 _____ (AVAST Software) H:\Windows\system32\aswBoot.exe
2013-08-07 22:54 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) H:\Windows\avastSS.scr
2013-08-07 22:51 - 2013-08-07 22:54 - 00000000 ____D H:\ProgramData\AVAST Software
2013-08-07 22:23 - 2013-08-07 22:23 - 00000000 ____D H:\Windows\pss
2013-08-07 22:17 - 2013-08-07 22:17 - 00001648 _____ H:\DelFix.txt
2013-08-07 19:12 - 2013-08-07 19:17 - 00000000 ____D H:\ProgramData\HitmanPro
2013-08-07 19:08 - 2013-08-07 22:17 - 00000000 ____D H:\Windows\ERUNT
2013-08-06 17:06 - 2013-08-07 22:13 - 00000000 ____D H:\Windows\erdnt
2013-08-04 21:21 - 2013-08-07 23:13 - 00000000 ____D H:\Users\Daniel\Desktop\Virenprogramme
2013-08-04 18:33 - 2013-08-04 18:33 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Malwarebytes
2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\ProgramData\Malwarebytes
2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\Program Files\Malwarebytes' Anti-Malware
2013-08-04 18:32 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) H:\Windows\system32\Drivers\mbam.sys
2013-08-04 18:06 - 2013-08-04 18:06 - 00263592 _____ (Oracle Corporation) H:\Windows\system32\javaws.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\javaw.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\java.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00094632 _____ (Oracle Corporation) H:\Windows\system32\WindowsAccessBridge.dll
2013-08-04 18:06 - 2013-08-04 18:06 - 00000000 ____D H:\Program Files\Common Files\Java
2013-08-03 13:31 - 2013-08-03 13:31 - 00002243 _____ H:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
2013-08-03 11:20 - 2013-08-03 11:34 - 00000000 ____D H:\Users\Daniel\Desktop\Herr der Ringe
2013-08-03 00:48 - 2013-08-03 00:48 - 00000000 ____D H:\Users\Daniel\Desktop\SporeRegFixforSTEAM
2013-08-03 00:23 - 2013-08-03 00:49 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Spore
2013-08-02 23:12 - 2013-08-02 23:12 - 00000000 ____D H:\ProgramData\EA Core
2013-08-02 22:49 - 2013-08-02 22:50 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold
2013-08-02 21:29 - 2013-08-02 21:29 - 00000215 _____ H:\Users\Daniel\Desktop\Spore.url
2013-08-02 21:10 - 2013-08-02 21:22 - 3106712552 _____ H:\Users\Daniel\Downloads\Spore.7z
2013-08-02 20:29 - 2013-08-04 16:04 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Origin
2013-08-02 20:24 - 2013-08-05 14:33 - 00000000 ____D H:\ProgramData\Origin
2013-08-02 20:23 - 2013-08-02 20:23 - 00000000 ____D H:\ProgramData\Electronic Arts
2013-08-02 19:35 - 2013-08-02 19:51 - 00000000 ____D H:\Users\Daniel\Downloads\Black And White 2 + Battle Of The Gods
2013-08-02 19:33 - 2013-08-03 07:20 - 1658341376 ____R H:\Users\Daniel\Downloads\rld-bme2.iso
2013-08-02 19:29 - 2013-08-06 16:51 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\uTorrent
2013-08-02 18:51 - 2013-08-04 17:42 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Windows Net Data
2013-08-02 18:50 - 2013-08-02 18:51 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp8a15093bda63fc0edbae9b584075dce7
2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\ChromeExtensions
2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp1b7d8e286b222587f57dc450d3fd9af9
2013-08-02 18:36 - 2013-08-02 18:36 - 00000000 ____D H:\Users\Daniel\Downloads\Black-&amp;-White-2
2013-07-31 09:26 - 2013-07-31 11:29 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold Crusader
2013-07-31 09:23 - 2013-07-31 09:23 - 00000000 ____D H:\Program Files\Firefly Studios
2013-07-30 19:39 - 2013-07-30 19:39 - 00015420 _____ H:\Windows\AVMInstall.Log
2013-07-30 19:38 - 2007-12-19 01:00 - 00401920 _____ (AVM GmbH) H:\Windows\system32\Drivers\fwlanusbn.sys
2013-07-30 19:38 - 2007-12-19 01:00 - 00077824 _____ (AVM Berlin) H:\Windows\system32\fwusbnci.dll
2013-07-30 19:38 - 2007-12-19 01:00 - 00015573 _____ H:\Windows\system32\Drivers\fwlanusbn.bin
2013-07-28 22:34 - 2013-07-30 20:04 - 00000000 ____D H:\Users\Daniel\Desktop\SDP
2013-07-25 20:15 - 2013-08-06 16:54 - 00000000 ____D H:\Program Files\Mozilla Firefox
2013-07-24 21:13 - 2013-07-24 21:13 - 00000000 ____D H:\Users\Daniel\dwhelper
2013-07-21 00:55 - 2012-07-26 05:39 - 00526952 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\Wdf01000.sys
2013-07-21 00:55 - 2012-07-26 05:39 - 00047720 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\WdfLdr.sys
2013-07-21 00:55 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) H:\Windows\system32\WUDFHost.exe
2013-07-21 00:55 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) H:\Windows\system32\WUDFx.dll
2013-07-21 00:55 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) H:\Windows\system32\WUDFPlatform.dll
2013-07-21 00:55 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) H:\Windows\system32\WUDFSvc.dll
2013-07-21 00:55 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) H:\Windows\system32\WUDFCoinstaller.dll
2013-07-21 00:55 - 2012-07-26 04:46 - 00009728 _____ (Microsoft Corporation) H:\Windows\system32\Wdfres.dll
2013-07-21 00:55 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\WUDFPf.sys
2013-07-21 00:55 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\WUDFRd.sys
2013-07-21 00:55 - 2012-06-02 16:57 - 00000003 _____ H:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-07-21 00:55 - 2012-06-02 16:34 - 00000003 _____ H:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-07-20 23:20 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) H:\Windows\system32\usp10.dll
2013-07-20 23:20 - 2012-08-22 19:16 - 00712048 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\ndis.sys
2013-07-20 23:20 - 2012-07-04 21:45 - 00033280 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\RNDISMP.sys
2013-07-20 23:20 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) H:\Windows\system32\spoolsv.exe
2013-07-20 23:20 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) H:\Windows\system32\xmllite.dll
2013-07-20 23:20 - 2011-03-25 04:58 - 00284672 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbport.sys
2013-07-20 23:20 - 2011-03-25 04:58 - 00258560 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbhub.sys
2013-07-20 23:20 - 2011-03-25 04:58 - 00075776 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbccgp.sys
2013-07-20 23:20 - 2011-03-25 04:57 - 00043008 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbehci.sys
2013-07-20 23:20 - 2011-03-25 04:57 - 00024064 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbuhci.sys
2013-07-20 23:20 - 2011-03-25 04:57 - 00020480 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbohci.sys
2013-07-20 23:20 - 2011-03-25 04:57 - 00005888 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbd.sys
2013-07-20 23:20 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) H:\Windows\system32\prevhost.exe
2013-07-20 23:19 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) H:\Windows\system32\cryptdlg.dll
2013-07-20 23:19 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) H:\Windows\system32\d3d11.dll
2013-07-20 23:19 - 2013-03-19 06:53 - 00186368 _____ (Microsoft Corporation) H:\Windows\system32\wwansvc.dll
2013-07-20 23:19 - 2013-03-19 05:33 - 00040960 _____ (Microsoft Corporation) H:\Windows\system32\wwanprotdim.dll
2013-07-20 23:19 - 2013-01-24 06:47 - 00196328 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\fvevol.sys
2013-07-20 23:19 - 2012-08-21 22:12 - 00245760 _____ (Microsoft Corporation) H:\Windows\system32\OxpsConverter.exe
2013-07-20 23:19 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) H:\Windows\system32\timedate.cpl
2013-07-20 23:19 - 2011-03-11 07:39 - 00148864 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\storport.sys
2013-07-20 23:19 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) H:\Windows\system32\Drivers\nvstor.sys
