| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win32/Adload.DA & viele verschiedene SymptomeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
14.10.2013, 14:32
| #1 |
| |  Win32/Adload.DA & viele verschiedene Symptome Guten Tag, ich habe bei meinem Laptop in letzter viele verschiedene Probleme, von denen ich nicht denke, dass sie normal sind. Kurz zu meinem Laptop: Ich nutze Windows 7, Avast Antivirus (kostenlose Version) und nur die Windows Firewall. Zu den Symptomen: Firefox hängt sich sehr oft auf, meistens beim Laden von neuen Webseiten, fängt sich jedoch nach ein paar Sekunden wieder. Skype macht da auch keine Ausnahme, manchmal beim Schreiben von Nachrichten, manchmal einfach so, da gibt es teils auch länger keine Rückmeldung. Wenn ich den Laptop in den Ruhezustand versetze, habe ich in letzter Zeit das Problem, dass der Laptop danach nicht mehr fehlerfrei hochzufahren ist, sobald Windows starten sollte, bekomme ich einen schwarzen Bildschirm und bei anschließendem Neustart die entsprechende Fehlermeldung von Windows, dass das Ausführen vom letzten Zustand fehlgeschlagen ist. Anschließend möchte der Laptop dann auch meistens noch einmal Sfc durchgehen, wobei aber keine größeren Probleme (aus reiner Beobachtung des Vorgangs) erkenntlich sind. Wenn der Laptop aus dem Energiesparmodus wieder fortgesetzt wird, kam es in der Vergangenheit teilweise zu Fehlern mit USB-Geräten, was heißt, dass die Geräte nach dem Ausstecken noch immer als angesteckt angezeigt werden und anschließend auch nicht mehr funktionieren. Reboot hilft hierbei, jedoch hatte ich diesen Fehler in letzter Zeit nicht mehr. Zusätzlich meldet mir Windows auch noch den Trojan-Downloader Win32/Adload.DA-Virus, welcher sieben Mal dazu geführt haben soll, dass der Laptop nicht mehr ordnungsgemäß funktioniert hat, ein entsprechender Scan mit dem Windows Tool führte zu keinem Ergebnis. Ich hoffe Ihr könnt mir vielleicht sagen ob diese Symptome auf unerwünschte Programme zurückzuführen sind, Protokolle von Avast kann ich leider nicht mitliefern, da diese nicht mehr auffindbar sind und ein neuer Scan sehr lange brauchen würde. Gruß, Midrask |
|
14.10.2013, 18:04
| #2 |
| /// the machine /// TB-Ausbilder    | Win32/Adload.DA & viele verschiedene Symptome hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
14.10.2013, 18:29
| #3 |
| | Win32/Adload.DA & viele verschiedene Symptome Danke für Deine Antwort!
__________________Hier die Logs: FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by 42 (administrator) on KEKSDOSE on 14-10-2013 19:23:46
Running from C:\Users\42\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\System Control Manager\MSIService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
() C:\Bin\Spiele\SFBot_v2.1.0\sfBot.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Raptr, Inc) C:\PROGRA~2\Raptr\raptr.exe
(Raptr, Inc) C:\PROGRA~2\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Program Files (x86)\Dragon's Prophet\launcher.exe
(Runewaker) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
(LogicCircuit) E:\Schule\Informatik\LogicCircuit.1.9.8.3\LogicCircuit\LogicCircuit.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1825064 2009-08-28] (Synaptics Incorporated)
HKLM\...\Run: [snp2std] - C:\Windows\vsnp2std.exe
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
Winlogon\Notify\ScCertProp: C:\WINDOWS\SysWOW64\Explorer.exe (Microsoft Corporation)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [] - [x]
HKCU\...\Run: [Akamai NetSession Interface] - "C:\Users\42\AppData\Local\Akamai\netsession_win.exe"
HKCU\...\Run: [Raptr] - C:\PROGRA~2\Raptr\raptrstub.exe [55360 2013-09-28] (Raptr, Inc)
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
MountPoints2: {0888359f-eab2-11e0-8422-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {088835a2-eab2-11e0-8422-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {0b537403-e802-11e0-85b4-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {0b537408-e802-11e0-85b4-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {0b537574-e802-11e0-85b4-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {1eae932a-1669-11e1-ac93-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {1eae932d-1669-11e1-ac93-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {3b8a1a84-f7d5-11e0-8f10-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {3b8a1a87-f7d5-11e0-8f10-4061861ec56f} - E:\AutoRun.exe
MountPoints2: {5eaf4edf-c816-11e1-9f42-00ff01000001} - E:\DIYWriter.exe
MountPoints2: {aae0a1e1-8240-11e1-977b-4061861ec56f} - E:\EasySuite.exe
MountPoints2: {f5ec9cf4-169b-11e1-9ad6-4061861ec56f} - E:\AutoRun.exe
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [RoccatKone+] - C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [552960 2011-07-12] (ROCCAT GmbH)
HKLM-x32\...\Run: [MGSysCtrl] - C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe [2244608 2009-12-04] (Micro-Star International Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sfBot.lnk
ShortcutTarget: sfBot.lnk -> C:\Bin\Spiele\SFBot_v2.1.0\sfBot.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3091DD3CE54FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\MP3 Skype Recorder\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
FireFox:
========
FF ProfilePath: C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.1.13 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.1.13 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\42\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: GFACE Experience Plugin - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\cryenginebrowserplugin@crytek.com
FF Extension: HTTPS-Everywhere - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\https-everywhere@eff.org
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi
FF Extension: Edit Config Files [de] - C:\Program Files (x86)\Mozilla Firefox\extensions\EditConfigFiles_1.7.5_fx+tb_de-DE
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-18] (Adobe Systems)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4145600 2012-06-20] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-03] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [28504 2012-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-22] (DT Soft Ltd)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2012-01-24] (Turtle Entertainment GmbH)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-03-27] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-03-27] (Windows (R) Server 2003 DDK provider)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
R0 johci; C:\Windows\System32\DRIVERS\johci.sys [20392 2009-09-21] (JMicron )
S3 mod7764; C:\Windows\System32\DRIVERS\mod77-64.sys [913888 2010-03-12] (DiBcom SA)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2004-12-30] (INCA Internet Co., Ltd.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 SCL01164; C:\Windows\System32\DRIVERS\SCL01164.sys [72320 2010-05-07] (SCM Microsystems Inc.)
S3 SNP2STD; C:\Windows\System32\DRIVERS\snp2sxp.sys [12324224 2007-01-20] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-02-01] (Anchorfree Inc.)
S3 USBAU; C:\Windows\System32\drivers\CM10264.sys [1306624 2009-09-08] (C-Media Electronics Inc)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [294232 2011-10-28] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 XENfiltv; C:\Windows\System32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
S3 ALSysIO; \??\C:\Users\42\AppData\Local\Temp\ALSysIO64.sys [x]
S3 clwvd; system32\DRIVERS\clwvd.sys [x]
S3 connctfy; system32\DRIVERS\connctfy.sys [x]
S3 connctfyMP; system32\DRIVERS\connctfy.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
S3 slb; \??\C:\Bin\Spiele\AeriaGames\ScarletBlade\avital\scarlb64.sys [x]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 X6va005; \??\C:\Users\42\AppData\Local\Temp\00560D.tmp [x]
S3 X6va006; \??\C:\Users\42\AppData\Local\Temp\00656EB.tmp [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-14 19:23 - 2013-10-14 19:23 - 00000000 ____D C:\FRST
2013-10-14 19:23 - 2013-10-14 19:22 - 01954124 _____ (Farbar) C:\Users\42\Desktop\FRST64.exe
2013-10-14 14:28 - 2013-10-14 14:28 - 01308744 _____ C:\Users\42\Downloads\Rainmeter-3.0.exe
2013-10-14 14:21 - 2013-10-14 14:21 - 00003334 _____ C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-14 14:07 - 2013-10-14 14:07 - 00003416 ____N C:\bootsqm.dat
2013-10-13 17:21 - 2013-10-13 17:21 - 00019556 _____ C:\Users\42\AppData\Local\recently-used.xbel
2013-10-11 16:35 - 2013-10-14 14:21 - 00003194 _____ C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-11 15:33 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-11 15:09 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-11 02:12 - 2013-10-11 03:05 - 00000000 ____D C:\Program Files (x86)\Magic Workstation
2013-10-10 19:59 - 2013-10-10 19:59 - 00000000 __SHD C:\found.003
2013-10-10 14:58 - 2013-10-10 14:59 - 93906704 _____ (Microsoft Corporation) C:\Users\42\Downloads\msert(1).exe
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 01:05 - 2013-10-10 01:05 - 03740128 _____ (foobar2000.org) C:\Users\42\Downloads\foobar2000_v1.2.9.exe
2013-10-10 01:05 - 2013-10-10 01:05 - 00001031 _____ C:\Users\Public\Desktop\foobar2000.lnk
2013-10-09 23:36 - 2013-10-10 02:36 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-09 16:45 - 2013-10-09 16:45 - 00000000 ____D C:\Users\42\Documents\SavedGames
2013-10-09 16:38 - 2013-10-10 13:34 - 00000000 ____D C:\Program Files (x86)\One Finger Death Punch
2013-10-09 16:31 - 2013-10-09 16:33 - 157536120 _____ (Silver Dollar Games ) C:\Users\42\Downloads\One_Finger_Death_Punch_Demo.exe
2013-10-09 15:10 - 2013-10-09 15:10 - 00000000 ____D C:\Users\42\Documents\Dungeon Siege
2013-10-05 15:49 - 2013-10-05 15:52 - 481934982 _____ C:\Users\42\Downloads\adt-bundle-windows-x86_64-20130917.zip
2013-10-03 17:37 - 2013-10-03 17:45 - 193448627 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20120503.exe
2013-10-03 17:37 - 2013-10-03 17:38 - 08773433 _____ C:\Users\42\Downloads\mtg_gamepack.exe
2013-10-03 17:37 - 2013-10-03 17:38 - 05309836 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20121006.exe
2013-10-03 17:37 - 2013-10-03 17:37 - 09690219 _____ C:\Users\42\Downloads\mws094f.exe
2013-10-02 22:22 - 2013-10-02 22:23 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 15:55 - 2013-10-02 15:55 - 00061443 _____ C:\Windows\SysWOW64\CCCInstall_201310021555318539.log
2013-10-02 15:31 - 2013-10-02 15:31 - 273848352 _____ C:\Users\42\Downloads\Gliga_Catalog_2008.pdf.part
2013-10-02 02:24 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-02 02:24 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-02 02:24 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-02 02:24 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-02 02:23 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-02 02:23 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-02 02:23 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-02 02:23 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-02 02:23 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-02 02:23 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-02 02:23 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-02 02:23 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-02 02:23 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-02 02:23 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-02 00:25 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-02 00:25 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-10-02 00:25 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-10-02 00:25 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-10-02 00:25 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-10-02 00:25 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-02 00:25 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-02 00:25 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-02 00:25 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-10-02 00:25 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-10-02 00:25 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-02 00:24 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-02 00:24 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-10-02 00:24 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-02 00:24 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-02 00:24 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-02 00:24 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-10-02 00:24 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-02 00:24 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-02 00:24 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-02 00:24 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-02 00:03 - 2013-10-02 00:03 - 01189552 _____ (AMD Inc.) C:\Users\42\Downloads\catalyst_mobility_64-bit_util(3).exe
2013-10-01 15:30 - 2013-10-01 15:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-27 23:07 - 2013-09-27 23:07 - 00212256 _____ C:\Users\42\Downloads\raptr_installer(1).exe
2013-09-27 18:03 - 2013-09-27 18:03 - 00000000 ____D C:\Users\42\AppData\Roaming\Guild Wars 2
2013-09-27 16:15 - 2013-09-27 16:15 - 10155900 _____ (Razer USA Ltd. ) C:\Users\42\Downloads\Naga_Driver_v2.03.exe.part
2013-09-27 16:15 - 2013-09-27 16:15 - 00050964 _____ C:\Users\42\Downloads\razer___regular___font_by_shikkyaku_yuki-d35z4x8.ttf
2013-09-26 14:00 - 2013-09-26 20:31 - 00000000 ____D C:\ProgramData\GFACE
2013-09-26 12:31 - 2013-09-26 12:38 - 181992655 _____ C:\Users\42\Downloads\HSB4b-full.exe
2013-09-23 15:21 - 2013-09-23 15:21 - 00347424 _____ (Microsoft Corporation) C:\Users\42\Downloads\MicrosoftFixit.Devices.Run.exe
2013-09-21 05:28 - 2013-09-21 05:28 - 00002205 _____ C:\Users\Public\Desktop\Duty Calls.lnk
2013-09-21 05:27 - 2013-09-21 05:27 - 00000000 ____D C:\Program Files (x86)\Duty Calls
2013-09-21 03:19 - 2013-09-21 03:19 - 00001133 _____ C:\Users\42\Desktop\ISBoxer Suite.lnk
2013-09-21 03:19 - 2013-09-21 03:19 - 00001108 _____ C:\Users\42\Desktop\Inner Space.lnk
2013-09-21 02:33 - 2013-09-21 02:33 - 00000000 ____D C:\Program Files (x86)\Hex-Editor MX
2013-09-21 01:20 - 2013-09-21 01:20 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-09-21 01:19 - 2013-09-21 01:19 - 32442656 _____ (TeamSpeak Systems GmbH) C:\Users\42\Downloads\TeamSpeak3-Client-win64-3.0.12.exe
2013-09-17 17:41 - 2013-09-23 16:07 - 00000000 ____D C:\Program Files (x86)\osu!
2013-09-17 17:41 - 2013-09-17 17:41 - 00000885 _____ C:\Users\Public\Desktop\osu!.lnk
2013-09-17 17:37 - 2013-09-17 17:38 - 41666632 _____ (ppy Pty. Ltd.) C:\Users\42\Downloads\osu!install.exe
2013-09-15 22:48 - 2013-09-15 22:48 - 00001288 _____ C:\Users\Public\Desktop\Paint.NET.lnk
2013-09-15 15:14 - 2013-09-15 15:14 - 00003031 _____ C:\Users\42\Desktop\MP3 Skype Recorder.lnk
2013-09-15 15:14 - 2013-09-15 15:14 - 00002991 _____ C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype Recorder.lnk
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Users\42\AppData\Roaming\MP3SkypeRecorder
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Users\42\AppData\Local\Alexander_Nikiforov
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Program Files (x86)\MP3 Skype Recorder
2013-09-15 15:12 - 2013-09-15 15:12 - 02548987 _____ C:\Users\42\Downloads\MP3SkypeRecorder31Setup.exe
2013-09-15 15:03 - 2013-09-15 15:03 - 00002046 _____ C:\Users\Public\Desktop\CyberLink BD & 3D Advisor.lnk
2013-09-15 15:03 - 2013-09-15 15:03 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-09-15 14:48 - 2013-09-15 15:00 - 39235832 _____ ( ) C:\Users\42\Downloads\CL.5913_Generic_CDT121023-01.exe
2013-09-15 08:09 - 2013-09-15 08:09 - 00000000 ____D C:\Users\42\AppData\Local\iDeerApp
2013-09-15 08:08 - 2013-09-15 08:08 - 00001282 _____ C:\Users\42\Desktop\iDeer Blu-ray Player.lnk
2013-09-15 08:08 - 2013-09-15 08:08 - 00000000 ____D C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iDeer Blu-ray Player
2013-09-15 08:07 - 2013-09-15 08:07 - 38313751 _____ (iDeerApp Software Inc.) C:\Users\42\Downloads\windows_Bluray_Player.exe
2013-09-15 08:07 - 2013-09-15 08:07 - 00000000 ____D C:\Program Files (x86)\iDeerApp
2013-09-15 07:54 - 2013-09-15 08:56 - 00000000 ____D C:\Users\42\AppData\Roaming\aacs
2013-09-14 00:58 - 2013-09-14 00:59 - 00000000 ____D C:\Users\42\AppData\Roaming\TrueCrypt
2013-09-14 00:56 - 2013-09-14 00:56 - 00231376 _____ (TrueCrypt Foundation) C:\Windows\system32\Drivers\truecrypt.sys
2013-09-14 00:55 - 2013-09-14 00:56 - 00000000 ____D C:\Program Files\TrueCrypt
2013-09-14 00:54 - 2013-09-14 00:54 - 03466248 _____ (TrueCrypt Foundation) C:\Users\42\Downloads\TrueCrypt Setup 7.1a.exe
==================== One Month Modified Files and Folders =======
2013-10-14 19:23 - 2013-10-14 19:23 - 00000000 ____D C:\FRST
2013-10-14 19:22 - 2013-10-14 19:23 - 01954124 _____ (Farbar) C:\Users\42\Desktop\FRST64.exe
2013-10-14 19:19 - 2011-09-26 14:40 - 00000000 ____D C:\Users\42\AppData\Roaming\Skype
2013-10-14 18:44 - 2012-06-06 17:44 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-14 18:36 - 2013-07-14 03:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-14 18:26 - 2011-11-03 21:47 - 00000000 ____D C:\Users\42\AppData\Roaming\TS3Client
2013-10-14 18:20 - 2013-09-02 17:40 - 00000000 ____D C:\Users\42\AppData\Roaming\Raptr
2013-10-14 18:05 - 2009-07-14 19:58 - 00703372 _____ C:\Windows\system32\perfh007.dat
2013-10-14 18:05 - 2009-07-14 19:58 - 00151806 _____ C:\Windows\system32\perfc007.dat
2013-10-14 18:05 - 2009-07-14 07:13 - 01627486 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-14 17:50 - 2012-07-12 17:05 - 13767181 _____ C:\Windows\setupact.log
2013-10-14 17:50 - 2011-09-26 15:12 - 00000000 ____D C:\Users\42\AppData\Roaming\foobar2000
2013-10-14 17:49 - 2013-08-05 05:55 - 00000000 ____D C:\Program Files (x86)\Dragon's Prophet
2013-10-14 17:02 - 2011-09-26 15:07 - 00000000 ____D C:\Program Files (x86)\foobar2000
2013-10-14 14:50 - 2011-10-10 13:46 - 01557143 _____ C:\Windows\WindowsUpdate.log
2013-10-14 14:40 - 2013-03-27 16:09 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-14 14:40 - 2012-08-06 21:34 - 00000000 ____D C:\Program Files\Rainmeter
2013-10-14 14:28 - 2013-10-14 14:28 - 01308744 _____ C:\Users\42\Downloads\Rainmeter-3.0.exe
2013-10-14 14:28 - 2009-07-14 06:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-14 14:28 - 2009-07-14 06:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-14 14:23 - 2011-12-03 19:53 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn Hamachi
2013-10-14 14:21 - 2013-10-14 14:21 - 00003334 _____ C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-14 14:21 - 2013-10-11 16:35 - 00003194 _____ C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-14 14:20 - 2012-06-06 17:44 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-14 14:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-14 14:07 - 2013-10-14 14:07 - 00003416 ____N C:\bootsqm.dat
2013-10-14 01:01 - 2013-09-02 19:56 - 00000000 ____D C:\CrashReport
2013-10-13 23:10 - 2011-10-07 13:14 - 00000000 ____D C:\Users\42\AppData\Roaming\SFBot
2013-10-13 23:04 - 2011-09-26 07:40 - 02138504 _____ C:\Windows\PFRO.log
2013-10-13 17:42 - 2012-05-10 18:56 - 00000000 ____D C:\Users\42\.gimp-2.8
2013-10-13 17:21 - 2013-10-13 17:21 - 00019556 _____ C:\Users\42\AppData\Local\recently-used.xbel
2013-10-13 13:52 - 2012-04-13 20:30 - 00000000 ____D C:\Users\42\AppData\Roaming\vlc
2013-10-12 14:42 - 2012-12-17 18:37 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-12 00:36 - 2012-12-25 01:38 - 00000372 _____ C:\Windows\system32\TeamViewer8_Hooks.log
2013-10-12 00:35 - 2012-07-18 11:52 - 00000000 ____D C:\Users\42\AppData\Roaming\TeamViewer
2013-10-11 20:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-11 16:01 - 2013-09-12 22:06 - 00000000 ____D C:\AdwCleaner
2013-10-11 15:48 - 2013-07-29 12:32 - 00000000 ____D C:\Windows\system32\MRT
2013-10-11 15:41 - 2011-10-15 11:27 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-11 03:05 - 2013-10-11 02:12 - 00000000 ____D C:\Program Files (x86)\Magic Workstation
2013-10-10 19:59 - 2013-10-10 19:59 - 00000000 __SHD C:\found.003
2013-10-10 14:59 - 2013-10-10 14:58 - 93906704 _____ (Microsoft Corporation) C:\Users\42\Downloads\msert(1).exe
2013-10-10 13:34 - 2013-10-09 16:38 - 00000000 ____D C:\Program Files (x86)\One Finger Death Punch
2013-10-10 13:34 - 2011-10-21 22:52 - 00007618 _____ C:\Users\42\AppData\Local\Resmon.ResmonCfg
2013-10-10 13:21 - 2012-07-04 23:10 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 02:59 - 2011-10-29 12:59 - 00000000 ____D C:\Users\42\AppData\Roaming\Audacity
2013-10-10 02:36 - 2013-10-09 23:36 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-10 02:36 - 2013-07-14 03:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-10 02:36 - 2012-03-30 10:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 02:36 - 2011-09-26 14:20 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-10 02:36 - 2011-09-25 23:56 - 00000000 ___RD C:\Bin
2013-10-10 02:34 - 2012-10-10 01:15 - 00000000 ____D C:\Program Files (x86)\freac
2013-10-10 01:51 - 2013-02-04 00:20 - 00000000 ____D C:\Users\42\AppData\Roaming\NoNameScript
2013-10-10 01:05 - 2013-10-10 01:05 - 03740128 _____ (foobar2000.org) C:\Users\42\Downloads\foobar2000_v1.2.9.exe
2013-10-10 01:05 - 2013-10-10 01:05 - 00001031 _____ C:\Users\Public\Desktop\foobar2000.lnk
2013-10-10 00:08 - 2013-02-16 18:59 - 01178624 _____ (CPUID) C:\Users\42\AppData\Roaming\siw_sdk.dll
2013-10-09 23:30 - 2013-01-27 01:10 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-09 23:30 - 2011-09-26 14:40 - 00000000 ____D C:\ProgramData\Skype
2013-10-09 17:01 - 2011-09-30 17:11 - 00000000 ____D C:\Users\42\AppData\Local\Paint.NET
2013-10-09 16:45 - 2013-10-09 16:45 - 00000000 ____D C:\Users\42\Documents\SavedGames
2013-10-09 16:33 - 2013-10-09 16:31 - 157536120 _____ (Silver Dollar Games ) C:\Users\42\Downloads\One_Finger_Death_Punch_Demo.exe
2013-10-09 15:10 - 2013-10-09 15:10 - 00000000 ____D C:\Users\42\Documents\Dungeon Siege
2013-10-05 16:14 - 2011-09-30 13:23 - 00000600 _____ C:\Users\42\PUTTY.RND
2013-10-05 15:52 - 2013-10-05 15:49 - 481934982 _____ C:\Users\42\Downloads\adt-bundle-windows-x86_64-20130917.zip
2013-10-03 17:45 - 2013-10-03 17:37 - 193448627 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20120503.exe
2013-10-03 17:38 - 2013-10-03 17:37 - 08773433 _____ C:\Users\42\Downloads\mtg_gamepack.exe
2013-10-03 17:38 - 2013-10-03 17:37 - 05309836 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20121006.exe
2013-10-03 17:37 - 2013-10-03 17:37 - 09690219 _____ C:\Users\42\Downloads\mws094f.exe
2013-10-03 00:01 - 2011-09-30 16:59 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-02 22:23 - 2013-10-02 22:22 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 15:55 - 2013-10-02 15:55 - 00061443 _____ C:\Windows\SysWOW64\CCCInstall_201310021555318539.log
2013-10-02 15:41 - 2012-03-04 22:15 - 01605714 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-02 15:31 - 2013-10-02 15:31 - 273848352 _____ C:\Users\42\Downloads\Gliga_Catalog_2008.pdf.part
2013-10-02 15:01 - 2013-07-16 17:38 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-10-02 14:33 - 2012-04-25 22:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-02 13:54 - 2011-11-03 21:45 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-10-02 13:52 - 2011-09-26 15:46 - 00000000 ____D C:\Users\42\AppData\Local\Mozilla
2013-10-02 13:40 - 2011-09-25 22:23 - 00000000 ___RD C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-02 13:40 - 2011-09-25 22:23 - 00000000 ___RD C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-02 13:35 - 2009-07-14 06:45 - 04874880 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-02 00:03 - 2013-10-02 00:03 - 01189552 _____ (AMD Inc.) C:\Users\42\Downloads\catalyst_mobility_64-bit_util(3).exe
2013-10-01 15:30 - 2013-10-01 15:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 23:31 - 2013-09-02 17:40 - 00000000 ____D C:\Program Files (x86)\Raptr
2013-09-30 21:40 - 2013-09-06 17:43 - 00000000 ____D C:\Users\42\AppData\Roaming\NaviFirmPlus
2013-09-29 15:17 - 2013-08-20 17:17 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-09-28 00:30 - 2012-03-19 16:29 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-09-27 23:07 - 2013-09-27 23:07 - 00212256 _____ C:\Users\42\Downloads\raptr_installer(1).exe
2013-09-27 18:03 - 2013-09-27 18:03 - 00000000 ____D C:\Users\42\AppData\Roaming\Guild Wars 2
2013-09-27 18:03 - 2013-02-16 18:50 - 00000000 ____D C:\Users\42\Documents\Guild Wars 2
2013-09-27 16:58 - 2011-10-10 13:55 - 00071840 _____ C:\Users\42\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-27 16:15 - 2013-09-27 16:15 - 10155900 _____ (Razer USA Ltd. ) C:\Users\42\Downloads\Naga_Driver_v2.03.exe.part
2013-09-27 16:15 - 2013-09-27 16:15 - 00050964 _____ C:\Users\42\Downloads\razer___regular___font_by_shikkyaku_yuki-d35z4x8.ttf
2013-09-26 20:31 - 2013-09-26 14:00 - 00000000 ____D C:\ProgramData\GFACE
2013-09-26 20:28 - 2012-09-25 23:15 - 00000000 ____D C:\Users\42\AppData\Roaming\Mp3tag
2013-09-26 12:38 - 2013-09-26 12:31 - 181992655 _____ C:\Users\42\Downloads\HSB4b-full.exe
2013-09-23 16:07 - 2013-09-17 17:41 - 00000000 ____D C:\Program Files (x86)\osu!
2013-09-23 15:21 - 2013-09-23 15:21 - 00347424 _____ (Microsoft Corporation) C:\Users\42\Downloads\MicrosoftFixit.Devices.Run.exe
2013-09-21 05:28 - 2013-09-21 05:28 - 00002205 _____ C:\Users\Public\Desktop\Duty Calls.lnk
2013-09-21 05:27 - 2013-09-21 05:27 - 00000000 ____D C:\Program Files (x86)\Duty Calls
2013-09-21 05:24 - 2011-09-30 13:07 - 00796266 _____ C:\Windows\DirectX.log
2013-09-21 03:19 - 2013-09-21 03:19 - 00001133 _____ C:\Users\42\Desktop\ISBoxer Suite.lnk
2013-09-21 03:19 - 2013-09-21 03:19 - 00001108 _____ C:\Users\42\Desktop\Inner Space.lnk
2013-09-21 02:33 - 2013-09-21 02:33 - 00000000 ____D C:\Program Files (x86)\Hex-Editor MX
2013-09-21 01:20 - 2013-09-21 01:20 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-09-21 01:19 - 2013-09-21 01:19 - 32442656 _____ (TeamSpeak Systems GmbH) C:\Users\42\Downloads\TeamSpeak3-Client-win64-3.0.12.exe
2013-09-21 01:03 - 2011-09-26 14:20 - 00000000 ____D C:\Users\42\AppData\Roaming\Adobe
2013-09-17 17:41 - 2013-09-17 17:41 - 00000885 _____ C:\Users\Public\Desktop\osu!.lnk
2013-09-17 17:38 - 2013-09-17 17:37 - 41666632 _____ (ppy Pty. Ltd.) C:\Users\42\Downloads\osu!install.exe
2013-09-17 00:51 - 2011-09-25 23:18 - 00000000 ____D C:\Users\42\AppData\Roaming\.minecraft
2013-09-15 22:48 - 2013-09-15 22:48 - 00001288 _____ C:\Users\Public\Desktop\Paint.NET.lnk
2013-09-15 22:48 - 2011-09-30 17:11 - 00000000 ____D C:\Program Files\Paint.NET
2013-09-15 22:28 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2013-09-15 20:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-15 15:14 - 2013-09-15 15:14 - 00003031 _____ C:\Users\42\Desktop\MP3 Skype Recorder.lnk
2013-09-15 15:14 - 2013-09-15 15:14 - 00002991 _____ C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype Recorder.lnk
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Users\42\AppData\Roaming\MP3SkypeRecorder
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Users\42\AppData\Local\Alexander_Nikiforov
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Program Files (x86)\MP3 Skype Recorder
2013-09-15 15:12 - 2013-09-15 15:12 - 02548987 _____ C:\Users\42\Downloads\MP3SkypeRecorder31Setup.exe
2013-09-15 15:03 - 2013-09-15 15:03 - 00002046 _____ C:\Users\Public\Desktop\CyberLink BD & 3D Advisor.lnk
2013-09-15 15:03 - 2013-09-15 15:03 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-09-15 15:03 - 2012-04-17 20:19 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-15 15:03 - 2011-09-25 22:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-15 15:00 - 2013-09-15 14:48 - 39235832 _____ ( ) C:\Users\42\Downloads\CL.5913_Generic_CDT121023-01.exe
2013-09-15 08:57 - 2012-06-05 22:25 - 00000000 ____D C:\Users\42\AppData\Roaming\dvdcss
2013-09-15 08:56 - 2013-09-15 07:54 - 00000000 ____D C:\Users\42\AppData\Roaming\aacs
2013-09-15 08:09 - 2013-09-15 08:09 - 00000000 ____D C:\Users\42\AppData\Local\iDeerApp
2013-09-15 08:08 - 2013-09-15 08:08 - 00001282 _____ C:\Users\42\Desktop\iDeer Blu-ray Player.lnk
2013-09-15 08:08 - 2013-09-15 08:08 - 00000000 ____D C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iDeer Blu-ray Player
2013-09-15 08:07 - 2013-09-15 08:07 - 38313751 _____ (iDeerApp Software Inc.) C:\Users\42\Downloads\windows_Bluray_Player.exe
2013-09-15 08:07 - 2013-09-15 08:07 - 00000000 ____D C:\Program Files (x86)\iDeerApp
2013-09-14 00:59 - 2013-09-14 00:58 - 00000000 ____D C:\Users\42\AppData\Roaming\TrueCrypt
2013-09-14 00:56 - 2013-09-14 00:56 - 00231376 _____ (TrueCrypt Foundation) C:\Windows\system32\Drivers\truecrypt.sys
2013-09-14 00:56 - 2013-09-14 00:55 - 00000000 ____D C:\Program Files\TrueCrypt
2013-09-14 00:54 - 2013-09-14 00:54 - 03466248 _____ (TrueCrypt Foundation) C:\Users\42\Downloads\TrueCrypt Setup 7.1a.exe
Files to move or delete:
====================
C:\Users\42\AppData\Roaming\version.ini
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-11 20:43
==================== End Of Log ============================
Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by 42 at 2013-10-14 19:25:16
Running from C:\Users\42\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: avast! Internet Security (Disabled) {131692B0-0864-D491-4E21-3A3A1D8BBB47}
==================== Installed Programs ======================
3D Sound Back Beta0.1 (x32 Version: 0.1)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
ActivePerl 5.6.1 Build 635 (x32 Version: 5.6.635)
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Bridge 1.0 (x32 Version: 001.000.001)
Adobe Common File Installer (x32 Version: 1.00.001)
Adobe Community Help (x32 Version: 3.4.980)
Adobe Flash Media Live Encoder 3.2 (x32 Version: 3.2.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Help Center 1.0 (x32 Version: 1.0.1)
Adobe Photoshop CS2 (x32 Version: 9.0)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1)
Age of Empires II: HD Edition (x32)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328)
AMD Accelerated Video Transcoding (Version: 13.15.100.30830)
AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.80328.2204)
AMD Media Foundation Decoders (Version: 1.0.80830.1925)
Amnesia: The Dark Descent (x32)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ASIO4ALL (x32 Version: 2.10)
Audacity 2.0.3 (x32 Version: 2.0.3)
AudioAdvantageMicro (x32 Version: 1.01.01.02)
AutoFLAC 1.2 (x32 Version: 1.2)
AutoHotkey 1.1.08.00 (x32 Version: 1.1.08.00)
AutoIt v3.3.8.1 (x32)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Avidemux 2.6 (32-bit) (x32 Version: 2.6.3.8518)
Bamboo (Version: 5.2.5-5)
Bamboo Dock (x32 Version: 4.0)
Bamboo Dock (x32 Version: 4.1.0)
Battle for Wesnoth 1.8.6 (x32 Version: 1.8.6)
Battlefield 3™ (x32 Version: 1.0.0.0)
Battlelog Web Plugins (x32 Version: 2.1.7)
BD_3D Advisor (x32 Version: 2.0.5913)
BioShock 2 (x32 Version: 1.0.0005.131)
Bitcoin (HKCU Version: 0.8.1)
BlueJ (x32 Version: 3.0.8)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589)
Catalyst Control Center InstallProxy (x32 Version: 2013.0815.818.13017)
Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589)
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589)
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225)
CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589)
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225)
CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589)
CCC Help Czech (x32 Version: 2013.0328.2217.38225)
CCC Help Czech (x32 Version: 2013.0830.1943.33589)
CCC Help Danish (x32 Version: 2013.0328.2217.38225)
CCC Help Danish (x32 Version: 2013.0830.1943.33589)
CCC Help Dutch (x32 Version: 2013.0328.2217.38225)
CCC Help Dutch (x32 Version: 2013.0830.1943.33589)
CCC Help English (x32 Version: 2013.0328.2217.38225)
CCC Help English (x32 Version: 2013.0830.1943.33589)
CCC Help Finnish (x32 Version: 2013.0328.2217.38225)
CCC Help Finnish (x32 Version: 2013.0830.1943.33589)
CCC Help French (x32 Version: 2013.0328.2217.38225)
CCC Help French (x32 Version: 2013.0830.1943.33589)
CCC Help German (x32 Version: 2013.0328.2217.38225)
CCC Help German (x32 Version: 2013.0830.1943.33589)
CCC Help Greek (x32 Version: 2013.0328.2217.38225)
CCC Help Greek (x32 Version: 2013.0830.1943.33589)
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225)
CCC Help Hungarian (x32 Version: 2013.0830.1943.33589)
CCC Help Italian (x32 Version: 2013.0328.2217.38225)
CCC Help Italian (x32 Version: 2013.0830.1943.33589)
CCC Help Japanese (x32 Version: 2013.0328.2217.38225)
CCC Help Japanese (x32 Version: 2013.0830.1943.33589)
CCC Help Korean (x32 Version: 2013.0328.2217.38225)
CCC Help Korean (x32 Version: 2013.0830.1943.33589)