2013-07-20 23:19 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) H:\Windows\system32\Drivers\nvraid.sys
2013-07-20 23:19 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) H:\Windows\system32\Drivers\iaStorV.sys
2013-07-20 23:19 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) H:\Windows\system32\Drivers\amdsata.sys
2013-07-20 23:19 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) H:\Windows\system32\Drivers\amdxata.sys
2013-07-20 23:19 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) H:\Windows\system32\esent.dll
2013-07-20 23:19 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) H:\Windows\system32\fsutil.exe
2013-07-20 23:19 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\USBSTOR.SYS
2013-07-20 23:18 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) H:\Windows\system32\Wpc.dll
2013-07-20 23:18 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) H:\Windows\system32\gameux.dll
2013-07-20 23:18 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) H:\Windows\system32\cero.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) H:\Windows\system32\esrb.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) H:\Windows\system32\fpb.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) H:\Windows\system32\oflc-nz.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) H:\Windows\system32\pegibbfc.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) H:\Windows\system32\csrr.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) H:\Windows\system32\cob-au.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) H:\Windows\system32\usk.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) H:\Windows\system32\oflc.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) H:\Windows\system32\grb.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) H:\Windows\system32\pegi-pt.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) H:\Windows\system32\pegi-fi.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) H:\Windows\system32\pegi.rs
2013-07-20 23:18 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) H:\Windows\system32\djctq.rs
2013-07-20 23:18 - 2012-11-30 06:47 - 00868352 _____ (Microsoft Corporation) H:\Windows\system32\kernel32.dll
2013-07-20 23:18 - 2012-11-30 06:47 - 00293376 _____ (Microsoft Corporation) H:\Windows\system32\KernelBase.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00005120 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00004608 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 04:55 - 00271360 _____ (Microsoft Corporation) H:\Windows\system32\conhost.exe
2013-07-20 23:18 - 2012-11-30 04:38 - 00006144 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 04:38 - 00004608 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 04:38 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 04:38 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-07-20 23:18 - 2012-11-30 01:17 - 00420064 _____ H:\Windows\system32\locale.nls
2013-07-20 23:18 - 2012-10-03 18:42 - 00242176 _____ (Microsoft Corporation) H:\Windows\system32\nlasvc.dll
2013-07-20 23:18 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) H:\Windows\system32\netcorehc.dll
2013-07-20 23:18 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) H:\Windows\system32\ncsi.dll
2013-07-20 23:18 - 2012-10-03 18:42 - 00052224 _____ (Microsoft Corporation) H:\Windows\system32\nlaapi.dll
2013-07-20 23:18 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) H:\Windows\system32\netevent.dll
2013-07-20 23:18 - 2012-10-03 18:40 - 00499712 _____ (Microsoft Corporation) H:\Windows\system32\iphlpsvc.dll
2013-07-20 23:18 - 2012-10-03 17:21 - 00035328 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\tcpipreg.sys
2013-07-20 23:18 - 2012-05-05 09:46 - 00400896 _____ (Microsoft Corporation) H:\Windows\system32\srcore.dll
2013-07-20 23:18 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) H:\Windows\system32\msi.dll
2013-07-20 23:18 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) H:\Windows\system32\tquery.dll
2013-07-20 23:18 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) H:\Windows\system32\mssrch.dll
2013-07-20 23:18 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) H:\Windows\system32\mssvp.dll
2013-07-20 23:18 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) H:\Windows\system32\mssph.dll
2013-07-20 23:18 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) H:\Windows\system32\mssphtb.dll
2013-07-20 23:18 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) H:\Windows\system32\msscntrs.dll
2013-07-20 23:18 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) H:\Windows\system32\SearchIndexer.exe
2013-07-20 23:18 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) H:\Windows\system32\SearchProtocolHost.exe
2013-07-20 23:18 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) H:\Windows\system32\SearchFilterHost.exe
2013-07-20 23:18 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) H:\Windows\explorer.exe
2013-07-20 23:12 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) H:\Windows\system32\dhcpcore6.dll
2013-07-20 23:12 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) H:\Windows\system32\dhcpcsvc6.dll
2013-07-20 23:12 - 2012-05-01 06:44 - 00164352 _____ (Microsoft Corporation) H:\Windows\system32\profsvc.dll
2013-07-20 23:12 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) H:\Windows\system32\ntshrui.dll
2013-07-20 23:12 - 2011-04-22 21:14 - 00027008 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\Diskdump.sys
2013-07-20 17:23 - 2013-07-20 17:23 - 00000020 _____ H:\Windows\ðó}
2013-07-20 17:23 - 2013-07-20 17:23 - 00000000 ____D H:\Windows\de
2013-07-20 17:23 - 2013-07-20 17:23 - 00000000 ____D H:\Program Files\Microsoft SQL Server Compact Edition
2013-07-20 17:22 - 2013-07-20 17:23 - 00000000 ____D H:\Program Files\Windows Live
2013-07-20 17:22 - 2013-07-20 17:22 - 00000000 ____D H:\Windows\PCHEALTH
2013-07-20 17:19 - 2013-07-31 21:57 - 00000000 ____D H:\Users\Daniel\AppData\Local\Windows Live
2013-07-20 17:19 - 2013-07-20 17:19 - 00000000 ____D H:\Program Files\Common Files\Windows Live
2013-07-17 17:46 - 2013-07-17 17:46 - 00000906 _____ H:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-07-17 17:46 - 2013-07-17 17:46 - 00000000 ____D H:\Program Files\LogMeIn Hamachi
2013-07-17 12:50 - 2013-07-17 12:50 - 00143856 _____ H:\Windows\Minidump\071713-19484-01.dmp
2013-07-14 00:46 - 2013-07-14 00:46 - 00675988 _____ H:\Users\Daniel\Desktop\Minecraft (1).exe
2013-07-12 22:43 - 2013-07-12 22:43 - 00001072 _____ H:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4056296316-973622430-28050819-1000Core1ce7f40846d64cd.job
2013-07-10 23:02 - 2013-07-10 23:02 - 00001935 _____ H:\Users\Daniel\Desktop\Skype.lnk
2013-07-10 23:02 - 2013-07-10 23:02 - 00000000 ___RD H:\Program Files\Skype
2013-07-10 23:02 - 2013-07-10 23:02 - 00000000 ____D H:\Program Files\Common Files\Skype
2013-07-10 22:50 - 2013-08-08 14:44 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype
2013-07-10 22:50 - 2013-07-10 23:02 - 00000000 ____D H:\ProgramData\Skype
2013-07-10 22:13 - 2013-07-10 22:13 - 00000030 _____ H:\Users\Daniel\Desktop\skype-temp-clean.bat
2013-07-10 21:09 - 2013-07-10 22:23 - 00000000 ____D H:\Users\Daniel\Desktop\daniel.23570
2013-07-10 21:02 - 2013-07-17 17:48 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype-alt
2013-07-10 20:08 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) H:\Windows\system32\WMVDECOD.DLL
2013-07-10 20:07 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) H:\Windows\system32\win32k.sys
2013-07-10 20:07 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) H:\Windows\system32\qedit.dll