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225)
CCC Help Norwegian (x32 Version: 2013.0830.1943.33589)
CCC Help Polish (x32 Version: 2013.0328.2217.38225)
CCC Help Polish (x32 Version: 2013.0830.1943.33589)
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225)
CCC Help Portuguese (x32 Version: 2013.0830.1943.33589)
CCC Help Russian (x32 Version: 2013.0328.2217.38225)
CCC Help Russian (x32 Version: 2013.0830.1943.33589)
CCC Help Spanish (x32 Version: 2013.0328.2217.38225)
CCC Help Spanish (x32 Version: 2013.0830.1943.33589)
CCC Help Swedish (x32 Version: 2013.0328.2217.38225)
CCC Help Swedish (x32 Version: 2013.0830.1943.33589)
CCC Help Thai (x32 Version: 2013.0328.2217.38225)
CCC Help Thai (x32 Version: 2013.0830.1943.33589)
CCC Help Turkish (x32 Version: 2013.0328.2217.38225)
CCC Help Turkish (x32 Version: 2013.0830.1943.33589)
ccc-utility64 (Version: 2013.0328.2218.38225)
ccc-utility64 (Version: 2013.0830.1944.33589)
CDBurnerXP (x32 Version: 4.5.1.4003)
Cheat Engine 6.3 (x32)
CheckDrive (x32 Version: 4.4)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
Command and Conquer: Red Alert 3 - Uprising (x32)
Counter-Strike: Global Offensive (x32)
Counter-Strike: Source (x32)
Creative Systeminformationen (x32 Version: 1.10)
Crysis 2 Maximum Edition (x32)
CSL ARM Toolchain (arm-symbianelf) 2005-Q1C (x32 Version: 2005-Q1C)
Curse Client (HKCU Version: 5.1.1.792)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.45.1.0236)
Dead Island (x32)
Dead Space™ 3 (x32 Version: 1.0.0.0)
Devil's Tuning Fork 1.21 (x32)
Die Schlacht um Mittelerde(tm) (x32)
Dragon UnPACKer 5 (x32 Version: 5.6.2 Exedra Chac)
Dragon's Prophet (x32 Version: 1.0.1087.10)
Dungeon Siege (x32)
Dungeon Siege 2 (x32)
Dungeon Siege III (x32)
Duty Calls (x32 Version: 1.00.0000)
DVD Shrink 3.2 (x32)
Dxtory version 2.0.110 (x32 Version: 2.0.110)
Elvenstar Mod 6.0 (x32 Version: 1.0a)
ESN Sonar (x32 Version: 0.70.4)
Exact Audio Copy 1.0beta3 (x32 Version: 1.0beta3)
Fable - The Lost Chapters (x32)
Far Cry 3 Blood Dragon (x32 Version: 1.01)
Fiesta Online(EU_German) 1.03.008 (x32 Version: 1.03.008)
FileZilla Client 3.7.0.2 (HKCU Version: 3.7.0.2)
FL Studio 10 (x32)
FLAC 1.2.1b (remove only) (x32 Version: 1.2.1b)
foobar2000 v1.2.9 (x32 Version: 1.2.9)
Fotogalerie (x32 Version: 16.4.3505.0912)
Fraps (remove only) (x32)
Free Studio version 2013 (x32 Version: 6.1.1.430)
Free YouTube to MP3 Converter version 3.11.26.706 (x32 Version: 3.11.26.706)
FreeFileSync 5.7 (x32 Version: 5.7)
Freemake Video Converter Version 3.1.2 (x32 Version: 3.1.2)
Futuremark SystemInfo (x32 Version: 4.0.0.0)
Game Extractor 2.0 (x32 Version: 2.0)
Genius Move (x32)
GeoGebra 4 (HKCU)
GIMP 2.8.2 (Version: 2.8.2)
Google Earth (x32 Version: 7.1.1.1888)
Guild Wars 2 (x32)
HD Tune 2.55 (x32)
HeadStrong WebClicker v2.56 (x32 Version: 2.56)
Hex-Editor MX (x32 Version: 6.0)
HF pAppLoc version 1.0 (x32 Version: 1.0)
iDeer Blu-ray Player (x32 Version: 1.3.1.1301)
ILLUSION ジンコウガクエン きゃらめいく (x32 Version: 1.00.0000)
ILLUSION ラブガール～魅惑の個人レッスン～ (x32 Version: 1.00.0000)
ILLUSION ワケあり！ (x32 Version: 1.00.0000)
ILLUSION 俺が主人公 (x32 Version: 1.00.0000)
ImgBurn (x32 Version: 2.5.8.0)
Inkscape 0.48.4 (x32 Version: 0.48.4)
Intel(R) Rapid Storage Technology (Version: 12.5.0.1066)
Inversion™ (x32)
IsoBuster 3.0 (x32 Version: 3.0)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java SE Development Kit 7 Update 10 (64-bit) (Version: 1.7.0.100)
Java SE Development Kit 7 Update 10 (x32 Version: 1.7.0.100)
Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250)
Java SE Development Kit 7 Update 25 (x32 Version: 1.7.0.250)
JDownloader 0.9 (x32 Version: 0.9)
JDownloader 2 (Version: 2.0)
JMicron 1394 Filter Driver (x32 Version: 1.00.06.00)
JMicron Flash Media Controller Driver (x32 Version: 1.0.31.3)
Just Cause 2 (x32)
KaM - The Peasants Rebellion (x32 Version: 1.58 SR2)
Kits Configuration Installer (x32 Version: 8.59.25584)
K-Lite Mega Codec Pack 10.0.0 (x32 Version: 10.0.0)
LADSPA_plugins-win-0.4.15 (x32)
LAME v3.99.3 (for Windows) (x32)
League of Legends (x32 Version: 1.02.0000)
LibreOffice 3.5 (x32 Version: 3.5.6.2)
LIMBO (HKCU)
Logitech Gaming Software (Version: 8.20.74)
Logitech Gaming Software 8.35 (Version: 8.35.18)
LogMeIn Hamachi (x32 Version: 2.2.0.58)
LOLReplay (x32 Version: 0.8.3.0)
Magic Workstation 0.94f (x32)
Medal of Honor(TM) Multiplayer (x32)
Metin2 (x32)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 1.1 (x32)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Games for Windows - LIVE (x32 Version: 3.1.186.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Virtual PC 2007 (Version: 6.0.156.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Windows Application Compatibility Database
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000)
mIRC (x32 Version: 6.34)
Mirror's Edge (x32)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MP3 Skype Recorder (x32 Version: 3.1.3)
Mp3tag v2.56 (x32 Version: v2.56)
MSI Afterburner 2.3.1 (x32 Version: 2.3.1)
MSI Kombustor 2.5.0 (x32)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT Redists (Version: 1.0)
MSVCRT Redists (x32 Version: 1.0)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MTG Card Images for Magic Workstation (x32)
MTG GamePack for Magic Workstation (x32)
Natural Selection 2 (x32)
Nero Backup Drivers (Version: 1.0.11100.8.0)
Nexus Mod Manager (Version: 0.44.13)
Nokia Connectivity Cable Driver (x32 Version: 7.1.92.0)
Nokia Suite (x32 Version: 3.6.36.0)
Notepad++ (x32 Version: 6.2.2)
Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.37)
NVIDIA PhysX (x32 Version: 9.12.0613)
One Finger Death Punch (x32)
Open Broadcaster Software (x32)
Opera 12.16 (HKCU Version: 12.16.1860)
Opera Next 17.0.1241.28 (x32 Version: 17.0.1241.28)
Origin (x32 Version: 8.5.0.4554)
osu! (x32 Version: 0.0.0.0)
Paint.NET v3.5.11 (Version: 3.61.0)
Pando Media Booster (x32 Version: 2.6.0.8)
Patin-Couffin 36 (x32)
PAYDAY 2 (x32)
PC Connectivity Solution (x32 Version: 12.0.48.0)
PC Inspector File Recovery (x32 Version: 4.0)
PDFCreator (x32 Version: 1.4.2)
phase-6 2.1.2.4a (x32 Version: 2.1.2.4a)
Photo Gallery (x32 Version: 16.4.3505.0912)
piaip AppLocale (x32 Version: 1.0.0)
Polipo 1.0.4.1 (x32)
Populous (x32 Version: 1.0.0.0)
PunkBuster Services (x32 Version: 0.993)
QuickTime (x32 Version: 7.74.80.86)
Rainmeter (x32 Version: 3.0 r2116)
Raptr (x32)
Razer Game Booster (x32 Version: 3.6)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealPlayer (x32)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6034)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6873)
REALTEK Wireless LAN Driver (x32 Version: 1.00.0145)
RealUpgrade 1.1 (x32 Version: 1.1.0)
ROCCAT Kone[+] Mouse Driver (x32)
Rockstar Games Social Club (x32 Version: 1.1.0.6)
S60 5th Edition SDK v1.0 (x32 Version: 1.00.0000)
Saints Row: The Third (x32)
Sauerbraten (x32)
ScarletBlade-DE (x32)
SciTE4AutoHotkey v3 beta 5 (x32 Version: v3.0 beta 5)
SCL011 Contactless Reader (x32 Version: 1.01)
Serious Sam 2 (x32)
Serious Sam 3: BFE (x32)
Serious Sam Classic: The First Encounter (x32)
Serious Sam Classic: The Second Encounter (x32)
Serious Sam Double D (x32)
Serious Sam HD: The First Encounter (x32)
Serious Sam HD: The Second Encounter (x32)
Serious Sam: The Random Encounter (x32)
Sid Meier's Railroads! (x32 Version: 1.00)
Sid Meier's Railroads! (x32 Version: 1.10)
SIW version 2011.10.29 (x32 Version: 2011.10.29)
Skype™ 6.9 (x32 Version: 6.9.106)
Smart Data Recovery v4.3 (x32 Version: 4.3)
SMPlayer 0.8.6.0 (x32 Version: 0.8.6.0)
Sothink SWF Decompiler (x32 Version: 7.3)
Source Violence Patch 1.5 BETA (x32)
SplitMediaLabs VH Screen Capture Driver (x86) (x32 Version: 3.0.0.7)
Steam (x32 Version: 1.0.0.0)
SWFPlayer 2.6.2.0 (x32 Version: 2.6.2.0)
swMSM (x32 Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 14.0.3.0)
System Control Manager (x32 Version: 2.209.1204.OE006.01)
System Requirements Lab CYRI (x32 Version: 4.5.1.0)
System Requirements Lab for Intel (x32 Version: 4.5.13.0)
Team Fortress 2 (x32)
TeamSpeak 3 Client (Version: 3.0.13)
TeamViewer 8 (x32 Version: 8.0.22298)
TERA (x32 Version: 7)
The War Z version alpha (x32 Version: alpha)
The Witcher 2: Assassins of Kings Enhanced Edition (x32)
Toki Tori (x32)
Tor 0.2.2.37 (x32)
Torchlight II (x32)
TrueCrypt (x32 Version: 7.1a)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.6 (Version: 2.6.2.0)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Unity Web Player (HKCU Version: )
Universal Extractor 1.6.1 (x32 Version: 1.6.1)
Unlocker 1.9.2 (Version: 1.9.2)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Vidalia 0.2.19 (x32)
Virtual Audio Cable 4.10
VLC media player 2.0.8 (x32 Version: 2.0.8)
Warcraft III (x32)
WIDCOMM Bluetooth Software (Version: 6.2.1.800)
Winamp (x32 Version: 5.622 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Driver Package - Broadcom Bluetooth (05/27/2009 6.1.7100.0) (Version: 05/27/2009 6.1.7100.0)
Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (Version: 09/11/2009 6.2.0.9407)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Messenger (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Software Development Kit (x32 Version: 8.59.29750)
Windows Software Development Kit EULA (x32 Version: 8.59.25584)
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
WinPcap 4.1.2 (x32 Version: 4.1.0.2001)
Wireshark 1.6.5 (x32 Version: 1.6.5)
World of Warcraft (x32 Version: 5.3.0.17128)
WPT Redistributables (x32 Version: 8.59.29750)
WPTx64 (x32 Version: 8.59.29722)
Zeno Clash (x32)
==================== Restore Points =========================
12-10-2013 16:25:41 Geplanter Prüfpunkt
13-10-2013 23:28:19 Windows Update
14-10-2013 12:33:49 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106
14-10-2013 12:36:52 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-09-21 03:37 - 00001338 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 auth1.lavishsoft.com
127.0.0.1 auth2.lavishsoft.com
==================== Scheduled Tasks (whitelisted) =============
Task: {0D9E6D7D-853F-40E7-864A-64607DFB776C} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1664565104-910828770-3124941875-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2011-11-29] (RealNetworks, Inc.)
Task: {11AA320D-0618-4615-BBF0-817337683E1F} - System32\Tasks\{DE56F537-6F2E-4356-8771-BD499FE90545} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.)
Task: {4B767849-460C-4C76-B0F3-7B26FC7C9CD8} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe [2013-05-07] ()
Task: {4B8C3961-C231-49A2-ADB2-E523B1ED4983} - System32\Tasks\{074DA4FC-D12C-4A09-8248-22073B452ECA} => C:\Bin\Spiele\Unreal Tournament 3 (LG)\Binaries\UT3.exe [2009-03-26] ()
Task: {769D8094-02FF-4A57-AA3E-9EAC023FA1DA} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {7CFA6857-8E2A-4676-8B30-20FE9170F034} - System32\Tasks\{88627319-B8C3-4B5E-A4D8-6206873FE51C} => C:\Program Files (x86)\Cheat Engine 6.1\Cheat Engine.exe
Task: {7D65FB7A-D5D2-4799-84F1-A6A61CCB4D2F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {99BDCB71-681F-4E68-8C06-E1B4A80EBC33} - System32\Tasks\{1004CD19-2FB3-41C0-8168-860ED689E35C} => C:\Program Files (x86)\Cheat Engine 6.1\Cheat Engine.exe
Task: {9AA4A644-BA28-4B61-B281-FE68238EA081} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-06] (Google Inc.)
Task: {B32E2726-04E7-4A62-BDFF-7B0C7B341402} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {BF34D716-E073-4576-88A4-CD382376B75D} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1664565104-910828770-3124941875-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2011-11-29] (RealNetworks, Inc.)
Task: {C1836681-6312-46F0-AB6A-E22BBFB8CA38} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {C92CF75B-04E2-4736-BCA2-DE5F9B9FB737} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-06] (Google Inc.)
Task: {EC86663E-EC21-429A-B759-A66C60D20E49} - System32\Tasks\{AF6658C4-1E63-42F3-9908-567BE867E481} => C:\Users\42\Downloads\epson324513eu.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-10-22 13:10 - 2011-09-08 17:48 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-10-13 18:05 - 2013-10-13 18:05 - 00752824 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2013-08-05 05:55 - 2012-04-03 23:04 - 00514560 _____ () C:\Program Files (x86)\Dragon's Prophet\redux_runtime64.dll
2013-08-05 05:55 - 2013-01-13 21:43 - 00428032 _____ () C:\Program Files (x86)\Dragon's Prophet\umbraob64.dll
2013-09-09 10:31 - 2013-10-02 13:54 - 00302056 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2013-09-09 10:31 - 2013-10-02 13:54 - 00320488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2013-09-09 10:31 - 2013-10-02 13:54 - 00186344 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
2013-09-09 10:31 - 2013-10-02 13:54 - 00565224 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-09-09 10:31 - 2013-10-02 13:54 - 00700904 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2013-10-14 14:11 - 2013-10-14 10:46 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101400\algo.dll
2012-10-11 22:56 - 2012-10-11 22:56 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-10-11 22:56 - 2012-10-11 22:56 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-13 21:57 - 2013-09-13 21:57 - 00369664 _____ () C:\Program Files (x86)\LOLReplay\LOLUtils.dll
2011-11-13 13:06 - 2010-06-22 14:50 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\hiddriver.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2012-06-22 23:53 - 2012-06-22 23:53 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2012-06-22 23:24 - 2012-06-22 23:24 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2012-06-22 23:39 - 2012-06-22 23:39 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2012-06-22 23:55 - 2012-06-22 23:55 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00124928 _____ () C:\Program Files (x86)\Raptr\_elementtree.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd
2011-05-10 21:01 - 2011-05-10 21:01 - 00030208 _____ () C:\Program Files (x86)\Raptr\simplejson._speedups.pyd
2012-06-22 23:59 - 2012-06-22 23:59 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2012-10-27 09:53 - 2012-10-27 09:53 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2013-10-01 15:30 - 2013-10-01 15:30 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-10-10 02:36 - 2013-10-10 02:36 - 16233864 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll
2013-06-28 20:07 - 2013-08-09 01:34 - 02244504 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-06-28 20:07 - 2013-08-09 01:34 - 00158104 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-06-28 20:07 - 2013-08-09 01:34 - 00022424 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:E8BE05FA
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/13/2013 05:24:27 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: One Finger Death Punch.exe, Version: 1.0.0.0, Zeitstempel: 0x523a36da
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0xc50
Startzeit der fehlerhaften Anwendung: 0xOne Finger Death Punch.exe0
Pfad der fehlerhaften Anwendung: One Finger Death Punch.exe1
Pfad des fehlerhaften Moduls: One Finger Death Punch.exe2
Berichtskennung: One Finger Death Punch.exe3
Error: (10/13/2013 05:24:27 PM) (Source: .NET Runtime) (User: )
Description: Anwendung: One Finger Death Punch.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ObjectDisposedException
Stapel:
bei System.Windows.Forms.Control.CreateHandle()
bei System.Windows.Forms.Form.CreateHandle()
bei System.Windows.Forms.Control.get_Handle()
bei System.Windows.Forms.Control.GetSafeHandle(System.Windows.Forms.IWin32Window)
bei System.Windows.Forms.MessageBox.ShowCore(System.Windows.Forms.IWin32Window, System.String, System.String, System.Windows.Forms.MessageBoxButtons, System.Windows.Forms.MessageBoxIcon, System.Windows.Forms.MessageBoxDefaultButton, System.Windows.Forms.MessageBoxOptions, Boolean)
bei Microsoft.Xna.Framework.WindowsGameHost.ShowMissingRequirementMessage(System.Exception)
bei Microsoft.Xna.Framework.Game.ShowMissingRequirementMessage(System.Exception)
bei Microsoft.Xna.Framework.Game.RunGame(Boolean)
bei Microsoft.Xna.Framework.Game.Run()
bei One_Finger_Death_Punch.Program.Main(System.String[])
Error: (10/13/2013 05:24:00 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: One Finger Death Punch.exe, Version: 1.0.0.0, Zeitstempel: 0x523a36da
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x14345944
ID des fehlerhaften Prozesses: 0x1c6c
Startzeit der fehlerhaften Anwendung: 0xOne Finger Death Punch.exe0
Pfad der fehlerhaften Anwendung: One Finger Death Punch.exe1
Pfad des fehlerhaften Moduls: One Finger Death Punch.exe2
Berichtskennung: One Finger Death Punch.exe3
Error: (10/13/2013 05:23:58 PM) (Source: .NET Runtime) (User: )
Description: Anwendung: One Finger Death Punch.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
bei One_Finger_Death_Punch.Game1.Find_Level_Stats(Int32)
bei One_Finger_Death_Punch.Game1.Map_Create_Special_Stones()
bei One_Finger_Death_Punch.Game1.Map_Init()
bei One_Finger_Death_Punch.Game1.FadeScreen()
bei One_Finger_Death_Punch.Game1.Draw(Microsoft.Xna.Framework.GameTime)
bei Microsoft.Xna.Framework.Game.DrawFrame()
bei Microsoft.Xna.Framework.Game.Tick()
bei Microsoft.Xna.Framework.Game.HostIdle(System.Object, System.EventArgs)
bei Microsoft.Xna.Framework.GameHost.OnIdle()
bei Microsoft.Xna.Framework.WindowsGameHost.RunOneFrame()
bei Microsoft.Xna.Framework.WindowsGameHost.ApplicationIdle(System.Object, System.EventArgs)
bei System.Windows.Forms.Application+ThreadContext.System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FDoIdle(Int32)
bei System.Windows.Forms.Application+ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr, Int32, Int32)
bei System.Windows.Forms.Application+ThreadContext.RunMessageLoopInner(Int32, System.Windows.Forms.ApplicationContext)
bei System.Windows.Forms.Application+ThreadContext.RunMessageLoop(Int32, System.Windows.Forms.ApplicationContext)
bei System.Windows.Forms.Application.Run(System.Windows.Forms.Form)
bei Microsoft.Xna.Framework.WindowsGameHost.Run()
bei Microsoft.Xna.Framework.Game.RunGame(Boolean)
bei Microsoft.Xna.Framework.Game.Run()
bei One_Finger_Death_Punch.Program.Main(System.String[])
Error: (10/11/2013 08:46:20 PM) (Source: System Restore) (User: )
Description: Der geplante Wiederherstellungspunkt konnte nicht erstellt werden. Zusätzliche Informationen: (0x81000101).
Error: (10/11/2013 08:46:20 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x81000101).
Error: (10/11/2013 11:44:12 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: One Finger Death Punch.exe, Version: 1.0.0.0, Zeitstempel: 0x523a36da
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x143b5944
ID des fehlerhaften Prozesses: 0xb08
Startzeit der fehlerhaften Anwendung: 0xOne Finger Death Punch.exe0
Pfad der fehlerhaften Anwendung: One Finger Death Punch.exe1
Pfad des fehlerhaften Moduls: One Finger Death Punch.exe2
Berichtskennung: One Finger Death Punch.exe3
Error: (10/11/2013 11:44:10 AM) (Source: .NET Runtime) (User: )
Description: Anwendung: One Finger Death Punch.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
bei One_Finger_Death_Punch.Game1.Find_Level_Stats(Int32)
bei One_Finger_Death_Punch.Game1.Map_Create_Special_Stones()
bei One_Finger_Death_Punch.Game1.Map_Init()
bei One_Finger_Death_Punch.Game1.FadeScreen()
bei One_Finger_Death_Punch.Game1.Draw(Microsoft.Xna.Framework.GameTime)
bei Microsoft.Xna.Framework.Game.DrawFrame()
bei Microsoft.Xna.Framework.Game.Tick()
bei Microsoft.Xna.Framework.Game.HostIdle(System.Object, System.EventArgs)
bei Microsoft.Xna.Framework.GameHost.OnIdle()
bei Microsoft.Xna.Framework.WindowsGameHost.RunOneFrame()
bei Microsoft.Xna.Framework.WindowsGameHost.ApplicationIdle(System.Object, System.EventArgs)
bei System.Windows.Forms.Application+ThreadContext.System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FDoIdle(Int32)
bei System.Windows.Forms.Application+ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr, Int32, Int32)
bei System.Windows.Forms.Application+ThreadContext.RunMessageLoopInner(Int32, System.Windows.Forms.ApplicationContext)
bei System.Windows.Forms.Application+ThreadContext.RunMessageLoop(Int32, System.Windows.Forms.ApplicationContext)
bei System.Windows.Forms.Application.Run(System.Windows.Forms.Form)
bei Microsoft.Xna.Framework.WindowsGameHost.Run()
bei Microsoft.Xna.Framework.Game.RunGame(Boolean)
bei Microsoft.Xna.Framework.Game.Run()
bei One_Finger_Death_Punch.Program.Main(System.String[])
Error: (10/10/2013 04:44:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: One Finger Death Punch.exe, Version: 1.0.0.0, Zeitstempel: 0x523a36da
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x618
Startzeit der fehlerhaften Anwendung: 0xOne Finger Death Punch.exe0
Pfad der fehlerhaften Anwendung: One Finger Death Punch.exe1
Pfad des fehlerhaften Moduls: One Finger Death Punch.exe2
Berichtskennung: One Finger Death Punch.exe3
Error: (10/10/2013 04:44:02 PM) (Source: .NET Runtime) (User: )
Description: Anwendung: One Finger Death Punch.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ObjectDisposedException
Stapel:
bei System.Windows.Forms.Control.CreateHandle()
bei System.Windows.Forms.Form.CreateHandle()
bei System.Windows.Forms.Control.get_Handle()
bei System.Windows.Forms.Control.GetSafeHandle(System.Windows.Forms.IWin32Window)
bei System.Windows.Forms.MessageBox.ShowCore(System.Windows.Forms.IWin32Window, System.String, System.String, System.Windows.Forms.MessageBoxButtons, System.Windows.Forms.MessageBoxIcon, System.Windows.Forms.MessageBoxDefaultButton, System.Windows.Forms.MessageBoxOptions, Boolean)
bei Microsoft.Xna.Framework.WindowsGameHost.ShowMissingRequirementMessage(System.Exception)
bei Microsoft.Xna.Framework.Game.ShowMissingRequirementMessage(System.Exception)
bei Microsoft.Xna.Framework.Game.RunGame(Boolean)
bei Microsoft.Xna.Framework.Game.Run()
bei One_Finger_Death_Punch.Program.Main(System.String[])
System errors:
=============
Error: (10/14/2013 02:14:19 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/14/2013 02:14:19 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht.
Error: (10/14/2013 02:10:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/14/2013 02:10:04 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht.
Error: (10/14/2013 01:32:57 AM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (10/14/2013 01:32:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error: (10/14/2013 01:31:45 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2864058)
Error: (10/13/2013 11:10:29 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume1" den Befehl "chkdsk" aus.
Error: (10/13/2013 11:10:29 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume1" den Befehl "chkdsk" aus.
Error: (10/13/2013 11:10:07 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume1" den Befehl "chkdsk" aus.
Microsoft Office Sessions:
=========================
Error: (10/13/2013 05:24:27 PM) (Source: Application Error)(User: )
Description: One Finger Death Punch.exe1.0.0.0523a36daKERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41fc5001cec828495c02a6C:\Program Files (x86)\One Finger Death Punch\One Finger Death Punch.exeC:\Windows\syswow64\KERNELBASE.dll8c025686-341b-11e3-b348-4061861ec56f
Error: (10/13/2013 05:24:27 PM) (Source: .NET Runtime)(User: )
Description: Anwendung: One Finger Death Punch.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ObjectDisposedException
Stapel:
bei System.Windows.Forms.Control.CreateHandle()
bei System.Windows.Forms.Form.CreateHandle()
bei System.Windows.Forms.Control.get_Handle()
bei System.Windows.Forms.Control.GetSafeHandle(System.Windows.Forms.IWin32Window)
bei System.Windows.Forms.MessageBox.ShowCore(System.Windows.Forms.IWin32Window, System.String, System.String, System.Windows.Forms.MessageBoxButtons, System.Windows.Forms.MessageBoxIcon, System.Windows.Forms.MessageBoxDefaultButton, System.Windows.Forms.MessageBoxOptions, Boolean)
bei Microsoft.Xna.Framework.WindowsGameHost.ShowMissingRequirementMessage(System.Exception)
bei Microsoft.Xna.Framework.Game.ShowMissingRequirementMessage(System.Exception)
bei Microsoft.Xna.Framework.Game.RunGame(Boolean)
bei Microsoft.Xna.Framework.Game.Run()
bei One_Finger_Death_Punch.Program.Main(System.String[])
Error: (10/13/2013 05:24:00 PM) (Source: Application Error)(User: )
Description: One Finger Death Punch.exe1.0.0.0523a36daunknown0.0.0.000000000c0000005143459441c6c01cec82052b031ddC:\Program Files (x86)\One Finger Death Punch\One Finger Death Punch.exeunknown7becabbb-341b-11e3-b348-4061861ec56f
Error: (10/13/2013 05:23:58 PM) (Source: .NET Runtime)(User: )
Description: Anwendung: One Finger Death Punch.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
bei One_Finger_Death_Punch.Game1.Find_Level_Stats(Int32)
bei One_Finger_Death_Punch.Game1.Map_Create_Special_Stones()
bei One_Finger_Death_Punch.Game1.Map_Init()
bei One_Finger_Death_Punch.Game1.FadeScreen()
bei One_Finger_Death_Punch.Game1.Draw(Microsoft.Xna.Framework.GameTime)
bei Microsoft.Xna.Framework.Game.DrawFrame()
bei Microsoft.Xna.Framework.Game.Tick()
bei Microsoft.Xna.Framework.Game.HostIdle(System.Object, System.EventArgs)
bei Microsoft.Xna.Framework.GameHost.OnIdle()
bei Microsoft.Xna.Framework.WindowsGameHost.RunOneFrame()
bei Microsoft.Xna.Framework.WindowsGameHost.ApplicationIdle(System.Object, System.EventArgs)
bei System.Windows.Forms.Application+ThreadContext.System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FDoIdle(Int32)
bei System.Windows.Forms.Application+ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr, Int32, Int32)
bei System.Windows.Forms.Application+ThreadContext.RunMessageLoopInner(Int32, System.Windows.Forms.ApplicationContext)
bei System.Windows.Forms.Application+ThreadContext.RunMessageLoop(Int32, System.Windows.Forms.ApplicationContext)
bei System.Windows.Forms.Application.Run(System.Windows.Forms.Form)
bei Microsoft.Xna.Framework.WindowsGameHost.Run()
bei Microsoft.Xna.Framework.Game.RunGame(Boolean)
bei Microsoft.Xna.Framework.Game.Run()
bei One_Finger_Death_Punch.Program.Main(System.String[])
Error: (10/11/2013 08:46:20 PM) (Source: System Restore)(User: )
Description: 0x81000101
Error: (10/11/2013 08:46:20 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationGeplanter Prüfpunkt0x81000101
Error: (10/11/2013 11:44:12 AM) (Source: Application Error)(User: )
Description: One Finger Death Punch.exe1.0.0.0523a36daunknown0.0.0.000000000c0000005143b5944b0801cec661e82b2bd0C:\Program Files (x86)\One Finger Death Punch\One Finger Death Punch.exeunknownaec03802-3259-11e3-85ad-4061861ec56f
Error: (10/11/2013 11:44:10 AM) (Source: .NET Runtime)(User: )
Description: Anwendung: One Finger Death Punch.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
bei One_Finger_Death_Punch.Game1.Find_Level_Stats(Int32)
bei One_Finger_Death_Punch.Game1.Map_Create_Special_Stones()
bei One_Finger_Death_Punch.Game1.Map_Init()
bei One_Finger_Death_Punch.Game1.FadeScreen()
bei One_Finger_Death_Punch.Game1.Draw(Microsoft.Xna.Framework.GameTime)
bei Microsoft.Xna.Framework.Game.DrawFrame()
bei Microsoft.Xna.Framework.Game.Tick()
bei Microsoft.Xna.Framework.Game.HostIdle(System.Object, System.EventArgs)
bei Microsoft.Xna.Framework.GameHost.OnIdle()
bei Microsoft.Xna.Framework.WindowsGameHost.RunOneFrame()
bei Microsoft.Xna.Framework.WindowsGameHost.ApplicationIdle(System.Object, System.EventArgs)
bei System.Windows.Forms.Application+ThreadContext.System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FDoIdle(Int32)
bei System.Windows.Forms.Application+ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr, Int32, Int32)
bei System.Windows.Forms.Application+ThreadContext.RunMessageLoopInner(Int32, System.Windows.Forms.ApplicationContext)
bei System.Windows.Forms.Application+ThreadContext.RunMessageLoop(Int32, System.Windows.Forms.ApplicationContext)
bei System.Windows.Forms.Application.Run(System.Windows.Forms.Form)
bei Microsoft.Xna.Framework.WindowsGameHost.Run()
bei Microsoft.Xna.Framework.Game.RunGame(Boolean)
bei Microsoft.Xna.Framework.Game.Run()
bei One_Finger_Death_Punch.Program.Main(System.String[])
Error: (10/10/2013 04:44:10 PM) (Source: Application Error)(User: )
Description: One Finger Death Punch.exe1.0.0.0523a36daKERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41f61801cec5c714815cdaC:\Program Files (x86)\One Finger Death Punch\One Finger Death Punch.exeC:\Windows\syswow64\KERNELBASE.dll6bafe180-31ba-11e3-9543-daa7487c822c
Error: (10/10/2013 04:44:02 PM) (Source: .NET Runtime)(User: )
Description: Anwendung: One Finger Death Punch.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ObjectDisposedException
Stapel:
bei System.Windows.Forms.Control.CreateHandle()
bei System.Windows.Forms.Form.CreateHandle()
bei System.Windows.Forms.Control.get_Handle()
bei System.Windows.Forms.Control.GetSafeHandle(System.Windows.Forms.IWin32Window)
bei System.Windows.Forms.MessageBox.ShowCore(System.Windows.Forms.IWin32Window, System.String, System.String, System.Windows.Forms.MessageBoxButtons, System.Windows.Forms.MessageBoxIcon, System.Windows.Forms.MessageBoxDefaultButton, System.Windows.Forms.MessageBoxOptions, Boolean)
bei Microsoft.Xna.Framework.WindowsGameHost.ShowMissingRequirementMessage(System.Exception)
bei Microsoft.Xna.Framework.Game.ShowMissingRequirementMessage(System.Exception)
bei Microsoft.Xna.Framework.Game.RunGame(Boolean)
bei Microsoft.Xna.Framework.Game.Run()
bei One_Finger_Death_Punch.Program.Main(System.String[])
==================== Memory info ===========================
Percentage of memory in use: 72%
Total physical RAM: 8174.06 MB
Available physical RAM: 2234.12 MB
Total Pagefile: 16346.3 MB
Available Pagefile: 9710.39 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.51 GB) (Free:16.07 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (USB DISK) (Removable) (Total:7.45 GB) (Free:5.92 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A9A96CA7)
Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7 GB) - (Type=0C)
==================== End Of Log ============================
Midrask |
|
15.10.2013, 09:09
| #4 | |
| /// the machine /// TB-Ausbilder | Win32/Adload.DA & viele verschiedene SymptomeZitat:
Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.10.2013, 12:32
| #5 |
| | Win32/Adload.DA & viele verschiedene Symptome Danke für die erneute Antwort! Ja, sfBot ist ein mir bekanntes Tool, welches ich eine Zeit lang verwendet habe. Die Quelle erscheint mir selbst vertrauenswürdig, da unter anderem eine große Zahl von Nutzern dieses Tool nutzt ohne Probleme gemeldet zu haben (siehe www.sfbot.de). ComboFix ist durchgelaufen, beim Erstellen des Wiederherstellungspunktes gab es die Meldung mit dem Registrierungsschlüssel zur Exe vom Internet Explorer, ansonsten nichts auffälliges beim Scan. Hier der Log: Code:
ATTFilter ComboFix 13-10-15.02 - 42 15.10.2013 12:33:46.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8174.5665 [GMT 2:00]
ausgeführt von:: c:\users\42\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\42\AppData\Local\assembly\tmp
c:\users\42\AppData\Roaming\inst.exe
c:\users\42\AppData\Roaming\mIRC\logs\status.log
c:\users\42\AppData\Roaming\siw_sdk.dll
c:\windows\apppatch\AppLoc.exe
c:\windows\apppatch\AppLocA.exe
c:\windows\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb
c:\windows\apppatch\unins000.dat
c:\windows\apppatch\unins000.exe
c:\windows\SysWow64\DEBUG.log
c:\windows\SysWow64\frapsvid.dll
c:\windows\SysWow64\uxtheme.dll.tmp
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-09-15 bis 2013-10-15 ))))))))))))))))))))))))))))))
.
.