==================== One Month Modified Files and Folders =======

2013-08-08 14:45 - 2013-08-08 14:45 - 00000000 ____D H:\FRST
2013-08-08 14:45 - 2013-08-08 14:44 - 01229980 _____ (Farbar) H:\Users\Daniel\Desktop\FRST.exe
2013-08-08 14:45 - 2012-08-02 22:47 - 02086009 _____ H:\Windows\WindowsUpdate.log
2013-08-08 14:44 - 2013-07-10 22:50 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswVmm.sys.sum
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSP.sys.sum
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSnx.sys.sum
2013-08-08 14:43 - 2013-08-07 22:55 - 00770344 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSnx.sys
2013-08-08 14:43 - 2013-08-07 22:55 - 00369584 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSP.sys
2013-08-08 14:43 - 2013-08-07 22:55 - 00175176 _____ H:\Windows\system32\Drivers\aswVmm.sys
2013-08-08 14:42 - 2013-05-10 20:00 - 00000000 ____D H:\Program Files\Steam
2013-08-08 14:41 - 2013-06-29 00:06 - 00000434 _____ H:\Windows\system32\Drivers\etc\hosts.ics
2013-08-08 14:40 - 2009-07-14 06:53 - 00000006 ____H H:\Windows\Tasks\SA.DAT
2013-08-08 14:40 - 2009-07-14 06:39 - 00122888 _____ H:\Windows\setupact.log
2013-08-07 23:53 - 2013-06-02 00:57 - 00070874 _____ H:\Windows\IE10_main.log
2013-08-07 23:50 - 2013-08-07 23:02 - 00003510 _____ H:\Windows\Sandboxie.ini
2013-08-07 23:36 - 2012-08-02 23:02 - 00001124 _____ H:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4056296316-973622430-28050819-1000UA.job
2013-08-07 23:16 - 2009-07-14 06:34 - 00018928 ____H H:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-07 23:16 - 2009-07-14 06:34 - 00018928 ____H H:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-07 23:13 - 2013-08-04 21:21 - 00000000 ____D H:\Users\Daniel\Desktop\Virenprogramme
2013-08-07 23:08 - 2012-08-06 13:47 - 00280548 _____ H:\Windows\PFRO.log
2013-08-07 23:01 - 2013-08-07 23:02 - 00001073 _____ H:\Users\Daniel\Desktop\Sandboxed Web Browser.lnk
2013-08-07 23:01 - 2013-08-07 23:01 - 00000000 ____D H:\Program Files\Sandboxie
2013-08-07 22:55 - 2013-08-07 22:55 - 00002081 _____ H:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-08-07 22:54 - 2013-08-07 22:54 - 00000000 ____D H:\Program Files\AVAST Software
2013-08-07 22:54 - 2013-08-07 22:51 - 00000000 ____D H:\ProgramData\AVAST Software
2013-08-07 22:54 - 2009-07-14 04:04 - 00002577 _____ H:\Windows\system32\config.nt
2013-08-07 22:49 - 2012-08-19 22:06 - 00000000 ____D H:\ProgramData\Avira
2013-08-07 22:23 - 2013-08-07 22:23 - 00000000 ____D H:\Windows\pss
2013-08-07 22:17 - 2013-08-07 22:17 - 00001648 _____ H:\DelFix.txt
2013-08-07 22:17 - 2013-08-07 19:08 - 00000000 ____D H:\Windows\ERUNT
2013-08-07 22:14 - 2013-01-12 20:51 - 00000000 ____D H:\Users\Daniel\AppData\Local\LogMeIn Hamachi
2013-08-07 22:13 - 2013-08-06 17:06 - 00000000 ____D H:\Windows\erdnt
2013-08-07 19:17 - 2013-08-07 19:12 - 00000000 ____D H:\ProgramData\HitmanPro
2013-08-06 17:45 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\rescache
2013-08-06 16:56 - 2012-09-11 12:34 - 00000000 ____D H:\Users\Daniel\AppData\Local\Unity
2013-08-06 16:54 - 2013-07-25 20:15 - 00000000 ____D H:\Program Files\Mozilla Firefox
2013-08-06 16:54 - 2013-05-11 22:18 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-08-06 16:51 - 2013-08-02 19:29 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\uTorrent
2013-08-06 16:06 - 2013-06-30 21:58 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\vlc
2013-08-06 14:45 - 2013-06-30 21:11 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Orbit
2013-08-06 14:23 - 2012-08-03 00:04 - 00000000 ____D H:\Users\Daniel\AppData\Local\PMB Files
2013-08-06 14:23 - 2012-08-03 00:04 - 00000000 ____D H:\ProgramData\PMB Files
2013-08-05 14:42 - 2012-08-02 22:56 - 00024556 _____ H:\Windows\avmfwlanci.log
2013-08-05 14:33 - 2013-08-02 20:24 - 00000000 ____D H:\ProgramData\Origin
2013-08-05 14:02 - 2012-08-02 22:56 - 01498506 _____ H:\Windows\system32\PerfStringBackup.INI
2013-08-04 21:22 - 2012-08-28 14:26 - 00000000 ____D H:\Users\Daniel\Desktop\spiele
2013-08-04 21:22 - 2012-08-28 14:25 - 00000000 ____D H:\Users\Daniel\Desktop\bilder
2013-08-04 18:38 - 2013-06-30 20:21 - 00000000 ____D H:\ProgramData\Freemake
2013-08-04 18:38 - 2013-06-30 20:21 - 00000000 ____D H:\Program Files\Freemake
2013-08-04 18:33 - 2013-08-04 18:33 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Malwarebytes
2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\ProgramData\Malwarebytes
2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\Program Files\Malwarebytes' Anti-Malware
2013-08-04 18:06 - 2013-08-04 18:06 - 00263592 _____ (Oracle Corporation) H:\Windows\system32\javaws.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\javaw.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\java.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00094632 _____ (Oracle Corporation) H:\Windows\system32\WindowsAccessBridge.dll
2013-08-04 18:06 - 2013-08-04 18:06 - 00000000 ____D H:\Program Files\Common Files\Java
2013-08-04 18:06 - 2012-08-02 23:36 - 00867240 _____ (Oracle Corporation) H:\Windows\system32\npDeployJava1.dll
2013-08-04 18:06 - 2012-08-02 23:36 - 00789416 _____ (Oracle Corporation) H:\Windows\system32\deployJava1.dll
2013-08-04 17:54 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\system32\de-DE
2013-08-04 17:42 - 2013-08-02 18:51 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Windows Net Data
2013-08-04 17:08 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\system32\NDF
2013-08-04 16:50 - 2013-06-07 17:27 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\.minecraft
2013-08-04 16:04 - 2013-08-02 20:29 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Origin
2013-08-03 13:37 - 2012-08-10 21:16 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-08-03 13:31 - 2013-08-03 13:31 - 00002243 _____ H:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
2013-08-03 13:31 - 2012-08-10 21:10 - 00325977 _____ H:\Windows\DirectX.log
2013-08-03 13:25 - 2013-05-17 17:29 - 00000000 ____D H:\Program Files\Electronic Arts
2013-08-03 11:34 - 2013-08-03 11:20 - 00000000 ____D H:\Users\Daniel\Desktop\Herr der Ringe
2013-08-03 07:20 - 2013-08-02 19:33 - 1658341376 ____R H:\Users\Daniel\Downloads\rld-bme2.iso
2013-08-03 00:49 - 2013-08-03 00:23 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Spore
2013-08-03 00:48 - 2013-08-03 00:48 - 00000000 ____D H:\Users\Daniel\Desktop\SporeRegFixforSTEAM
2013-08-02 23:12 - 2013-08-02 23:12 - 00000000 ____D H:\ProgramData\EA Core
2013-08-02 22:50 - 2013-08-02 22:49 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold
2013-08-02 22:48 - 2012-08-02 22:54 - 00000000 ____D H:\Users\Daniel\AppData\Local\VirtualStore
2013-08-02 21:29 - 2013-08-02 21:29 - 00000215 _____ H:\Users\Daniel\Desktop\Spore.url
2013-08-02 21:22 - 2013-08-02 21:10 - 3106712552 _____ H:\Users\Daniel\Downloads\Spore.7z
2013-08-02 20:23 - 2013-08-02 20:23 - 00000000 ____D H:\ProgramData\Electronic Arts
2013-08-02 19:51 - 2013-08-02 19:35 - 00000000 ____D H:\Users\Daniel\Downloads\Black And White 2 + Battle Of The Gods
2013-08-02 19:38 - 2012-08-02 23:55 - 00000000 ___HD H:\Program Files\InstallShield Installation Information
2013-08-02 18:51 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp8a15093bda63fc0edbae9b584075dce7
2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\ChromeExtensions
2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp1b7d8e286b222587f57dc450d3fd9af9
2013-08-02 18:50 - 2012-08-02 22:54 - 00000000 ____D H:\Users\Daniel
2013-08-02 18:36 - 2013-08-02 18:36 - 00000000 ____D H:\Users\Daniel\Downloads\Black-&amp;-White-2
2013-08-01 19:15 - 2013-02-06 18:07 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\TS3Client
2013-08-01 14:41 - 2012-08-02 23:26 - 00002375 _____ H:\Users\Daniel\Desktop\Google Chrome.lnk
2013-07-31 21:57 - 2013-07-20 17:19 - 00000000 ____D H:\Users\Daniel\AppData\Local\Windows Live
2013-07-31 19:56 - 2013-02-06 18:04 - 00000000 ____D H:\Program Files\TeamSpeak 3 Client
2013-07-31 19:45 - 2009-07-14 06:53 - 00032632 _____ H:\Windows\Tasks\SCHEDLGU.TXT
2013-07-31 11:29 - 2013-07-31 09:26 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold Crusader
2013-07-31 09:23 - 2013-07-31 09:23 - 00000000 ____D H:\Program Files\Firefly Studios
2013-07-31 09:12 - 2013-05-10 20:00 - 00000000 ____D H:\Program Files\Common Files\Steam
2013-07-30 20:04 - 2013-07-28 22:34 - 00000000 ____D H:\Users\Daniel\Desktop\SDP
2013-07-30 19:39 - 2013-07-30 19:39 - 00015420 _____ H:\Windows\AVMInstall.Log
2013-07-30 19:39 - 2012-08-02 22:56 - 00000000 ____D H:\Program Files\avmwlanstick
2013-07-29 17:28 - 2012-11-24 16:50 - 00000000 ____D H:\Users\Daniel\Desktop\musik
2013-07-24 21:32 - 2013-06-16 21:03 - 00000000 ___RD H:\Users\Daniel\Desktop\Alles mit MC
2013-07-24 21:13 - 2013-07-24 21:13 - 00000000 ____D H:\Users\Daniel\dwhelper
2013-07-24 13:52 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\Microsoft.NET
2013-07-23 21:05 - 2013-04-26 17:00 - 00000000 ____D H:\Users\Daniel\AppData\Local\Microsoft Games
2013-07-23 21:02 - 2012-08-02 23:00 - 00062776 _____ H:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-21 23:06 - 2009-07-14 06:33 - 00286536 _____ H:\Windows\system32\FNTCACHE.DAT
2013-07-21 23:05 - 2012-08-03 08:43 - 00000000 ____D H:\Windows\system32\Drivers\de-DE
2013-07-20 17:23 - 2013-07-20 17:23 - 00000020 _____ H:\Windows\ðó}
2013-07-20 17:23 - 2013-07-20 17:23 - 00000000 ____D H:\Windows\de
2013-07-20 17:23 - 2013-07-20 17:23 - 00000000 ____D H:\Program Files\Microsoft SQL Server Compact Edition
2013-07-20 17:23 - 2013-07-20 17:22 - 00000000 ____D H:\Program Files\Windows Live
2013-07-20 17:22 - 2013-07-20 17:22 - 00000000 ____D H:\Windows\PCHEALTH
2013-07-20 17:22 - 2009-07-14 04:37 - 00000000 ____D H:\Program Files\Common Files\microsoft shared
2013-07-20 17:19 - 2013-07-20 17:19 - 00000000 ____D H:\Program Files\Common Files\Windows Live
2013-07-17 17:48 - 2013-07-10 21:02 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype-alt
2013-07-17 17:46 - 2013-07-17 17:46 - 00000906 _____ H:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-07-17 17:46 - 2013-07-17 17:46 - 00000000 ____D H:\Program Files\LogMeIn Hamachi
2013-07-17 12:50 - 2013-07-17 12:50 - 00143856 _____ H:\Windows\Minidump\071713-19484-01.dmp
2013-07-17 12:50 - 2013-05-05 12:54 - 232415028 _____ H:\Windows\MEMORY.DMP
2013-07-17 12:50 - 2013-05-05 12:54 - 00000000 ____D H:\Windows\Minidump
2013-07-14 00:46 - 2013-07-14 00:46 - 00675988 _____ H:\Users\Daniel\Desktop\Minecraft (1).exe
2013-07-12 22:43 - 2013-07-12 22:43 - 00001072 _____ H:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4056296316-973622430-28050819-1000Core1ce7f40846d64cd.job
2013-07-11 18:27 - 2009-07-14 09:49 - 00000000 ____D H:\Program Files\Windows Journal
2013-07-11 18:27 - 2009-07-14 06:52 - 00000000 ____D H:\Program Files\Windows Defender
2013-07-10 23:02 - 2013-07-10 23:02 - 00001935 _____ H:\Users\Daniel\Desktop\Skype.lnk
2013-07-10 23:02 - 2013-07-10 23:02 - 00000000 ___RD H:\Program Files\Skype
2013-07-10 23:02 - 2013-07-10 23:02 - 00000000 ____D H:\Program Files\Common Files\Skype
2013-07-10 23:02 - 2013-07-10 22:50 - 00000000 ____D H:\ProgramData\Skype
2013-07-10 22:29 - 2012-08-02 23:26 - 00000000 ____D H:\ProgramData\Skype-alt
2013-07-10 22:23 - 2013-07-10 21:09 - 00000000 ____D H:\Users\Daniel\Desktop\daniel.23570
2013-07-10 22:13 - 2013-07-10 22:13 - 00000030 _____ H:\Users\Daniel\Desktop\skype-temp-clean.bat
2013-07-10 20:59 - 2012-08-02 23:26 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Old_Skype