2013-10-15 10:53 . 2013-10-15 10:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-10-14 19:35 . 2013-10-14 19:52 -------- d-----w- c:\users\42\AppData\Local\LogicCircuit
2013-10-14 19:10 . 2013-10-14 19:10 -------- d-----w- c:\users\42\AppData\Local\Yenka
2013-10-14 19:05 . 2013-10-14 19:07 -------- d-----w- c:\program files (x86)\Yenka
2013-10-14 17:23 . 2013-10-14 17:23 -------- d-----w- C:\FRST
2013-10-11 13:33 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2013-10-11 13:09 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-10-11 13:09 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-10-11 13:09 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-10-11 13:09 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-10-11 13:09 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-10-11 13:09 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-10-11 13:09 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-10-11 00:12 . 2013-10-11 01:05 -------- d-----w- c:\program files (x86)\Magic Workstation
2013-10-10 17:59 . 2013-10-10 17:59 -------- d-----w- C:\found.003
2013-10-10 11:20 . 2013-10-10 11:20 -------- d-----w- c:\users\42\AppData\Local\LogMeIn
2013-10-10 11:20 . 2013-10-10 11:20 -------- d-----w- c:\programdata\LogMeIn
2013-10-09 21:36 . 2013-10-10 00:36 17813896 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-10-09 14:38 . 2013-10-10 11:34 -------- d-----w- c:\program files (x86)\One Finger Death Punch
2013-10-02 20:22 . 2013-10-02 20:23 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2013-10-02 00:24 . 2013-08-10 03:17 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-10-02 00:24 . 2013-08-10 03:07 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-10-02 00:24 . 2013-08-10 05:20 526336 ----a-w- c:\windows\system32\ieui.dll
2013-10-02 00:24 . 2013-08-10 05:20 356864 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2013-10-02 00:24 . 2013-08-10 03:58 257536 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll
2013-10-01 22:25 . 2013-08-02 01:59 3968960 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-10-01 22:24 . 2013-08-02 02:12 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-27 16:03 . 2013-09-27 16:03 -------- d-----w- c:\users\42\AppData\Roaming\Guild Wars 2
2013-09-26 12:00 . 2013-09-26 18:31 -------- d-----w- c:\programdata\GFACE
2013-09-21 03:27 . 2013-09-21 03:27 -------- d-----w- c:\program files (x86)\Duty Calls
2013-09-21 00:33 . 2013-09-21 00:33 -------- d-----w- c:\program files (x86)\Hex-Editor MX
2013-09-17 15:41 . 2013-09-23 14:07 -------- d-----w- c:\program files (x86)\osu!
2013-09-15 13:14 . 2013-09-15 13:14 -------- d-----w- c:\users\42\AppData\Roaming\MP3SkypeRecorder
2013-09-15 13:14 . 2013-09-15 13:14 -------- d-----w- c:\users\42\AppData\Local\Alexander_Nikiforov
2013-09-15 13:14 . 2013-09-15 13:14 -------- d-----w- c:\program files (x86)\MP3 Skype Recorder
2013-09-15 13:03 . 2013-09-15 13:03 -------- d-----w- c:\program files (x86)\CyberLink
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-11 13:41 . 2011-10-15 09:27 80541720 ----a-w- c:\windows\system32\MRT.exe
2013-10-10 00:36 . 2012-03-30 08:56 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-10-10 00:36 . 2011-09-26 12:20 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-25 19:59 . 2011-10-26 20:34 165232 ---ha-w- c:\users\42\AppData\Roaming\Microsoft\Virtual PC\VPCKeyboard.dll
2013-09-13 22:56 . 2013-09-13 22:56 231376 ----a-w- c:\windows\system32\drivers\truecrypt.sys
2013-08-31 00:14 . 2013-08-31 00:14 78432 ----a-w- c:\windows\system32\atimpc64.dll
2013-08-31 00:14 . 2013-08-31 00:14 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2013-08-31 00:14 . 2013-08-31 00:14 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-08-31 00:14 . 2013-08-31 00:14 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-08-31 00:14 . 2013-03-29 02:37 142792 ----a-w- c:\windows\system32\atiuxp64.dll
2013-08-31 00:14 . 2013-03-29 02:37 125824 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-08-31 00:13 . 2013-03-29 02:37 97984 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-08-31 00:13 . 2013-03-29 02:37 114488 ----a-w- c:\windows\system32\atiu9p64.dll
2013-08-31 00:13 . 2011-10-10 08:56 1233080 ----a-w- c:\windows\system32\aticfx64.dll
2013-08-31 00:13 . 2013-03-29 02:37 1027544 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-08-31 00:13 . 2012-03-09 04:45 9464840 ----a-w- c:\windows\system32\atidxx64.dll
2013-08-31 00:13 . 2013-03-29 02:36 8215992 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-08-31 00:13 . 2013-03-29 02:36 6176008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-08-31 00:13 . 2013-03-29 02:36 6189416 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-08-31 00:13 . 2013-03-29 02:36 6767240 ----a-w- c:\windows\system32\atiumd6a.dll
2013-08-31 00:13 . 2013-03-29 02:36 7256496 ----a-w- c:\windows\system32\atiumd64.dll
2013-08-31 00:11 . 2013-08-31 00:11 12528640 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2013-08-30 23:48 . 2013-08-30 23:48 127488 ----a-w- c:\windows\system32\coinst_13.152.dll
2013-08-30 23:48 . 2013-08-30 23:48 229376 ----a-w- c:\windows\system32\clinfo.exe
2013-08-30 23:47 . 2013-08-30 23:47 98816 ----a-w- c:\windows\system32\OpenVideo64.dll
2013-08-30 23:47 . 2013-08-30 23:47 83456 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2013-08-30 23:47 . 2013-08-30 23:47 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2013-08-30 23:47 . 2013-08-30 23:47 73216 ----a-w- c:\windows\SysWow64\OVDecode.dll
2013-08-30 23:47 . 2013-08-30 23:47 28192256 ----a-w- c:\windows\system32\amdocl64.dll
2013-08-30 23:45 . 2013-08-30 23:45 23760896 ----a-w- c:\windows\SysWow64\amdocl.dll
2013-08-30 23:43 . 2013-08-30 23:43 63488 ----a-w- c:\windows\system32\OpenCL.dll
2013-08-30 23:43 . 2013-08-30 23:43 57344 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-08-30 23:35 . 2013-08-30 23:35 25387520 ----a-w- c:\windows\system32\atio6axx.dll
2013-08-30 23:18 . 2013-08-30 23:18 368640 ----a-w- c:\windows\system32\atiapfxx.exe
2013-08-30 23:18 . 2013-08-30 23:18 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2013-08-30 23:18 . 2013-08-30 23:18 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2013-08-30 23:18 . 2013-08-30 23:18 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2013-08-30 23:18 . 2013-08-30 23:18 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2013-08-30 23:17 . 2013-08-30 23:17 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2013-08-30 23:14 . 2013-08-30 23:14 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2013-08-30 23:13 . 2013-08-30 23:13 21400064 ----a-w- c:\windows\SysWow64\atioglxx.dll
2013-08-30 22:59 . 2013-03-29 01:35 442368 ----a-w- c:\windows\system32\atidemgy.dll
2013-08-30 22:58 . 2013-08-30 22:58 26112 ----a-w- c:\windows\system32\atimuixx.dll
2013-08-30 22:58 . 2013-08-30 22:58 571904 ----a-w- c:\windows\system32\atieclxx.exe
2013-08-30 22:57 . 2013-08-30 22:57 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2013-08-30 22:56 . 2013-08-30 22:56 190976 ----a-w- c:\windows\system32\atitmm64.dll
2013-08-30 22:33 . 2013-03-29 01:10 784384 ----a-w- c:\windows\system32\atiadlxx.dll
2013-08-30 22:33 . 2013-08-30 22:33 594944 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2013-08-30 22:33 . 2013-08-30 22:33 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2013-08-30 22:32 . 2013-08-30 22:32 75264 ----a-w- c:\windows\system32\atig6pxx.dll
2013-08-30 22:32 . 2013-08-30 22:32 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2013-08-30 22:32 . 2013-08-30 22:32 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2013-08-30 22:32 . 2013-08-30 22:32 100352 ----a-w- c:\windows\system32\atig6txx.dll
2013-08-30 22:32 . 2013-08-30 22:32 96768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2013-08-30 22:32 . 2013-08-30 22:32 618496 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2013-08-30 17:58 . 2013-08-30 17:58 51200 ----a-w- c:\windows\system32\kdbsdk64.dll
2013-08-30 17:53 . 2013-08-30 17:53 38912 ----a-w- c:\windows\SysWow64\kdbsdk32.dll
2013-08-30 07:48 . 2013-03-03 08:41 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-08-30 07:48 . 2013-03-03 08:41 204880 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-08-30 07:48 . 2012-03-22 17:10 378944 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-08-30 07:48 . 2012-03-22 17:10 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-08-30 07:48 . 2012-03-22 17:10 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-08-30 07:48 . 2012-03-22 17:09 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-08-30 07:48 . 2012-03-22 17:10 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-08-30 07:48 . 2012-03-22 17:09 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-08-30 07:47 . 2012-03-22 17:09 41664 ----a-w- c:\windows\avastSS.scr
2013-08-30 07:47 . 2012-03-22 17:09 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-08-14 18:00 . 2013-08-28 19:49 127488 ----a-w- c:\windows\system32\ff_vfw.dll
2013-08-14 18:00 . 2013-08-28 19:49 112640 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2013-08-02 17:29 . 2013-08-28 19:49 256088 ----a-w- c:\windows\system32\unrar64.dll
2013-08-02 17:29 . 2012-08-05 23:51 217176 ----a-w- c:\windows\SysWow64\unrar.dll
2013-08-02 01:48 . 2013-10-01 22:25 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-07-29 10:32 . 2013-07-29 10:32 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-07-29 10:32 . 2013-07-29 10:33 312232 ----a-w- c:\windows\system32\javaws.exe
2013-07-29 10:32 . 2012-12-24 15:38 189352 ----a-w- c:\windows\system32\javaw.exe
2013-07-29 10:32 . 2012-12-24 15:38 188840 ----a-w- c:\windows\system32\java.exe
2013-07-29 10:32 . 2012-12-24 15:42 1093032 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-07-29 10:32 . 2011-09-26 12:27 972712 ----a-w- c:\windows\system32\deployJava1.dll
2013-07-25 09:25 . 2013-08-28 20:09 1888768 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-28 20:09 1620992 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-24 18:36 . 2013-07-24 18:36 66728 ----a-w- c:\windows\system32\drivers\vrtaucbl.sys
2013-07-19 01:58 . 2013-08-28 20:08 2048 ----a-w- c:\windows\system32\tzres.dll
2013-07-19 01:41 . 2013-08-28 20:08 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-01-24 11:50 . 2012-04-14 00:39 168864 ----a-w- c:\program files\Common Files\WireHelpSvc.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Raptr"="c:\progra~2\Raptr\raptrstub.exe" [2013-09-27 55360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-08-30 4858968]
"MGSysCtrl"="c:\program files (x86)\System Control Manager\MGSysCtrl.exe" [2009-12-04 2244608]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-08-30 766208]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-01 2345296]
.
c:\users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2013-10-13 38072]
sfBot.lnk - c:\bin\Spiele\SFBot_v2.1.0\sfBot.exe [2011-11-16 20237824]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
LOLRecorder.lnk - c:\program files (x86)\LOLReplay\LOLRecorder.exe -minimize [2013-9-13 526336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\persistentroutes]
"178.63.49.78,255.255.255.255,192.168.0.143,1"=""
"188.138.106.112,255.255.255.255,192.168.0.143,1"=""
"79.110.87.198,255.255.255.255,192.168.0.143,1"=""
"80.84.58.203,255.255.255.255,192.168.0.143,1"=""
"94.102.0.108,255.255.255.255,192.168.0.143,1"=""
"176.9.9.227,255.255.255.255,192.168.0.143,1"=""
"199.27.135.167,255.255.255.255,192.168.0.143,1"=""
"199.27.134.167,255.255.255.255,192.168.0.143,1"=""
"176.227.199.194,255.255.255.255,192.168.0.143,1"=""
"184.22.200.176,255.255.255.255,192.168.0.143,1"=""
"184.173.197.241,255.255.255.255,192.168.0.143,1"=""
"46.252.196.1,255.255.255.255,192.168.0.143,1"=""
"85.153.48.2,255.255.255.255,192.168.0.143,1"=""
"188.72.213.65,255.255.255.255,192.168.0.143,1"=""
"80.190.202.44,255.255.255.255,192.168.0.143,1"=""
"188.72.201.254,255.255.255.255,192.168.0.143,1"=""
"91.227.4.115,255.255.255.255,192.168.0.143,1"=""
"80.190.202.43,255.255.255.255,192.168.0.143,1"=""
"31.170.162.61,255.255.255.255,192.168.0.143,1"=""
"173.245.60.150,255.255.255.255,192.168.0.143,1"=""
"199.27.134.58,255.255.255.255,192.168.0.143,1"=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 ALSysIO;ALSysIO;c:\users\42\AppData\Local\Temp\ALSysIO64.sys;c:\users\42\AppData\Local\Temp\ALSysIO64.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
R3 connctfy;Connectify Service;c:\windows\system32\DRIVERS\connctfy.sys;c:\windows\SYSNATIVE\DRIVERS\connctfy.sys [x]
R3 connctfyMP;connctfyMP;c:\windows\system32\DRIVERS\connctfy.sys;c:\windows\SYSNATIVE\DRIVERS\connctfy.sys [x]
R3 dc3d;Microsoft-Hardware – Geräteerkennungstreiber;c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 ESLvnic1;ESLvnic Virtual Network 64 Bit;c:\windows\system32\DRIVERS\ESLvnic.sys;c:\windows\SYSNATIVE\DRIVERS\ESLvnic.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 mod7764;Tv Tuner device;c:\windows\system32\DRIVERS\mod77-64.sys;c:\windows\SYSNATIVE\DRIVERS\mod77-64.sys [x]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsucx64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SCL01164;SCL011 Contactless Reader;c:\windows\system32\DRIVERS\SCL01164.sys;c:\windows\SYSNATIVE\DRIVERS\SCL01164.sys [x]
R3 slb;slb;c:\bin\Spiele\AeriaGames\ScarletBlade\avital\scarlb64.sys;c:\bin\Spiele\AeriaGames\ScarletBlade\avital\scarlb64.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.6;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 USBAU;USB Audio Device Interface;c:\windows\system32\drivers\CM10264.sys;c:\windows\SYSNATIVE\drivers\CM10264.sys [x]
R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys;c:\windows\SYSNATIVE\DRIVERS\wacmoumonitor.sys [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
R3 X6va005;X6va005;c:\users\42\AppData\Local\Temp\00560D.tmp;c:\users\42\AppData\Local\Temp\00560D.tmp [x]
R3 X6va006;X6va006;c:\users\42\AppData\Local\Temp\00656EB.tmp;c:\users\42\AppData\Local\Temp\00656EB.tmp [x]
R3 XENfiltv;XENfiltv;c:\windows\system32\drivers\XENfiltv.sys;c:\windows\SYSNATIVE\drivers\XENfiltv.sys [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 johci;JMicron 1394 Filter Driver;c:\windows\system32\DRIVERS\johci.sys;c:\windows\SYSNATIVE\DRIVERS\johci.sys [x]
S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys;c:\windows\SYSNATIVE\DRIVERS\NBVol.sys [x]
S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys;c:\windows\SYSNATIVE\DRIVERS\NBVolUp.sys [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Micro Star SCM;Micro Star SCM;c:\program files (x86)\System Control Manager\MSIService.exe;c:\program files (x86)\System Control Manager\MSIService.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe;c:\program files\Tablet\Pen\Pen_Tablet.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe;c:\program files\Tablet\Pen\Pen_TouchService.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM);c:\windows\system32\DRIVERS\vrtaucbl.sys;c:\windows\SYSNATIVE\DRIVERS\vrtaucbl.sys [x]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192se.sys [x]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-10-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 00:36]
.
2013-10-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-06 15:44]
.
2013-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-06 15:44]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-08-30 07:47 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2013-03-22 36352]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2013-03-08 1278024]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\persistentroutes]
"178.63.49.78,255.255.255.255,192.168.0.143,1"=""
"188.138.106.112,255.255.255.255,192.168.0.143,1"=""
"79.110.87.198,255.255.255.255,192.168.0.143,1"=""
"80.84.58.203,255.255.255.255,192.168.0.143,1"=""
"94.102.0.108,255.255.255.255,192.168.0.143,1"=""
"176.9.9.227,255.255.255.255,192.168.0.143,1"=""
"199.27.135.167,255.255.255.255,192.168.0.143,1"=""
"199.27.134.167,255.255.255.255,192.168.0.143,1"=""
"176.227.199.194,255.255.255.255,192.168.0.143,1"=""
"184.22.200.176,255.255.255.255,192.168.0.143,1"=""
"184.173.197.241,255.255.255.255,192.168.0.143,1"=""
"46.252.196.1,255.255.255.255,192.168.0.143,1"=""
"85.153.48.2,255.255.255.255,192.168.0.143,1"=""
"188.72.213.65,255.255.255.255,192.168.0.143,1"=""
"80.190.202.44,255.255.255.255,192.168.0.143,1"=""
"188.72.201.254,255.255.255.255,192.168.0.143,1"=""
"91.227.4.115,255.255.255.255,192.168.0.143,1"=""
"80.190.202.43,255.255.255.255,192.168.0.143,1"=""
"31.170.162.61,255.255.255.255,192.168.0.143,1"=""
"173.245.60.150,255.255.255.255,192.168.0.143,1"=""
"199.27.134.58,255.255.255.255,192.168.0.143,1"=""
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.bing.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = local
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Free YouTube Download - c:\users\42\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\users\42\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Sothink Flash Downloader For IE - c:\program files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
Trusted Zone: aeriagames.com
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKCU-Run-Akamai NetSession Interface - c:\users\42\AppData\Local\Akamai\netsession_win.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-snp2std - c:\windows\vsnp2std.exe
AddRemove-{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1 - c:\windows\AppPatch\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va005]
"ImagePath"="\??\c:\users\42\AppData\Local\Temp\00560D.tmp"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va006]
"ImagePath"="\??\c:\users\42\AppData\Local\Temp\00656EB.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1664565104-910828770-3124941875-1001\Software\SecuROM\License information*]
"datasecu"=hex:40,f9,f1,a3,fb,ec,94,c7,1e,5b,c9,ba,bb,e2,b4,34,98,3c,51,38,e9,
b0,00,da,42,a5,71,8b,eb,f2,d6,f0,a8,30,e1,c2,6e,a4,a6,3f,3a,59,7a,20,b2,21,\
"rkeysecu"=hex:4d,46,8f,c2,ef,4a,08,0d,2c,78,0a,a4,d5,70,88,3a
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-10-15 13:07:15
ComboFix-quarantined-files.txt 2013-10-15 11:07
.
Vor Suchlauf: 20 Verzeichnis(se), 16.506.654.720 Bytes frei
Nach Suchlauf: 29 Verzeichnis(se), 17.271.988.224 Bytes frei
.
- - End Of File - - 488485AB88525EA755B1862B5866416C
A36C5E4F47E84449FF07ED3517B43A31
Midrask |
|
15.10.2013, 18:48
| #6 |
| /// the machine /// TB-Ausbilder | Win32/Adload.DA & viele verschiedene Symptome Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Win32/Adload.DA & viele verschiedene Symptome |
|
15.10.2013, 22:30
| #7 |
| | Win32/Adload.DA & viele verschiedene Symptome So... alles erledigt, hier sind die Logs: Malwarebytes: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.15.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16686 42 :: KEKSDOSE [Administrator] 15.10.2013 22:13:26 mbam-log-2013-10-15 (22-13-26).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 215191 Laufzeit: 8 Minute(n), 42 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 5 C:\Users\42\Downloads\DTLite4451-0236.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\42\Downloads\smplayer-0.8.6-oc-win32.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\42\Downloads\Unlocker1.9.2.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\42\Downloads\winamp5622_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\42\Downloads\windows.7.codec.pack.v4.0.7.setup.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 15/10/2013 um 22:38:02
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : 42 - KEKSDOSE
# Gestartet von : C:\Users\42\Desktop\adwcleaner_3.0.0.7.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\smartbar
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
-\\ Mozilla Firefox v24.0 (de)
[ Datei : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\prefs.js ]
[ Datei : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\kvhu2r1g.Firefox\prefs.js ]
*************************
AdwCleaner[R0].txt - [4551 octets] - [12/09/2013 22:06:34]
AdwCleaner[R1].txt - [1212 octets] - [11/10/2013 15:04:18]
AdwCleaner[R2].txt - [2372 octets] - [11/10/2013 15:11:37]
AdwCleaner[R3].txt - [1187 octets] - [11/10/2013 15:29:48]
AdwCleaner[R4].txt - [1247 octets] - [11/10/2013 16:00:52]
AdwCleaner[R5].txt - [1474 octets] - [15/10/2013 22:34:34]
AdwCleaner[S0].txt - [4054 octets] - [12/09/2013 22:12:54]
AdwCleaner[S1].txt - [2433 octets] - [11/10/2013 15:12:37]
AdwCleaner[S2].txt - [1345 octets] - [15/10/2013 22:38:02]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1405 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.5 (10.15.2013:1)
OS: Windows 7 Home Premium x64
Ran by 42 on 15.10.2013 at 22:53:50,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\anchorfree
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Users\42\appdata\local\thinstall"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{00146E98-CE1C-47F3-AB50-D7AD7E027D8E}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{0CFAB875-7C76-4208-A663-2055E30109D7}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{1B3C97DD-FA70-41A5-A7F7-AD5EFC40562C}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{25A8EF2A-D0EA-40A3-B6B7-169CCACE81B7}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{26C75045-1695-443A-8AC1-DCA13E3E726E}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{3CDEAA59-5BE7-4F06-8CF9-D0EC72876C63}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{5E2482F7-A1F7-48BE-B087-5AAA67DE3317}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{6D839585-07CC-4E7B-BFFC-53B6DA9A7F72}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{7021321D-2209-4F08-8EE4-36699BFD25A2}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{72BF9211-63A0-426D-A386-B5DE37F01010}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{8B6EC3BB-1DF9-4CCA-83C3-AF1FFF5CBF0E}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{9D488AD3-2459-4FE4-848B-BBA818ABE67E}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{A6E6FB33-49EF-4757-9144-64B0FCBBB463}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{AB0798D8-104F-44C9-9062-D365989B0434}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{AEDB250F-9AC1-431A-A058-D1A7315A08E1}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{B13D2EEF-F8F7-42A4-90A0-5F00B34F0B2F}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{B219B7AF-840A-4BFC-9D76-B995B78441C1}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{BBEC67CD-BF5E-43F2-A40E-0E58A875127D}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{C54E663C-4F98-42C5-A645-D2EDC06500B8}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{DD6C3438-D1AF-4105-AADF-5E99034CF303}
Successfully deleted: [Empty Folder] C:\Users\42\appdata\local\{FCD9CB70-9C4E-4F47-850C-B90FF6179E40}
~~~ FireFox
Emptied folder: C:\Users\42\AppData\Roaming\mozilla\firefox\profiles\kvhu2r1g.Firefox\minidumps [67 files]
Emptied folder: C:\Users\42\AppData\Roaming\mozilla\firefox\profiles\gicp8v6o.Nightly\minidumps [64 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.10.2013 at 23:03:24,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by 42 (administrator) on KEKSDOSE on 15-10-2013 23:14:36
Running from C:\Bin\Tools
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\System Control Manager\MSIService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
() C:\Bin\Spiele\SFBot_v2.1.0\sfBot.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Raptr, Inc) C:\PROGRA~2\Raptr\raptr.exe
(Raptr, Inc) C:\PROGRA~2\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1825064 2009-08-28] (Synaptics Incorporated)
HKLM\...\Run: [snp2std] - C:\Windows\vsnp2std.exe
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
Winlogon\Notify\ScCertProp: C:\WINDOWS\SysWOW64\Explorer.exe (Microsoft Corporation)
HKCU\...\Run: [Raptr] - C:\PROGRA~2\Raptr\raptrstub.exe [55360 2013-09-28] (Raptr, Inc)
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [RoccatKone+] - C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [552960 2011-07-12] (ROCCAT GmbH)
HKLM-x32\...\Run: [MGSysCtrl] - C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe [2244608 2009-12-04] (Micro-Star International Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sfBot.lnk
ShortcutTarget: sfBot.lnk -> C:\Bin\Spiele\SFBot_v2.1.0\sfBot.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3091DD3CE54FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\MP3 Skype Recorder\Skype4COM.dll (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.1.13 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.1.13 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\42\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: GFACE Experience Plugin - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\cryenginebrowserplugin@crytek.com
FF Extension: HTTPS-Everywhere - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\https-everywhere@eff.org
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi
FF Extension: Edit Config Files [de] - C:\Program Files (x86)\Mozilla Firefox\extensions\EditConfigFiles_1.7.5_fx+tb_de-DE
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-18] (Adobe Systems)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4145600 2012-06-20] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-03] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [28504 2012-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-22] (DT Soft Ltd)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2012-01-24] (Turtle Entertainment GmbH)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-03-27] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-03-27] (Windows (R) Server 2003 DDK provider)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
R0 johci; C:\Windows\System32\DRIVERS\johci.sys [20392 2009-09-21] (JMicron )
S3 mod7764; C:\Windows\System32\DRIVERS\mod77-64.sys [913888 2010-03-12] (DiBcom SA)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2004-12-30] (INCA Internet Co., Ltd.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 SCL01164; C:\Windows\System32\DRIVERS\SCL01164.sys [72320 2010-05-07] (SCM Microsystems Inc.)
S3 SNP2STD; C:\Windows\System32\DRIVERS\snp2sxp.sys [12324224 2007-01-20] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-02-01] (Anchorfree Inc.)
S3 USBAU; C:\Windows\System32\drivers\CM10264.sys [1306624 2009-09-08] (C-Media Electronics Inc)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [294232 2011-10-28] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 XENfiltv; C:\Windows\System32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
S3 ALSysIO; \??\C:\Users\42\AppData\Local\Temp\ALSysIO64.sys [x]
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 clwvd; system32\DRIVERS\clwvd.sys [x]
S3 connctfy; system32\DRIVERS\connctfy.sys [x]
S3 connctfyMP; system32\DRIVERS\connctfy.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
S3 slb; \??\C:\Bin\Spiele\AeriaGames\ScarletBlade\avital\scarlb64.sys [x]
S3 X6va005; \??\C:\Users\42\AppData\Local\Temp\00560D.tmp [x]
S3 X6va006; \??\C:\Users\42\AppData\Local\Temp\00656EB.tmp [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-15 23:12 - 2013-10-15 23:12 - 00003334 _____ C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-15 23:12 - 2013-10-15 23:12 - 00003194 _____ C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-15 22:52 - 2013-10-15 22:52 - 00000000 ____D C:\Windows\ERUNT
2013-10-15 22:10 - 2013-10-15 22:10 - 00000000 ____D C:\Users\42\AppData\Roaming\Malwarebytes
2013-10-15 22:09 - 2013-10-15 22:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-15 22:09 - 2013-10-15 22:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 22:09 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-15 22:07 - 2013-10-15 22:07 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\42\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-15 12:29 - 2013-10-15 13:08 - 00000000 ____D C:\Qoobox
2013-10-15 12:29 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-10-15 12:29 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-10-15 12:29 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-10-15 12:28 - 2013-10-15 13:03 - 00000000 ____D C:\Windows\erdnt
2013-10-14 21:35 - 2013-10-14 21:52 - 00000000 ____D C:\Users\42\AppData\Local\LogicCircuit
2013-10-14 21:10 - 2013-10-14 21:10 - 00000000 ____D C:\Users\42\AppData\Local\Yenka
2013-10-14 21:05 - 2013-10-14 21:07 - 00000000 ____D C:\Program Files (x86)\Yenka
2013-10-14 20:02 - 2013-10-14 20:04 - 65803348 _____ (Crocodile Clips Ltd) C:\Users\42\Downloads\Yenka_3_4_1_Setup.exe
2013-10-14 19:23 - 2013-10-14 19:23 - 00000000 ____D C:\FRST
2013-10-14 14:28 - 2013-10-14 14:28 - 01308744 _____ C:\Users\42\Downloads\Rainmeter-3.0.exe
2013-10-13 17:21 - 2013-10-13 17:21 - 00019556 _____ C:\Users\42\AppData\Local\recently-used.xbel
2013-10-11 15:33 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-11 15:09 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-11 02:12 - 2013-10-11 03:05 - 00000000 ____D C:\Program Files (x86)\Magic Workstation
2013-10-10 19:59 - 2013-10-10 19:59 - 00000000 ____D C:\found.003
2013-10-10 14:58 - 2013-10-10 14:59 - 93906704 _____ (Microsoft Corporation) C:\Users\42\Downloads\msert(1).exe
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 01:05 - 2013-10-10 01:05 - 03740128 _____ (foobar2000.org) C:\Users\42\Downloads\foobar2000_v1.2.9.exe
2013-10-09 23:36 - 2013-10-10 02:36 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-09 16:45 - 2013-10-09 16:45 - 00000000 ____D C:\Users\42\Documents\SavedGames
2013-10-09 16:38 - 2013-10-10 13:34 - 00000000 ____D C:\Program Files (x86)\One Finger Death Punch
2013-10-09 16:31 - 2013-10-09 16:33 - 157536120 _____ (Silver Dollar Games ) C:\Users\42\Downloads\One_Finger_Death_Punch_Demo.exe
2013-10-09 15:10 - 2013-10-09 15:10 - 00000000 ____D C:\Users\42\Documents\Dungeon Siege
2013-10-05 15:49 - 2013-10-05 15:52 - 481934982 _____ C:\Users\42\Downloads\adt-bundle-windows-x86_64-20130917.zip
2013-10-03 17:37 - 2013-10-03 17:45 - 193448627 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20120503.exe
2013-10-03 17:37 - 2013-10-03 17:38 - 08773433 _____ C:\Users\42\Downloads\mtg_gamepack.exe
2013-10-03 17:37 - 2013-10-03 17:38 - 05309836 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20121006.exe
2013-10-03 17:37 - 2013-10-03 17:37 - 09690219 _____ C:\Users\42\Downloads\mws094f.exe
2013-10-02 22:22 - 2013-10-02 22:23 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 15:55 - 2013-10-02 15:55 - 00061443 _____ C:\Windows\SysWOW64\CCCInstall_201310021555318539.log
2013-10-02 15:31 - 2013-10-02 15:31 - 273848352 _____ C:\Users\42\Downloads\Gliga_Catalog_2008.pdf.part
2013-10-02 02:24 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-02 02:24 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-02 02:24 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-02 02:24 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-02 02:23 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-02 02:23 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-02 02:23 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-02 02:23 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-02 02:23 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-02 02:23 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-02 02:23 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-02 02:23 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-02 02:23 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-02 02:23 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-02 00:25 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-02 00:25 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-10-02 00:25 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-10-02 00:25 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-10-02 00:25 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-10-02 00:25 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-02 00:25 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-02 00:25 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-02 00:25 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-10-02 00:25 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-10-02 00:25 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-02 00:24 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-02 00:24 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-10-02 00:24 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-02 00:24 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-02 00:24 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-02 00:24 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-10-02 00:24 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-02 00:24 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-02 00:24 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-02 00:24 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-02 00:03 - 2013-10-02 00:03 - 01189552 _____ (AMD Inc.) C:\Users\42\Downloads\catalyst_mobility_64-bit_util(3).exe
2013-10-01 15:30 - 2013-10-01 15:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-27 23:07 - 2013-09-27 23:07 - 00212256 _____ C:\Users\42\Downloads\raptr_installer(1).exe
2013-09-27 18:03 - 2013-09-27 18:03 - 00000000 ____D C:\Users\42\AppData\Roaming\Guild Wars 2
2013-09-27 16:15 - 2013-09-27 16:15 - 10155900 _____ (Razer USA Ltd. ) C:\Users\42\Downloads\Naga_Driver_v2.03.exe.part
2013-09-27 16:15 - 2013-09-27 16:15 - 00050964 _____ C:\Users\42\Downloads\razer___regular___font_by_shikkyaku_yuki-d35z4x8.ttf
2013-09-26 14:00 - 2013-09-26 20:31 - 00000000 ____D C:\ProgramData\GFACE
2013-09-26 12:31 - 2013-09-26 12:38 - 181992655 _____ C:\Users\42\Downloads\HSB4b-full.exe
2013-09-23 15:21 - 2013-09-23 15:21 - 00347424 _____ (Microsoft Corporation) C:\Users\42\Downloads\MicrosoftFixit.Devices.Run.exe
2013-09-21 05:27 - 2013-09-21 05:27 - 00000000 ____D C:\Program Files (x86)\Duty Calls
2013-09-21 02:33 - 2013-09-21 02:33 - 00000000 ____D C:\Program Files (x86)\Hex-Editor MX
2013-09-21 01:19 - 2013-09-21 01:19 - 32442656 _____ (TeamSpeak Systems GmbH) C:\Users\42\Downloads\TeamSpeak3-Client-win64-3.0.12.exe
2013-09-17 17:41 - 2013-09-23 16:07 - 00000000 ____D C:\Program Files (x86)\osu!