==================== Bamital & volsnap Check =================

H:\Windows\explorer.exe => MD5 is legit
H:\Windows\System32\winlogon.exe => MD5 is legit
H:\Windows\System32\wininit.exe => MD5 is legit
H:\Windows\System32\svchost.exe => MD5 is legit
H:\Windows\System32\services.exe => MD5 is legit
H:\Windows\System32\User32.dll => MD5 is legit
H:\Windows\System32\userinit.exe => MD5 is legit
H:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-03 00:09

==================== End Of Log ============================

--- --- ---

hier...

markusg · 08.08.2013, 14:24

Hi, ändere mal die Google Startseite
momentan noch snapdo.com.
starte dann neu, teste ob jetzt der Chrome vernünftig läuft.
das ie Problem besteht noch?

TORFdaniel · 08.08.2013, 14:28

ja es besteht immer noch. Ich hab jetzt google als startseite

markusg · 08.08.2013, 14:30

Du hast in chrome die Startseite geendert?
haben die Anderen Browser noch probleme

TORFdaniel · 08.08.2013, 14:32

ja habe ich.

Nein eigentlich nicht nur das mit dem getwindowinfo noch

markusg · 08.08.2013, 14:38

HI,

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

TORFdaniel · 22.08.2013, 17:20

So ich habe den Scan durchgeführt aber ich finde unter dem ausführ link den log nicht was kann ich tun?

Sry war ein paar tage nicht

aharonov · 30.08.2013, 13:20

Hallo und entschuldige bitte die Verspätung.

Brauchst du weiterhin noch Hilfe?

Falls ja:
Hat ESET denn etwas gefunden?

Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

TORFdaniel · 01.09.2013, 19:03

Hier

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-08-2013 (ATTENTION: ====> FRST version is 24 days old and could be outdated)
Ran by Daniel (administrator) on 01-09-2013 20:00:20
Running from H:\Users\Daniel\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) H:\Windows\system32\atiesrxx.exe
(Sandboxie Holdings, LLC) H:\Program Files\Sandboxie\SbieSvc.exe
(AMD) H:\Windows\system32\atieclxx.exe
(AVAST Software) H:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) H:\Program Files\avmwlanstick\WlanNetService.exe
(Apple Inc.) H:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn Inc.) H:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corp.) H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) H:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Microsoft Corporation) H:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(Microsoft Corporation) H:\Program Files\Windows Media Player\wmplayer.exe
(Oracle Corporation) H:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) H:\Program Files\AVAST Software\Avast\AvastUI.exe
(Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
(Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\LCD Manager\lcdmon.exe
(Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Valve Corporation) H:\Program Files\Steam\Steam.exe
(Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Sandboxie Holdings, LLC) H:\Program Files\Sandboxie\SbieCtrl.exe
(Windows Net) H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe
(Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Microsoft Corporation) H:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) H:\Program Files\Internet Explorer\iexplore.exe
(Valve Corporation) H:\Program Files\Common Files\Steam\SteamService.exe
(Microsoft Corporation) H:\Windows\system32\wuauclt.exe
(Skype Technologies S.A.) H:\Program Files\Skype\Phone\Skype.exe
(Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe
() H:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() H:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.177\deploy\LoLLauncher.exe
() H:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.38\deploy\LolClient.exe
(DVDVideoSoft Ltd.) H:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe
(Apple Inc.) H:\Program Files\iTunes\iTunes.exe
(Apple Inc.) H:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) H:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe
(Apple Inc.) H:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe
(DVDVideoSoft Ltd.) H:\Program Files\Common Files\DVDVideoSoft\bin\DvsService.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SunJavaUpdateSched] - H:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avast] - H:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [Launch LgDeviceAgent] - H:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [358472 2010-06-11] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - H:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [1809992 2010-06-11] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [3649096 2010-06-11] (Logitech Inc.)
HKCU\...\Run: [Steam] - H:\Program Files\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation)
HKCU\...\Run: [Skype] - H:\Program Files\Skype\Phone\Skype.exe [19873896 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [SandboxieControl] - H:\Program Files\Sandboxie\SbieCtrl.exe [543320 2013-07-08] (Sandboxie Holdings, LLC)
MountPoints2: {1841e9a7-f93e-11e2-b8a9-00248ce625ea} - I:\pushinst.exe
MountPoints2: {2a6149da-501e-11e2-9cd9-001c4af6e8a4} - I:\HTC_Sync_Manager_PC.exe
MountPoints2: {af38bbab-0724-11e2-a9e4-00248ce625ea} - I:\pushinst.exe
MountPoints2: {cc807940-dce3-11e1-ae98-00248ce625ea} - I:\pushinst.exe
Startup: H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: msdaipp - No CLSID Value - 
Winsock: Catalog5 05 H:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR Extension: () - H:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - H:\Users\Daniel\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx
CHR StartMenuInternet: Google Chrome - H:\Program Files\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 avast! Antivirus; H:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVM WLAN Connection Service; H:\Program Files\avmwlanstick\WlanNetService.exe [364544 2008-02-25] (AVM Berlin)
R2 Hamachi2Svc; H:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)
S2 HiPatchService; H:\Program Files\Hi-Rez Studios\HiPatchService.exe [8704 2012-08-30] (Hi-Rez Studios)
R2 MBAMScheduler; H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SbieSvc; H:\Program Files\Sandboxie\SbieSvc.exe [129112 2013-07-08] (Sandboxie Holdings, LLC)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; H:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; H:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 aswRdr; H:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)
R0 aswRvrt; H:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; H:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-08] (AVAST Software)
R1 aswSP; H:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-08] (AVAST Software)
R1 aswTdi; H:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; H:\Windows\System32\Drivers\aswVmm.sys [175176 2013-08-08] ()
R2 atksgt; H:\Windows\System32\DRIVERS\atksgt.sys [83872 2013-06-20] ()
S3 avmeject; H:\Windows\System32\drivers\avmeject.sys [4352 2007-11-07] (AVM Berlin)
R3 FWLANUSB; H:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH)
S3 fwlanusbn; H:\Windows\System32\DRIVERS\fwlanusbn.sys [401920 2007-12-19] (AVM GmbH)
R3 hamachi; H:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 L1E; H:\Windows\System32\DRIVERS\L1E62x86.sys [47104 2009-07-14] (Atheros Communications, Inc.)
R3 LGBusEnum; H:\Windows\System32\drivers\LGBusEnum.sys [19720 2009-11-23] (Logitech Inc.)
R3 LGVirHid; H:\Windows\System32\drivers\LGVirHid.sys [14856 2009-11-23] (Logitech Inc.)
R2 lirsgt; H:\Windows\System32\DRIVERS\lirsgt.sys [25888 2013-06-20] ()
R3 MBAMProtector; H:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; H:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 SbieDrv; H:\Program Files\Sandboxie\SbieDrv.sys [159208 2013-07-08] (Sandboxie Holdings, LLC)
S3 catchme; \??\H:\Users\Daniel\AppData\Local\Temp\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-01 19:10 - 2013-09-01 19:17 - 00000000 ____D H:\Ommods
2013-09-01 18:42 - 2013-09-01 18:42 - 00000000 ____D H:\Users\Daniel\Desktop\naked mod
2013-08-29 17:52 - 2013-08-29 18:20 - 00000000 ____D H:\Program Files\GSkype
2013-08-29 17:52 - 2013-08-29 17:52 - 00249856 ____N (Microsoft Corporation) H:\Windows\Setup1.exe
2013-08-29 17:52 - 2013-08-29 17:52 - 00073216 _____ (Microsoft Corporation) H:\Windows\ST6UNST.EXE
2013-08-29 16:12 - 2013-08-29 16:14 - 00000000 ____D H:\Users\Daniel\AppData\Local\Logitech
2013-08-29 16:11 - 2013-08-29 16:11 - 00000000 ____H H:\Windows\system32\Drivers\Msft_User_lgSSQVGA_01_00_00.Wdf
2013-08-29 16:11 - 2013-08-29 16:11 - 00000000 ____H H:\Windows\system32\Drivers\Msft_User_lgSSBW_01_00_00.Wdf
2013-08-29 16:09 - 2013-08-29 16:09 - 00000000 ____D H:\ProgramData\Logitech
2013-08-29 16:09 - 2013-08-29 16:09 - 00000000 ____D H:\Program Files\Logitech
2013-08-18 17:00 - 2013-08-30 17:11 - 00002139 _____ H:\Users\Public\Desktop\Google Chrome.lnk
2013-08-18 16:59 - 2013-09-01 19:04 - 00001098 _____ H:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-18 16:59 - 2013-09-01 17:04 - 00001094 _____ H:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-18 16:59 - 2013-08-18 17:00 - 00000000 ____D H:\Program Files\Google
2013-08-18 16:58 - 2013-08-18 17:00 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Google
2013-08-18 16:58 - 2013-08-18 16:58 - 00062776 _____ H:\Users\TORFdaniel\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-18 16:58 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Deployment
2013-08-18 16:58 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Apps\2.0
2013-08-18 16:57 - 2013-08-18 16:57 - 00000000 ____D H:\Users\TORFdaniel\AppData\Roaming\Adobe
2013-08-18 16:55 - 2013-08-18 16:55 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\LogMeIn Hamachi