2013-09-17 17:37 - 2013-09-17 17:38 - 41666632 _____ (ppy Pty. Ltd.) C:\Users\42\Downloads\osu!install.exe
2013-09-15 15:14 - 2013-09-15 15:14 - 00002991 _____ C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype Recorder.lnk
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Users\42\AppData\Roaming\MP3SkypeRecorder
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Users\42\AppData\Local\Alexander_Nikiforov
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Program Files (x86)\MP3 Skype Recorder
2013-09-15 15:12 - 2013-09-15 15:12 - 02548987 _____ C:\Users\42\Downloads\MP3SkypeRecorder31Setup.exe
2013-09-15 15:03 - 2013-09-15 15:03 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-09-15 14:48 - 2013-09-15 15:00 - 39235832 _____ ( ) C:\Users\42\Downloads\CL.5913_Generic_CDT121023-01.exe
2013-09-15 08:09 - 2013-09-15 08:09 - 00000000 ____D C:\Users\42\AppData\Local\iDeerApp
2013-09-15 08:08 - 2013-09-15 08:08 - 00000000 ____D C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iDeer Blu-ray Player
2013-09-15 08:07 - 2013-09-15 08:07 - 38313751 _____ (iDeerApp Software Inc.) C:\Users\42\Downloads\windows_Bluray_Player.exe
2013-09-15 08:07 - 2013-09-15 08:07 - 00000000 ____D C:\Program Files (x86)\iDeerApp
2013-09-15 07:54 - 2013-09-15 08:56 - 00000000 ____D C:\Users\42\AppData\Roaming\aacs
==================== One Month Modified Files and Folders =======
2013-10-15 23:17 - 2009-07-14 06:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-15 23:17 - 2009-07-14 06:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-15 23:12 - 2013-10-15 23:12 - 00003334 _____ C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-15 23:12 - 2013-10-15 23:12 - 00003194 _____ C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-15 23:12 - 2011-12-03 19:53 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn Hamachi
2013-10-15 23:10 - 2013-09-02 17:40 - 00000000 ____D C:\Users\42\AppData\Roaming\Raptr
2013-10-15 23:09 - 2012-07-12 17:05 - 13927367 _____ C:\Windows\setupact.log
2013-10-15 23:08 - 2012-06-06 17:44 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-15 23:08 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-15 23:06 - 2011-10-10 13:46 - 01620029 _____ C:\Windows\WindowsUpdate.log
2013-10-15 22:52 - 2013-10-15 22:52 - 00000000 ____D C:\Windows\ERUNT
2013-10-15 22:44 - 2012-06-06 17:44 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-15 22:43 - 2012-07-04 23:10 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-15 22:40 - 2013-09-12 22:06 - 00000000 ____D C:\AdwCleaner
2013-10-15 22:36 - 2013-07-14 03:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-15 22:29 - 2011-09-26 07:40 - 02144622 _____ C:\Windows\PFRO.log
2013-10-15 22:27 - 2011-11-03 21:47 - 00000000 ____D C:\Users\42\AppData\Roaming\TS3Client
2013-10-15 22:27 - 2011-09-26 14:40 - 00000000 ____D C:\Users\42\AppData\Roaming\Skype
2013-10-15 22:25 - 2013-05-03 16:13 - 00000000 ____D C:\Users\42\AppData\Local\Apps\2.0
2013-10-15 22:10 - 2013-10-15 22:10 - 00000000 ____D C:\Users\42\AppData\Roaming\Malwarebytes
2013-10-15 22:09 - 2013-10-15 22:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-15 22:09 - 2013-10-15 22:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 22:09 - 2011-09-26 15:12 - 00000000 ____D C:\Users\42\AppData\Roaming\foobar2000
2013-10-15 22:07 - 2013-10-15 22:07 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\42\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-15 21:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-15 17:17 - 2013-08-05 05:55 - 00000000 ____D C:\Program Files (x86)\Dragon's Prophet
2013-10-15 13:48 - 2013-09-02 17:40 - 00000000 ____D C:\Program Files (x86)\Raptr
2013-10-15 13:08 - 2013-10-15 12:29 - 00000000 ____D C:\Qoobox
2013-10-15 13:07 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-10-15 13:03 - 2013-10-15 12:28 - 00000000 ____D C:\Windows\erdnt
2013-10-15 12:53 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-10-14 21:52 - 2013-10-14 21:35 - 00000000 ____D C:\Users\42\AppData\Local\LogicCircuit
2013-10-14 21:10 - 2013-10-14 21:10 - 00000000 ____D C:\Users\42\AppData\Local\Yenka
2013-10-14 21:07 - 2013-10-14 21:05 - 00000000 ____D C:\Program Files (x86)\Yenka
2013-10-14 21:04 - 2009-07-14 19:58 - 00703372 _____ C:\Windows\system32\perfh007.dat
2013-10-14 21:04 - 2009-07-14 19:58 - 00151806 _____ C:\Windows\system32\perfc007.dat
2013-10-14 21:04 - 2009-07-14 07:13 - 01627486 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-14 20:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-14 20:04 - 2013-10-14 20:02 - 65803348 _____ (Crocodile Clips Ltd) C:\Users\42\Downloads\Yenka_3_4_1_Setup.exe
2013-10-14 19:23 - 2013-10-14 19:23 - 00000000 ____D C:\FRST
2013-10-14 17:02 - 2011-09-26 15:07 - 00000000 ____D C:\Program Files (x86)\foobar2000
2013-10-14 14:40 - 2013-03-27 16:09 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-14 14:40 - 2012-08-06 21:34 - 00000000 ____D C:\Program Files\Rainmeter
2013-10-14 14:28 - 2013-10-14 14:28 - 01308744 _____ C:\Users\42\Downloads\Rainmeter-3.0.exe
2013-10-14 01:01 - 2013-09-02 19:56 - 00000000 ____D C:\CrashReport
2013-10-13 23:10 - 2011-10-07 13:14 - 00000000 ____D C:\Users\42\AppData\Roaming\SFBot
2013-10-13 17:42 - 2012-05-10 18:56 - 00000000 ____D C:\Users\42\.gimp-2.8
2013-10-13 17:21 - 2013-10-13 17:21 - 00019556 _____ C:\Users\42\AppData\Local\recently-used.xbel
2013-10-13 13:52 - 2012-04-13 20:30 - 00000000 ____D C:\Users\42\AppData\Roaming\vlc
2013-10-12 14:42 - 2012-12-17 18:37 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-12 00:36 - 2012-12-25 01:38 - 00000372 _____ C:\Windows\system32\TeamViewer8_Hooks.log
2013-10-12 00:35 - 2012-07-18 11:52 - 00000000 ____D C:\Users\42\AppData\Roaming\TeamViewer
2013-10-11 15:48 - 2013-07-29 12:32 - 00000000 ____D C:\Windows\system32\MRT
2013-10-11 15:41 - 2011-10-15 11:27 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-11 03:05 - 2013-10-11 02:12 - 00000000 ____D C:\Program Files (x86)\Magic Workstation
2013-10-10 19:59 - 2013-10-10 19:59 - 00000000 ____D C:\found.003
2013-10-10 14:59 - 2013-10-10 14:58 - 93906704 _____ (Microsoft Corporation) C:\Users\42\Downloads\msert(1).exe
2013-10-10 13:34 - 2013-10-09 16:38 - 00000000 ____D C:\Program Files (x86)\One Finger Death Punch
2013-10-10 13:34 - 2011-10-21 22:52 - 00007618 _____ C:\Users\42\AppData\Local\Resmon.ResmonCfg
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 02:59 - 2011-10-29 12:59 - 00000000 ____D C:\Users\42\AppData\Roaming\Audacity
2013-10-10 02:36 - 2013-10-09 23:36 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-10 02:36 - 2013-07-14 03:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-10 02:36 - 2012-03-30 10:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 02:36 - 2011-09-26 14:20 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-10 02:36 - 2011-09-25 23:56 - 00000000 ___RD C:\Bin
2013-10-10 02:34 - 2012-10-10 01:15 - 00000000 ____D C:\Program Files (x86)\freac
2013-10-10 01:51 - 2013-02-04 00:20 - 00000000 ____D C:\Users\42\AppData\Roaming\NoNameScript
2013-10-10 01:05 - 2013-10-10 01:05 - 03740128 _____ (foobar2000.org) C:\Users\42\Downloads\foobar2000_v1.2.9.exe
2013-10-09 23:30 - 2013-01-27 01:10 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-09 23:30 - 2011-09-26 14:40 - 00000000 ____D C:\ProgramData\Skype
2013-10-09 17:01 - 2011-09-30 17:11 - 00000000 ____D C:\Users\42\AppData\Local\Paint.NET
2013-10-09 16:45 - 2013-10-09 16:45 - 00000000 ____D C:\Users\42\Documents\SavedGames
2013-10-09 16:33 - 2013-10-09 16:31 - 157536120 _____ (Silver Dollar Games ) C:\Users\42\Downloads\One_Finger_Death_Punch_Demo.exe
2013-10-09 15:10 - 2013-10-09 15:10 - 00000000 ____D C:\Users\42\Documents\Dungeon Siege
2013-10-05 16:14 - 2011-09-30 13:23 - 00000600 _____ C:\Users\42\PUTTY.RND
2013-10-05 15:52 - 2013-10-05 15:49 - 481934982 _____ C:\Users\42\Downloads\adt-bundle-windows-x86_64-20130917.zip
2013-10-03 17:45 - 2013-10-03 17:37 - 193448627 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20120503.exe
2013-10-03 17:38 - 2013-10-03 17:37 - 08773433 _____ C:\Users\42\Downloads\mtg_gamepack.exe
2013-10-03 17:38 - 2013-10-03 17:37 - 05309836 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20121006.exe
2013-10-03 17:37 - 2013-10-03 17:37 - 09690219 _____ C:\Users\42\Downloads\mws094f.exe
2013-10-03 00:01 - 2011-09-30 16:59 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-02 22:23 - 2013-10-02 22:22 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 15:55 - 2013-10-02 15:55 - 00061443 _____ C:\Windows\SysWOW64\CCCInstall_201310021555318539.log
2013-10-02 15:41 - 2012-03-04 22:15 - 01605714 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-02 15:31 - 2013-10-02 15:31 - 273848352 _____ C:\Users\42\Downloads\Gliga_Catalog_2008.pdf.part
2013-10-02 14:33 - 2012-04-25 22:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-02 13:54 - 2011-11-03 21:45 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-10-02 13:52 - 2011-09-26 15:46 - 00000000 ____D C:\Users\42\AppData\Local\Mozilla
2013-10-02 13:40 - 2011-09-25 22:23 - 00000000 ___RD C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-02 13:40 - 2011-09-25 22:23 - 00000000 ___RD C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-02 13:35 - 2009-07-14 06:45 - 04874880 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-02 00:03 - 2013-10-02 00:03 - 01189552 _____ (AMD Inc.) C:\Users\42\Downloads\catalyst_mobility_64-bit_util(3).exe
2013-10-01 15:30 - 2013-10-01 15:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 21:40 - 2013-09-06 17:43 - 00000000 ____D C:\Users\42\AppData\Roaming\NaviFirmPlus
2013-09-29 15:17 - 2013-08-20 17:17 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-09-28 00:30 - 2012-03-19 16:29 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-09-27 23:07 - 2013-09-27 23:07 - 00212256 _____ C:\Users\42\Downloads\raptr_installer(1).exe
2013-09-27 18:03 - 2013-09-27 18:03 - 00000000 ____D C:\Users\42\AppData\Roaming\Guild Wars 2
2013-09-27 18:03 - 2013-02-16 18:50 - 00000000 ____D C:\Users\42\Documents\Guild Wars 2
2013-09-27 16:58 - 2011-10-10 13:55 - 00071840 _____ C:\Users\42\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-27 16:15 - 2013-09-27 16:15 - 10155900 _____ (Razer USA Ltd. ) C:\Users\42\Downloads\Naga_Driver_v2.03.exe.part
2013-09-27 16:15 - 2013-09-27 16:15 - 00050964 _____ C:\Users\42\Downloads\razer___regular___font_by_shikkyaku_yuki-d35z4x8.ttf
2013-09-26 20:31 - 2013-09-26 14:00 - 00000000 ____D C:\ProgramData\GFACE
2013-09-26 20:28 - 2012-09-25 23:15 - 00000000 ____D C:\Users\42\AppData\Roaming\Mp3tag
2013-09-26 12:38 - 2013-09-26 12:31 - 181992655 _____ C:\Users\42\Downloads\HSB4b-full.exe
2013-09-23 16:07 - 2013-09-17 17:41 - 00000000 ____D C:\Program Files (x86)\osu!
2013-09-23 15:21 - 2013-09-23 15:21 - 00347424 _____ (Microsoft Corporation) C:\Users\42\Downloads\MicrosoftFixit.Devices.Run.exe
2013-09-21 05:27 - 2013-09-21 05:27 - 00000000 ____D C:\Program Files (x86)\Duty Calls
2013-09-21 05:24 - 2011-09-30 13:07 - 00796266 _____ C:\Windows\DirectX.log
2013-09-21 02:33 - 2013-09-21 02:33 - 00000000 ____D C:\Program Files (x86)\Hex-Editor MX
2013-09-21 01:19 - 2013-09-21 01:19 - 32442656 _____ (TeamSpeak Systems GmbH) C:\Users\42\Downloads\TeamSpeak3-Client-win64-3.0.12.exe
2013-09-21 01:03 - 2011-09-26 14:20 - 00000000 ____D C:\Users\42\AppData\Roaming\Adobe
2013-09-17 17:38 - 2013-09-17 17:37 - 41666632 _____ (ppy Pty. Ltd.) C:\Users\42\Downloads\osu!install.exe
2013-09-17 00:51 - 2011-09-25 23:18 - 00000000 ____D C:\Users\42\AppData\Roaming\.minecraft
2013-09-15 22:48 - 2011-09-30 17:11 - 00000000 ____D C:\Program Files\Paint.NET
2013-09-15 22:28 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2013-09-15 15:14 - 2013-09-15 15:14 - 00002991 _____ C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype Recorder.lnk
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Users\42\AppData\Roaming\MP3SkypeRecorder
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Users\42\AppData\Local\Alexander_Nikiforov
2013-09-15 15:14 - 2013-09-15 15:14 - 00000000 ____D C:\Program Files (x86)\MP3 Skype Recorder
2013-09-15 15:12 - 2013-09-15 15:12 - 02548987 _____ C:\Users\42\Downloads\MP3SkypeRecorder31Setup.exe
2013-09-15 15:03 - 2013-09-15 15:03 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-09-15 15:03 - 2012-04-17 20:19 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-15 15:03 - 2011-09-25 22:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-15 15:00 - 2013-09-15 14:48 - 39235832 _____ ( ) C:\Users\42\Downloads\CL.5913_Generic_CDT121023-01.exe
2013-09-15 08:57 - 2012-06-05 22:25 - 00000000 ____D C:\Users\42\AppData\Roaming\dvdcss
2013-09-15 08:56 - 2013-09-15 07:54 - 00000000 ____D C:\Users\42\AppData\Roaming\aacs
2013-09-15 08:09 - 2013-09-15 08:09 - 00000000 ____D C:\Users\42\AppData\Local\iDeerApp
2013-09-15 08:08 - 2013-09-15 08:08 - 00000000 ____D C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iDeer Blu-ray Player
2013-09-15 08:07 - 2013-09-15 08:07 - 38313751 _____ (iDeerApp Software Inc.) C:\Users\42\Downloads\windows_Bluray_Player.exe
2013-09-15 08:07 - 2013-09-15 08:07 - 00000000 ____D C:\Program Files (x86)\iDeerApp
Files to move or delete:
====================
C:\Users\42\AppData\Roaming\version.ini
Some content of TEMP:
====================
C:\Users\42\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-11 20:43
==================== End Of Log ============================
Hier noch die zwei alten Adware-Cleaner Logs, da steht durchaus noch mehr drin: Code:
ATTFilter # AdwCleaner v3.003 - Bericht erstellt am 12/09/2013 um 22:12:54
# Updated 07/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : 42 - KEKSDOSE
# Gestartet von : C:\Bin\Tools\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\kvhu2r1g.Firefox\foxydeal.sqlite
Datei Gelöscht : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\user.js
Datei Gelöscht : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\kvhu2r1g.Firefox\user.js
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_facebook-messenger-fur-windows_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_facebook-messenger-fur-windows_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fl-studio_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fl-studio_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A0B10EBE-4E51-4CAE-949B-E6B9E7D68CEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F511AFDB-726E-4458-90E7-1ECB97406544}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKLM64\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM64\SOFTWARE\Tarma Installer
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16660
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\prefs.js ]
Zeile gelöscht : user_pref("extentions.webcake.defaultEnableAppsList", "layers,brain/features,newOffers/wc");
Zeile gelöscht : user_pref("extentions.webcake.installId", "efbc6ea6-feed-4b3c-ad97-822464c6ae15");
[ Datei : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\kvhu2r1g.Firefox\prefs.js ]
Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 11/10/2013 um 15:12:37
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : 42 - KEKSDOSE
# Gestartet von : C:\Bin\Tools\adwcleaner_3.0.0.7.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
-\\ Mozilla Firefox v24.0 (de)
[ Datei : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\prefs.js ]
[ Datei : C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\kvhu2r1g.Firefox\prefs.js ]
Zeile gelöscht : user_pref("extentions.webcake.defaultEnableAppsList", "layers,brain/features,newOffers/wc");
Zeile gelöscht : user_pref("extentions.webcake.installId", "efbc6ea6-feed-4b3c-ad97-822464c6ae15");
*************************
AdwCleaner[R0].txt - [4551 octets] - [12/09/2013 22:06:34]
AdwCleaner[R1].txt - [1212 octets] - [11/10/2013 15:04:18]
AdwCleaner[R2].txt - [2372 octets] - [11/10/2013 15:11:37]
AdwCleaner[S0].txt - [4054 octets] - [12/09/2013 22:12:54]
AdwCleaner[S1].txt - [2273 octets] - [11/10/2013 15:12:37]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2333 octets] ##########
Midrask |
|
16.10.2013, 10:56
| #8 |
| /// the machine /// TB-Ausbilder | Win32/Adload.DA & viele verschiedene SymptomeESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.10.2013, 13:16
| #9 |
| | Win32/Adload.DA & viele verschiedene Symptome Da der ESET seine Zeit brauchen wird, kann sich der Log dazu um ein bis zwei Tage verzögern - bitte nicht denken, dass da nicht mehr kommt!  Gruß, Midrask |
|
17.10.2013, 18:45
| #10 |
| /// the machine /// TB-Ausbilder | Win32/Adload.DA & viele verschiedene Symptome ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.10.2013, 12:11
| #11 |
| | Win32/Adload.DA & viele verschiedene Symptome Achtzehn Stunden später hat sich dann der Scan. ^^ Hier der Log von Eset: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=3c56ccf5220cb54ea816322eaa63640d
# engine=15506
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-16 01:55:00
# local_time=2013-10-16 03:55:00 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 3570185 158641572 0 0
# compatibility_mode=5893 16776574 100 94 8371428 133561550 0 0
# scanned=46951
# found=0
# cleaned=0
# scan_time=5391
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=3c56ccf5220cb54ea816322eaa63640d
# engine=15545
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-20 01:29:15
# local_time=2013-10-20 03:29:15 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 3871040 158942427 0 0
# compatibility_mode=5893 16776574 100 94 8672283 133862405 0 0
# scanned=887404
# found=1
# cleaned=0
# scan_time=65063
sh=CCEE64ECF98B121BE5C86704E5CBEC620676035D ft=0 fh=0000000000000000 vn="probably a variant of Java/Exploit.Agent.OBF trojan" ac=I fn="C:\Users\42\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\167dcad5-5f85babd"
Code:
ATTFilter Results of screen317's Security Check version 0.99.74 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 45 Java SE Development Kit 7 Update 10 Java SE Development Kit 7 Update 25 Java SE Development Kit 7 Update 45 Java version out of Date! Adobe Flash Player 11.9.900.117 Adobe Reader 11.0.05 Mozilla Firefox (24.0) Mozilla Thunderbird (24.0.1) ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-10-2013
Ran by 42 (administrator) on KEKSDOSE on 20-10-2013 12:58:07
Running from C:\Users\42\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\System Control Manager\MSIService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe
() C:\Bin\Spiele\SFBot_v2.1.0\sfBot.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
(Raptr, Inc) C:\PROGRA~2\Raptr\raptr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Raptr, Inc) C:\PROGRA~2\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Microsoft Corporation) C:\Windows\system32\LogonUI.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1825064 2009-08-28] (Synaptics Incorporated)
HKLM\...\Run: [snp2std] - C:\Windows\vsnp2std.exe
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
Winlogon\Notify\ScCertProp: C:\WINDOWS\SysWOW64\Explorer.exe (Microsoft Corporation)
HKCU\...\Run: [Raptr] - C:\PROGRA~2\Raptr\raptrstub.exe [55360 2013-09-28] (Raptr, Inc)
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [RoccatKone+] - C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [552960 2011-07-12] (ROCCAT GmbH)
HKLM-x32\...\Run: [MGSysCtrl] - C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe [2244608 2009-12-04] (Micro-Star International Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sfBot.lnk
ShortcutTarget: sfBot.lnk -> C:\Bin\Spiele\SFBot_v2.1.0\sfBot.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3091DD3CE54FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\MP3 Skype Recorder\Skype4COM.dll (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.1.13 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.1.13 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=15.0.1.13 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\42\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: GFACE Experience Plugin - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\cryenginebrowserplugin@crytek.com
FF Extension: HTTPS-Everywhere - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\https-everywhere@eff.org
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\42\AppData\Roaming\Mozilla\Firefox\Profiles\gicp8v6o.Nightly\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi
FF Extension: Edit Config Files [de] - C:\Program Files (x86)\Mozilla Firefox\extensions\EditConfigFiles_1.7.5_fx+tb_de-DE
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-18] (Adobe Systems)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4145600 2012-06-20] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-03] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [28504 2012-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-22] (DT Soft Ltd)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2012-01-24] (Turtle Entertainment GmbH)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-03-27] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-03-27] (Windows (R) Server 2003 DDK provider)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
R0 johci; C:\Windows\System32\DRIVERS\johci.sys [20392 2009-09-21] (JMicron )
S3 mod7764; C:\Windows\System32\DRIVERS\mod77-64.sys [913888 2010-03-12] (DiBcom SA)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2004-12-30] (INCA Internet Co., Ltd.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 SCL01164; C:\Windows\System32\DRIVERS\SCL01164.sys [72320 2010-05-07] (SCM Microsystems Inc.)