2013-08-15 22:45 - 2013-08-15 22:45 - 00000000 ___RD H:\Sandbox
2013-08-14 20:29 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) H:\Windows\system32\WMVDECOD.DLL
2013-08-14 20:29 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) H:\Windows\system32\tzres.dll
2013-08-14 20:29 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) H:\Windows\system32\ntkrnlpa.exe
2013-08-14 20:29 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) H:\Windows\system32\ntoskrnl.exe
2013-08-14 20:29 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) H:\Windows\system32\ntdll.dll
2013-08-14 20:29 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) H:\Windows\system32\wintrust.dll
2013-08-14 20:29 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) H:\Windows\system32\rpcrt4.dll
2013-08-14 20:29 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) H:\Windows\system32\crypt32.dll
2013-08-14 20:29 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) H:\Windows\system32\cryptsvc.dll
2013-08-14 20:29 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) H:\Windows\system32\cryptnet.dll
2013-08-14 20:29 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\tcpip.sys
2013-08-14 20:29 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 20:20 - 2013-08-18 17:04 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\VirtualStore
2013-08-14 20:19 - 2013-08-14 20:21 - 00000000 ____D H:\Users\TORFdaniel
2013-08-14 20:19 - 2013-08-14 20:19 - 00000020 ___SH H:\Users\TORFdaniel\ntuser.ini
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Startmenü
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Netzwerkumgebung
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Druckumgebung
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Documents\Eigene Musik
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Documents\Eigene Bilder
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\AppData\Local\Verlauf
2013-08-11 21:22 - 2013-08-11 21:23 - 00000000 ____D H:\Users\Daniel\Desktop\beats
2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\AVS4YOU
2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\ProgramData\AVS4YOU
2013-08-11 20:39 - 2013-08-11 20:40 - 00000000 ____D H:\Program Files\Common Files\AVSMedia
2013-08-11 20:39 - 2013-08-11 20:40 - 00000000 ____D H:\Program Files\AVS4YOU
2013-08-11 20:39 - 2013-08-11 20:39 - 00001165 _____ H:\Users\Daniel\Desktop\AVS Audio Editor.lnk
2013-08-11 20:39 - 2012-12-18 12:55 - 01700352 _____ (Microsoft Corporation) H:\Windows\system32\GdiPlus.dll
2013-08-11 20:39 - 2012-12-18 12:55 - 00024576 _____ (Microsoft Corporation) H:\Windows\system32\msxml3a.dll
2013-08-11 20:28 - 2013-08-11 20:28 - 00392056 _____ (Softonic                                        ) H:\Users\Daniel\Desktop\SoftonicDownloader_fuer_free-mp3-cutter-and-editor.exe
2013-08-08 22:25 - 2013-08-14 22:30 - 00000000 ____D H:\Windows\system32\MRT
2013-08-08 17:05 - 2013-08-08 17:05 - 00000000 ____D H:\Program Files\ESET
2013-08-08 17:04 - 2013-08-08 17:04 - 02347384 _____ (ESET) H:\Users\Daniel\Desktop\esetsmartinstaller_enu.exe
2013-08-08 14:47 - 2013-08-14 22:29 - 75778376 _____ (Microsoft Corporation) H:\Windows\system32\MRT.exe
2013-08-08 14:45 - 2013-08-08 14:45 - 00000000 ____D H:\FRST
2013-08-08 14:44 - 2013-08-08 14:45 - 01229980 _____ (Farbar) H:\Users\Daniel\Desktop\FRST.exe
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswVmm.sys.sum
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSP.sys.sum
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSnx.sys.sum
2013-08-07 23:02 - 2013-08-31 18:12 - 00003600 _____ H:\Windows\Sandboxie.ini
2013-08-07 23:02 - 2013-08-07 23:01 - 00001073 _____ H:\Users\Daniel\Desktop\Sandboxed Web Browser.lnk
2013-08-07 23:01 - 2013-08-07 23:01 - 00000000 ____D H:\Program Files\Sandboxie
2013-08-07 22:55 - 2013-08-08 14:43 - 00770344 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSnx.sys
2013-08-07 22:55 - 2013-08-08 14:43 - 00369584 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSP.sys
2013-08-07 22:55 - 2013-08-08 14:43 - 00175176 _____ H:\Windows\system32\Drivers\aswVmm.sys
2013-08-07 22:55 - 2013-08-07 22:55 - 00002081 _____ H:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-08-07 22:55 - 2013-05-09 10:59 - 00061680 _____ (AVAST Software) H:\Windows\system32\Drivers\aswRdr2.sys
2013-08-07 22:55 - 2013-05-09 10:59 - 00056080 _____ (AVAST Software) H:\Windows\system32\Drivers\aswTdi.sys
2013-08-07 22:55 - 2013-05-09 10:59 - 00049376 _____ H:\Windows\system32\Drivers\aswRvrt.sys
2013-08-07 22:55 - 2013-05-09 10:59 - 00029816 _____ (AVAST Software) H:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-07 22:54 - 2013-08-07 22:54 - 00000000 ____D H:\Program Files\AVAST Software
2013-08-07 22:54 - 2013-05-09 10:59 - 00066336 _____ (AVAST Software) H:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-07 22:54 - 2013-05-09 10:58 - 00229648 _____ (AVAST Software) H:\Windows\system32\aswBoot.exe
2013-08-07 22:54 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) H:\Windows\avastSS.scr
2013-08-07 22:51 - 2013-08-07 22:54 - 00000000 ____D H:\ProgramData\AVAST Software
2013-08-07 22:23 - 2013-08-07 22:23 - 00000000 ____D H:\Windows\pss
2013-08-07 22:17 - 2013-08-07 22:17 - 00001648 _____ H:\DelFix.txt
2013-08-07 19:12 - 2013-08-07 19:17 - 00000000 ____D H:\ProgramData\HitmanPro
2013-08-07 19:08 - 2013-08-07 22:17 - 00000000 ____D H:\Windows\ERUNT
2013-08-06 17:06 - 2013-08-07 22:13 - 00000000 ____D H:\Windows\erdnt
2013-08-04 21:21 - 2013-08-07 23:13 - 00000000 ____D H:\Users\Daniel\Desktop\Virenprogramme
2013-08-04 18:33 - 2013-08-04 18:33 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Malwarebytes
2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\ProgramData\Malwarebytes
2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\Program Files\Malwarebytes' Anti-Malware
2013-08-04 18:32 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) H:\Windows\system32\Drivers\mbam.sys
2013-08-04 18:06 - 2013-08-04 18:06 - 00263592 _____ (Oracle Corporation) H:\Windows\system32\javaws.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\javaw.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\java.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00094632 _____ (Oracle Corporation) H:\Windows\system32\WindowsAccessBridge.dll
2013-08-04 18:06 - 2013-08-04 18:06 - 00000000 ____D H:\Program Files\Common Files\Java
2013-08-03 13:31 - 2013-08-03 13:31 - 00002243 _____ H:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
2013-08-03 11:20 - 2013-08-03 11:34 - 00000000 ____D H:\Users\Daniel\Desktop\Herr der Ringe
2013-08-03 00:48 - 2013-08-03 00:48 - 00000000 ____D H:\Users\Daniel\Desktop\SporeRegFixforSTEAM
2013-08-03 00:23 - 2013-08-03 00:49 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Spore
2013-08-02 23:12 - 2013-08-02 23:12 - 00000000 ____D H:\ProgramData\EA Core
2013-08-02 22:49 - 2013-08-02 22:50 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold
2013-08-02 21:29 - 2013-08-02 21:29 - 00000215 _____ H:\Users\Daniel\Desktop\Spore.url
2013-08-02 21:10 - 2013-08-02 21:22 - 3106712552 _____ H:\Users\Daniel\Downloads\Spore.7z
2013-08-02 20:29 - 2013-08-04 16:04 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Origin
2013-08-02 20:24 - 2013-08-05 14:33 - 00000000 ____D H:\ProgramData\Origin
2013-08-02 20:23 - 2013-08-02 20:23 - 00000000 ____D H:\ProgramData\Electronic Arts
2013-08-02 19:35 - 2013-08-02 19:51 - 00000000 ____D H:\Users\Daniel\Downloads\Black And White 2 + Battle Of The Gods
2013-08-02 19:33 - 2013-08-03 07:20 - 1658341376 ____R H:\Users\Daniel\Downloads\rld-bme2.iso
2013-08-02 19:29 - 2013-08-06 16:51 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\uTorrent
2013-08-02 18:51 - 2013-08-04 17:42 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Windows Net Data
2013-08-02 18:50 - 2013-08-02 18:51 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp8a15093bda63fc0edbae9b584075dce7
2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\ChromeExtensions
2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp1b7d8e286b222587f57dc450d3fd9af9
2013-08-02 18:36 - 2013-08-02 18:36 - 00000000 ____D H:\Users\Daniel\Downloads\Black-&amp;-White-2

==================== One Month Modified Files and Folders =======

2013-09-01 19:55 - 2013-07-10 22:50 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype
2013-09-01 19:53 - 2012-08-03 00:04 - 00000000 ____D H:\Users\Daniel\AppData\Local\PMB Files
2013-09-01 19:17 - 2013-09-01 19:10 - 00000000 ____D H:\Ommods
2013-09-01 19:04 - 2013-08-18 16:59 - 00001098 _____ H:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-01 18:42 - 2013-09-01 18:42 - 00000000 ____D H:\Users\Daniel\Desktop\naked mod
2013-09-01 18:25 - 2012-08-25 22:31 - 00000000 ____D H:\Users\Daniel\AppData\Local\Oblivion
2013-09-01 17:19 - 2012-08-02 22:47 - 01299723 _____ H:\Windows\WindowsUpdate.log
2013-09-01 17:04 - 2013-08-18 16:59 - 00001094 _____ H:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-01 16:39 - 2009-07-14 06:34 - 00018928 ____H H:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-01 16:39 - 2009-07-14 06:34 - 00018928 ____H H:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-01 16:36 - 2013-05-10 20:00 - 00000000 ____D H:\Program Files\Steam
2013-09-01 16:32 - 2013-06-29 00:06 - 00000435 _____ H:\Windows\system32\Drivers\etc\hosts.ics
2013-09-01 16:32 - 2009-07-14 06:53 - 00000006 ____H H:\Windows\Tasks\SA.DAT
2013-09-01 16:32 - 2009-07-14 06:39 - 00132023 _____ H:\Windows\setupact.log
2013-09-01 01:00 - 2013-06-02 00:57 - 00105108 _____ H:\Windows\IE10_main.log
2013-08-31 23:17 - 2012-08-03 00:04 - 00000000 ____D H:\ProgramData\PMB Files
2013-08-31 21:01 - 2013-06-07 17:27 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\.minecraft
2013-08-31 18:12 - 2013-08-07 23:02 - 00003600 _____ H:\Windows\Sandboxie.ini
2013-08-30 21:44 - 2013-02-06 18:07 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\TS3Client
2013-08-30 17:11 - 2013-08-18 17:00 - 00002139 _____ H:\Users\Public\Desktop\Google Chrome.lnk
2013-08-29 18:20 - 2013-08-29 17:52 - 00000000 ____D H:\Program Files\GSkype
2013-08-29 17:52 - 2013-08-29 17:52 - 00249856 ____N (Microsoft Corporation) H:\Windows\Setup1.exe
2013-08-29 17:52 - 2013-08-29 17:52 - 00073216 _____ (Microsoft Corporation) H:\Windows\ST6UNST.EXE
2013-08-29 16:14 - 2013-08-29 16:12 - 00000000 ____D H:\Users\Daniel\AppData\Local\Logitech
2013-08-29 16:11 - 2013-08-29 16:11 - 00000000 ____H H:\Windows\system32\Drivers\Msft_User_lgSSQVGA_01_00_00.Wdf
2013-08-29 16:11 - 2013-08-29 16:11 - 00000000 ____H H:\Windows\system32\Drivers\Msft_User_lgSSBW_01_00_00.Wdf
2013-08-29 16:09 - 2013-08-29 16:09 - 00000000 ____D H:\ProgramData\Logitech
2013-08-29 16:09 - 2013-08-29 16:09 - 00000000 ____D H:\Program Files\Logitech
2013-08-28 19:49 - 2013-01-12 20:51 - 00000000 ____D H:\Users\Daniel\AppData\Local\LogMeIn Hamachi
2013-08-26 17:42 - 2012-08-02 22:56 - 01498506 _____ H:\Windows\system32\PerfStringBackup.INI
2013-08-22 17:50 - 2013-02-06 18:04 - 00000000 ____D H:\Program Files\TeamSpeak 3 Client
2013-08-21 18:08 - 2012-08-28 14:26 - 00000000 ____D H:\Users\Daniel\Desktop\spiele
2013-08-18 20:06 - 2012-08-06 13:47 - 00280852 _____ H:\Windows\PFRO.log
2013-08-18 17:08 - 2012-08-02 23:02 - 00000000 ____D H:\Users\Daniel\AppData\Local\Google
2013-08-18 17:04 - 2013-08-14 20:20 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\VirtualStore
2013-08-18 17:00 - 2013-08-18 16:59 - 00000000 ____D H:\Program Files\Google
2013-08-18 17:00 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Google
2013-08-18 16:58 - 2013-08-18 16:58 - 00062776 _____ H:\Users\TORFdaniel\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-18 16:58 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Deployment
2013-08-18 16:58 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Apps\2.0
2013-08-18 16:57 - 2013-08-18 16:57 - 00000000 ____D H:\Users\TORFdaniel\AppData\Roaming\Adobe
2013-08-18 16:55 - 2013-08-18 16:55 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\LogMeIn Hamachi
2013-08-18 03:02 - 2013-06-30 21:58 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\vlc
2013-08-17 18:48 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\rescache
2013-08-15 22:45 - 2013-08-15 22:45 - 00000000 ___RD H:\Sandbox
2013-08-15 20:08 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\Microsoft.NET
2013-08-15 14:21 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\system32\de-DE
2013-08-14 22:30 - 2013-08-08 22:25 - 00000000 ____D H:\Windows\system32\MRT
2013-08-14 22:29 - 2013-08-08 14:47 - 75778376 _____ (Microsoft Corporation) H:\Windows\system32\MRT.exe
2013-08-14 20:21 - 2013-08-14 20:19 - 00000000 ____D H:\Users\TORFdaniel
2013-08-14 20:19 - 2013-08-14 20:19 - 00000020 ___SH H:\Users\TORFdaniel\ntuser.ini
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Startmenü
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Netzwerkumgebung
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Druckumgebung
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Documents\Eigene Musik
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Documents\Eigene Bilder
2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\AppData\Local\Verlauf
2013-08-12 22:02 - 2009-07-14 04:37 - 00000000 ____D H:\Program Files\Common Files\microsoft shared
2013-08-12 22:02 - 2009-07-14 04:04 - 00000499 _____ H:\Windows\win.ini
2013-08-11 22:21 - 2009-07-14 06:33 - 00287896 _____ H:\Windows\system32\FNTCACHE.DAT
2013-08-11 21:23 - 2013-08-11 21:22 - 00000000 ____D H:\Users\Daniel\Desktop\beats
2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\AVS4YOU
2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\ProgramData\AVS4YOU
2013-08-11 20:40 - 2013-08-11 20:39 - 00000000 ____D H:\Program Files\Common Files\AVSMedia
2013-08-11 20:40 - 2013-08-11 20:39 - 00000000 ____D H:\Program Files\AVS4YOU
2013-08-11 20:40 - 2012-08-02 23:00 - 00062776 _____ H:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-11 20:39 - 2013-08-11 20:39 - 00001165 _____ H:\Users\Daniel\Desktop\AVS Audio Editor.lnk
2013-08-11 20:29 - 2009-07-14 04:37 - 00000000 ___RD H:\Users\Public
2013-08-11 20:28 - 2013-08-11 20:28 - 00392056 _____ (Softonic                                        ) H:\Users\Daniel\Desktop\SoftonicDownloader_fuer_free-mp3-cutter-and-editor.exe
2013-08-08 17:05 - 2013-08-08 17:05 - 00000000 ____D H:\Program Files\ESET
2013-08-08 17:04 - 2013-08-08 17:04 - 02347384 _____ (ESET) H:\Users\Daniel\Desktop\esetsmartinstaller_enu.exe
2013-08-08 14:45 - 2013-08-08 14:45 - 00000000 ____D H:\FRST
2013-08-08 14:45 - 2013-08-08 14:44 - 01229980 _____ (Farbar) H:\Users\Daniel\Desktop\FRST.exe
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswVmm.sys.sum
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSP.sys.sum
2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSnx.sys.sum
2013-08-08 14:43 - 2013-08-07 22:55 - 00770344 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSnx.sys
2013-08-08 14:43 - 2013-08-07 22:55 - 00369584 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSP.sys
2013-08-08 14:43 - 2013-08-07 22:55 - 00175176 _____ H:\Windows\system32\Drivers\aswVmm.sys
2013-08-07 23:13 - 2013-08-04 21:21 - 00000000 ____D H:\Users\Daniel\Desktop\Virenprogramme
2013-08-07 23:01 - 2013-08-07 23:02 - 00001073 _____ H:\Users\Daniel\Desktop\Sandboxed Web Browser.lnk
2013-08-07 23:01 - 2013-08-07 23:01 - 00000000 ____D H:\Program Files\Sandboxie
2013-08-07 22:55 - 2013-08-07 22:55 - 00002081 _____ H:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-08-07 22:54 - 2013-08-07 22:54 - 00000000 ____D H:\Program Files\AVAST Software
2013-08-07 22:54 - 2013-08-07 22:51 - 00000000 ____D H:\ProgramData\AVAST Software
2013-08-07 22:54 - 2009-07-14 04:04 - 00002577 _____ H:\Windows\system32\config.nt
2013-08-07 22:49 - 2012-08-19 22:06 - 00000000 ____D H:\ProgramData\Avira
2013-08-07 22:23 - 2013-08-07 22:23 - 00000000 ____D H:\Windows\pss
2013-08-07 22:17 - 2013-08-07 22:17 - 00001648 _____ H:\DelFix.txt
2013-08-07 22:17 - 2013-08-07 19:08 - 00000000 ____D H:\Windows\ERUNT
2013-08-07 22:13 - 2013-08-06 17:06 - 00000000 ____D H:\Windows\erdnt
2013-08-07 19:17 - 2013-08-07 19:12 - 00000000 ____D H:\ProgramData\HitmanPro
2013-08-06 16:56 - 2012-09-11 12:34 - 00000000 ____D H:\Users\Daniel\AppData\Local\Unity
2013-08-06 16:54 - 2013-07-25 20:15 - 00000000 ____D H:\Program Files\Mozilla Firefox
2013-08-06 16:54 - 2013-05-11 22:18 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-08-06 16:51 - 2013-08-02 19:29 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\uTorrent
2013-08-06 14:45 - 2013-06-30 21:11 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Orbit
2013-08-05 14:42 - 2012-08-02 22:56 - 00024556 _____ H:\Windows\avmfwlanci.log
2013-08-05 14:33 - 2013-08-02 20:24 - 00000000 ____D H:\ProgramData\Origin
2013-08-04 21:22 - 2012-08-28 14:25 - 00000000 ____D H:\Users\Daniel\Desktop\bilder
2013-08-04 18:38 - 2013-06-30 20:21 - 00000000 ____D H:\ProgramData\Freemake
2013-08-04 18:38 - 2013-06-30 20:21 - 00000000 ____D H:\Program Files\Freemake
2013-08-04 18:33 - 2013-08-04 18:33 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Malwarebytes
2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\ProgramData\Malwarebytes
2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\Program Files\Malwarebytes' Anti-Malware
2013-08-04 18:06 - 2013-08-04 18:06 - 00263592 _____ (Oracle Corporation) H:\Windows\system32\javaws.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\javaw.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\java.exe
2013-08-04 18:06 - 2013-08-04 18:06 - 00094632 _____ (Oracle Corporation) H:\Windows\system32\WindowsAccessBridge.dll
2013-08-04 18:06 - 2013-08-04 18:06 - 00000000 ____D H:\Program Files\Common Files\Java
2013-08-04 18:06 - 2012-08-02 23:36 - 00867240 _____ (Oracle Corporation) H:\Windows\system32\npDeployJava1.dll
2013-08-04 18:06 - 2012-08-02 23:36 - 00789416 _____ (Oracle Corporation) H:\Windows\system32\deployJava1.dll
2013-08-04 17:42 - 2013-08-02 18:51 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Windows Net Data
2013-08-04 17:08 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\system32\NDF
2013-08-04 16:04 - 2013-08-02 20:29 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Origin
2013-08-03 13:37 - 2012-08-10 21:16 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-08-03 13:31 - 2013-08-03 13:31 - 00002243 _____ H:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
2013-08-03 13:31 - 2012-08-10 21:10 - 00325977 _____ H:\Windows\DirectX.log
2013-08-03 13:25 - 2013-05-17 17:29 - 00000000 ____D H:\Program Files\Electronic Arts
2013-08-03 11:34 - 2013-08-03 11:20 - 00000000 ____D H:\Users\Daniel\Desktop\Herr der Ringe
2013-08-03 07:20 - 2013-08-02 19:33 - 1658341376 ____R H:\Users\Daniel\Downloads\rld-bme2.iso
2013-08-03 00:49 - 2013-08-03 00:23 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Spore
2013-08-03 00:48 - 2013-08-03 00:48 - 00000000 ____D H:\Users\Daniel\Desktop\SporeRegFixforSTEAM
2013-08-02 23:12 - 2013-08-02 23:12 - 00000000 ____D H:\ProgramData\EA Core
2013-08-02 22:50 - 2013-08-02 22:49 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold
2013-08-02 22:48 - 2012-08-02 22:54 - 00000000 ____D H:\Users\Daniel\AppData\Local\VirtualStore
2013-08-02 21:29 - 2013-08-02 21:29 - 00000215 _____ H:\Users\Daniel\Desktop\Spore.url
2013-08-02 21:22 - 2013-08-02 21:10 - 3106712552 _____ H:\Users\Daniel\Downloads\Spore.7z
2013-08-02 20:23 - 2013-08-02 20:23 - 00000000 ____D H:\ProgramData\Electronic Arts
2013-08-02 19:51 - 2013-08-02 19:35 - 00000000 ____D H:\Users\Daniel\Downloads\Black And White 2 + Battle Of The Gods
2013-08-02 19:38 - 2012-08-02 23:55 - 00000000 ___HD H:\Program Files\InstallShield Installation Information
2013-08-02 18:51 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp8a15093bda63fc0edbae9b584075dce7
2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\ChromeExtensions
2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp1b7d8e286b222587f57dc450d3fd9af9
2013-08-02 18:50 - 2012-08-02 22:54 - 00000000 ____D H:\Users\Daniel
2013-08-02 18:36 - 2013-08-02 18:36 - 00000000 ____D H:\Users\Daniel\Downloads\Black-&amp;-White-2

==================== Bamital & volsnap Check =================

H:\Windows\explorer.exe => MD5 is legit
H:\Windows\System32\winlogon.exe => MD5 is legit
H:\Windows\System32\wininit.exe => MD5 is legit
H:\Windows\System32\svchost.exe => MD5 is legit
H:\Windows\System32\services.exe => MD5 is legit
H:\Windows\System32\User32.dll => MD5 is legit
H:\Windows\System32\userinit.exe => MD5 is legit
H:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 17:30

==================== End Of Log ============================

--- --- ---

aharonov · 02.09.2013, 08:20

Hi,

ist das getwindowinfo-Zeugs nach diesem Fix verschwunden?

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
H:\Users\Daniel\AppData\Roaming\Windows Net Data

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

TORFdaniel · 05.09.2013, 13:33

Ok wie es aussieht öffnet der sich nicht mehr!

Zitat:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 08-08-2013
Ran by Daniel at 2013-09-04 21:51:38 Run:1
Running from H:\Users\Daniel\Desktop
Boot Mode: Normal

==============================================

"H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.link" => File/Directory not found.

"H:\Users\Daniel\AppData\Roaming\Windows Net Data" directory move:

H:\Users\Daniel\AppData\Roaming\Windows Net Data\id.dat => Moved successfully.
H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe => Moved successfully.
H:\Users\Daniel\AppData\Roaming\Windows Net Data\uninstaller.exe => Moved successfully.
Could not move "H:\Users\Daniel\AppData\Roaming\Windows Net Data" directory. => Scheduled to move on reboot.

=========== Result of Scheduled Files to move ===========

H:\Users\Daniel\AppData\Roaming\Windows Net Data => Moved successfully.

==== End of Fixlog ====

aharonov · 05.09.2013, 13:37

Ok, bestehen noch Probleme oder ist jetzt alles in Ordnung?

aharonov · 11.09.2013, 08:51

Hi,

ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe?

Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.

08.08.2013, 00:12	#32
markusg /// Malware-holic	Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ ein neues frst log __________________ __________________

08.08.2013, 14:30	#36
markusg /// Malware-holic	Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Du hast in chrome die Startseite geendert? haben die Anderen Browser noch probleme __________________ --> Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/

05.09.2013, 13:37	#44
aharonov /// TB-Ausbilder	Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Ok, bestehen noch Probleme oder ist jetzt alles in Ordnung? __________________ cheers, Leo

11.09.2013, 08:51	#45
aharonov /// TB-Ausbilder	Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Hi, ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe? Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos. __________________ cheers, Leo

Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/

Plagegeister aller Art und deren Bekämpfung: Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/