S3 SNP2STD; C:\Windows\System32\DRIVERS\snp2sxp.sys [12324224 2007-01-20] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-02-01] (Anchorfree Inc.)
S3 USBAU; C:\Windows\System32\drivers\CM10264.sys [1306624 2009-09-08] (C-Media Electronics Inc)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [294232 2011-10-28] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 XENfiltv; C:\Windows\System32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
S3 ALSysIO; \??\C:\Users\42\AppData\Local\Temp\ALSysIO64.sys [x]
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 clwvd; system32\DRIVERS\clwvd.sys [x]
S3 connctfy; system32\DRIVERS\connctfy.sys [x]
S3 connctfyMP; system32\DRIVERS\connctfy.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
S3 slb; \??\C:\Bin\Spiele\AeriaGames\ScarletBlade\avital\scarlb64.sys [x]
S3 X6va005; \??\C:\Users\42\AppData\Local\Temp\00560D.tmp [x]
S3 X6va006; \??\C:\Users\42\AppData\Local\Temp\00656EB.tmp [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-20 12:57 - 2013-10-20 12:57 - 01954548 _____ (Farbar) C:\Users\42\Desktop\FRST64.exe
2013-10-20 11:31 - 2013-10-20 11:30 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-20 11:31 - 2013-10-20 11:30 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-20 11:31 - 2013-10-20 11:30 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-20 11:31 - 2013-10-20 11:30 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-10-20 11:30 - 2013-10-20 11:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-10-20 02:53 - 2013-10-20 02:57 - 664158208 _____ C:\Users\42\Downloads\VS2013_RTM_WebExp_DEU.iso
2013-10-20 02:50 - 2013-10-20 02:50 - 43777167 _____ C:\Users\42\Downloads\gametools_setup.exe
2013-10-20 02:46 - 2013-10-20 02:46 - 51182360 _____ (Microsoft Corporation) C:\Users\42\Downloads\XNAGS40_setup.exe
2013-10-19 09:21 - 2013-10-19 09:21 - 00000000 ____D C:\ProgramData\Oracle
2013-10-19 09:20 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-19 09:20 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-19 09:20 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-19 09:20 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-19 09:18 - 2013-10-19 09:20 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-19 09:04 - 2013-10-19 09:04 - 00003334 _____ C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-19 09:04 - 2013-10-19 09:04 - 00003194 _____ C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-19 08:59 - 2013-10-19 09:00 - 01415272 _____ C:\Windows\Minidump\101913-94879-01.dmp
2013-10-18 22:37 - 2013-10-18 22:37 - 00000000 ____D C:\Users\42\Documents\Square Enix
2013-10-18 13:59 - 2013-10-18 13:59 - 00000000 ____D C:\Users\42\AppData\Local\Desura
2013-10-18 13:30 - 2013-10-18 13:30 - 00000000 ____D C:\ProgramData\Desura
2013-10-18 13:29 - 2013-10-18 16:27 - 00000000 ____D C:\Program Files (x86)\Desura
2013-10-18 13:29 - 2013-10-18 13:29 - 01252424 _____ C:\Users\42\Downloads\DesuraInstaller.exe
2013-10-18 13:13 - 2013-10-18 13:13 - 01467128 _____ C:\Users\42\Downloads\SystemCheck_deDE(1).exe
2013-10-17 14:10 - 2013-10-17 14:10 - 00020871 _____ C:\Users\42\AppData\Local\recently-used.xbel
2013-10-15 22:52 - 2013-10-15 22:52 - 00000000 ____D C:\Windows\ERUNT
2013-10-15 22:10 - 2013-10-15 22:10 - 00000000 ____D C:\Users\42\AppData\Roaming\Malwarebytes
2013-10-15 22:09 - 2013-10-15 22:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-15 22:09 - 2013-10-15 22:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 22:09 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-15 12:29 - 2013-10-15 13:08 - 00000000 ____D C:\Qoobox
2013-10-15 12:29 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-10-15 12:29 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-10-15 12:29 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-10-15 12:29 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-10-15 12:28 - 2013-10-15 13:03 - 00000000 ____D C:\Windows\erdnt
2013-10-14 21:35 - 2013-10-14 21:52 - 00000000 ____D C:\Users\42\AppData\Local\LogicCircuit
2013-10-14 21:10 - 2013-10-14 21:10 - 00000000 ____D C:\Users\42\AppData\Local\Yenka
2013-10-14 21:05 - 2013-10-14 21:07 - 00000000 ____D C:\Program Files (x86)\Yenka
2013-10-14 19:23 - 2013-10-14 19:23 - 00000000 ____D C:\FRST
2013-10-14 14:28 - 2013-10-14 14:28 - 01308744 _____ C:\Users\42\Downloads\Rainmeter-3.0.exe
2013-10-11 15:33 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-11 15:09 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-11 15:09 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-11 02:12 - 2013-10-11 03:05 - 00000000 ____D C:\Program Files (x86)\Magic Workstation
2013-10-10 19:59 - 2013-10-10 19:59 - 00000000 ____D C:\found.003
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 01:05 - 2013-10-10 01:05 - 03740128 _____ (foobar2000.org) C:\Users\42\Downloads\foobar2000_v1.2.9.exe
2013-10-09 23:36 - 2013-10-10 02:36 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-09 16:45 - 2013-10-09 16:45 - 00000000 ____D C:\Users\42\Documents\SavedGames
2013-10-09 16:38 - 2013-10-18 15:02 - 00000000 ____D C:\Program Files (x86)\One Finger Death Punch
2013-10-09 15:10 - 2013-10-09 15:10 - 00000000 ____D C:\Users\42\Documents\Dungeon Siege
2013-10-03 17:37 - 2013-10-03 17:38 - 05309836 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20121006.exe
2013-10-02 22:22 - 2013-10-02 22:23 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 15:55 - 2013-10-02 15:55 - 00061443 _____ C:\Windows\SysWOW64\CCCInstall_201310021555318539.log
2013-10-02 15:31 - 2013-10-02 15:31 - 273848352 _____ C:\Users\42\Downloads\Gliga_Catalog_2008.pdf.part
2013-10-02 02:24 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-02 02:24 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-02 02:24 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-02 02:24 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-02 02:23 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-02 02:23 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-02 02:23 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-02 02:23 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-02 02:23 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-02 02:23 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-02 02:23 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-02 02:23 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-02 02:23 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-02 02:23 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-02 02:23 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-02 02:23 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-02 00:25 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-02 00:25 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-02 00:25 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-10-02 00:25 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-10-02 00:25 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-10-02 00:25 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-10-02 00:25 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-02 00:25 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-02 00:25 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-10-02 00:25 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-02 00:25 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-02 00:25 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-10-02 00:25 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-10-02 00:25 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-02 00:24 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-02 00:24 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-10-02 00:24 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-02 00:24 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-02 00:24 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-02 00:24 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-10-02 00:24 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-10-02 00:24 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-02 00:24 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-02 00:24 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-02 00:24 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-02 00:03 - 2013-10-02 00:03 - 01189552 _____ (AMD Inc.) C:\Users\42\Downloads\catalyst_mobility_64-bit_util(3).exe
2013-10-01 15:30 - 2013-10-01 15:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-27 23:07 - 2013-09-27 23:07 - 00212256 _____ C:\Users\42\Downloads\raptr_installer(1).exe
2013-09-27 18:03 - 2013-09-27 18:03 - 00000000 ____D C:\Users\42\AppData\Roaming\Guild Wars 2
2013-09-27 16:15 - 2013-09-27 16:15 - 00050964 _____ C:\Users\42\Downloads\razer___regular___font_by_shikkyaku_yuki-d35z4x8.ttf
2013-09-26 14:00 - 2013-09-26 20:31 - 00000000 ____D C:\ProgramData\GFACE
2013-09-23 15:21 - 2013-09-23 15:21 - 00347424 _____ (Microsoft Corporation) C:\Users\42\Downloads\MicrosoftFixit.Devices.Run.exe
2013-09-21 05:27 - 2013-09-21 05:27 - 00000000 ____D C:\Program Files (x86)\Duty Calls
2013-09-21 02:33 - 2013-09-21 02:33 - 00000000 ____D C:\Program Files (x86)\Hex-Editor MX
==================== One Month Modified Files and Folders =======
2013-10-20 12:57 - 2013-10-20 12:57 - 01954548 _____ (Farbar) C:\Users\42\Desktop\FRST64.exe
2013-10-20 12:54 - 2011-09-26 15:12 - 00000000 ____D C:\Users\42\AppData\Roaming\foobar2000
2013-10-20 12:52 - 2012-06-06 17:44 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-20 12:51 - 2011-09-29 19:39 - 00000000 ____D C:\Users\42\AppData\Local\Adobe
2013-10-20 12:36 - 2013-07-14 03:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-20 12:28 - 2011-09-26 14:28 - 00000000 ____D C:\ProgramData\Adobe
2013-10-20 12:27 - 2011-09-26 14:37 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-10-20 12:23 - 2012-07-12 17:05 - 14144449 _____ C:\Windows\setupact.log
2013-10-20 11:50 - 2013-03-06 17:28 - 00000000 ____D C:\Program Files\Opera x64
2013-10-20 11:49 - 2011-10-29 14:56 - 00000000 ____D C:\Users\42\AppData\Roaming\Opera
2013-10-20 11:49 - 2011-10-29 14:56 - 00000000 ____D C:\Users\42\AppData\Local\Opera
2013-10-20 11:49 - 2011-10-29 14:56 - 00000000 ____D C:\Program Files (x86)\Opera
2013-10-20 11:46 - 2013-08-20 17:17 - 00000000 ____D C:\Users\42\AppData\Roaming\Opera Software
2013-10-20 11:46 - 2013-08-20 17:17 - 00000000 ____D C:\Users\42\AppData\Local\Opera Software
2013-10-20 11:35 - 2013-10-20 11:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-10-20 11:35 - 2012-12-24 17:35 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-20 11:35 - 2012-04-25 22:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-20 11:30 - 2013-10-20 11:31 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-20 11:30 - 2013-10-20 11:31 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-20 11:30 - 2013-10-20 11:31 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-20 11:30 - 2013-10-20 11:31 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-10-20 11:30 - 2012-12-24 17:36 - 00000000 ____D C:\Program Files\Java
2013-10-20 11:27 - 2013-08-20 17:17 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-10-20 10:18 - 2011-10-10 13:46 - 01699114 _____ C:\Windows\WindowsUpdate.log
2013-10-20 09:03 - 2013-09-02 17:40 - 00000000 ____D C:\Users\42\AppData\Roaming\Raptr
2013-10-20 02:57 - 2013-10-20 02:53 - 664158208 _____ C:\Users\42\Downloads\VS2013_RTM_WebExp_DEU.iso
2013-10-20 02:50 - 2013-10-20 02:50 - 43777167 _____ C:\Users\42\Downloads\gametools_setup.exe
2013-10-20 02:46 - 2013-10-20 02:46 - 51182360 _____ (Microsoft Corporation) C:\Users\42\Downloads\XNAGS40_setup.exe
2013-10-20 02:44 - 2009-07-14 19:58 - 00703372 _____ C:\Windows\system32\perfh007.dat
2013-10-20 02:44 - 2009-07-14 19:58 - 00151806 _____ C:\Windows\system32\perfc007.dat
2013-10-20 02:44 - 2009-07-14 07:13 - 01627486 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-20 01:11 - 2013-08-05 05:55 - 00000000 ____D C:\Program Files (x86)\Dragon's Prophet
2013-10-19 23:52 - 2012-06-06 17:44 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-19 09:21 - 2013-10-19 09:21 - 00000000 ____D C:\ProgramData\Oracle
2013-10-19 09:20 - 2013-10-19 09:18 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-19 09:10 - 2009-07-14 06:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-19 09:09 - 2009-07-14 06:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-19 09:05 - 2011-12-03 19:53 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn Hamachi
2013-10-19 09:04 - 2013-10-19 09:04 - 00003334 _____ C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-19 09:04 - 2013-10-19 09:04 - 00003194 _____ C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1664565104-910828770-3124941875-1001
2013-10-19 09:00 - 2013-10-19 08:59 - 01415272 _____ C:\Windows\Minidump\101913-94879-01.dmp
2013-10-19 09:00 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-19 08:59 - 2012-08-09 21:10 - 772036168 _____ C:\Windows\MEMORY.DMP
2013-10-19 08:59 - 2011-11-22 16:42 - 00000000 ____D C:\Windows\Minidump
2013-10-19 08:47 - 2011-09-26 14:40 - 00000000 ____D C:\Users\42\AppData\Roaming\Skype
2013-10-19 01:46 - 2011-11-03 21:47 - 00000000 ____D C:\Users\42\AppData\Roaming\TS3Client
2013-10-18 22:37 - 2013-10-18 22:37 - 00000000 ____D C:\Users\42\Documents\Square Enix
2013-10-18 22:37 - 2012-12-17 18:37 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-18 18:57 - 2012-03-19 16:29 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-10-18 18:57 - 2012-03-19 16:29 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-10-18 16:39 - 2011-09-30 13:07 - 00814625 _____ C:\Windows\DirectX.log
2013-10-18 16:36 - 2012-04-13 20:30 - 00000000 ____D C:\Users\42\AppData\Roaming\vlc
2013-10-18 16:27 - 2013-10-18 13:29 - 00000000 ____D C:\Program Files (x86)\Desura
2013-10-18 15:02 - 2013-10-09 16:38 - 00000000 ____D C:\Program Files (x86)\One Finger Death Punch
2013-10-18 13:59 - 2013-10-18 13:59 - 00000000 ____D C:\Users\42\AppData\Local\Desura
2013-10-18 13:30 - 2013-10-18 13:30 - 00000000 ____D C:\ProgramData\Desura
2013-10-18 13:29 - 2013-10-18 13:29 - 01252424 _____ C:\Users\42\Downloads\DesuraInstaller.exe
2013-10-18 13:13 - 2013-10-18 13:13 - 01467128 _____ C:\Users\42\Downloads\SystemCheck_deDE(1).exe
2013-10-17 23:47 - 2012-06-06 17:44 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-17 23:47 - 2012-06-06 17:44 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-17 15:24 - 2011-09-30 17:11 - 00000000 ____D C:\Users\42\AppData\Local\Paint.NET
2013-10-17 14:10 - 2013-10-17 14:10 - 00020871 _____ C:\Users\42\AppData\Local\recently-used.xbel
2013-10-17 14:10 - 2012-05-10 18:56 - 00000000 ____D C:\Users\42\.gimp-2.8
2013-10-16 12:49 - 2012-07-04 23:10 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-15 22:52 - 2013-10-15 22:52 - 00000000 ____D C:\Windows\ERUNT
2013-10-15 22:40 - 2013-09-12 22:06 - 00000000 ____D C:\AdwCleaner
2013-10-15 22:29 - 2011-09-26 07:40 - 02144622 _____ C:\Windows\PFRO.log
2013-10-15 22:25 - 2013-05-03 16:13 - 00000000 ____D C:\Users\42\AppData\Local\Apps\2.0
2013-10-15 22:10 - 2013-10-15 22:10 - 00000000 ____D C:\Users\42\AppData\Roaming\Malwarebytes
2013-10-15 22:09 - 2013-10-15 22:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-15 22:09 - 2013-10-15 22:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 21:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-15 13:48 - 2013-09-02 17:40 - 00000000 ____D C:\Program Files (x86)\Raptr
2013-10-15 13:08 - 2013-10-15 12:29 - 00000000 ____D C:\Qoobox
2013-10-15 13:07 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-10-15 13:03 - 2013-10-15 12:28 - 00000000 ____D C:\Windows\erdnt
2013-10-15 12:53 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-10-14 21:52 - 2013-10-14 21:35 - 00000000 ____D C:\Users\42\AppData\Local\LogicCircuit
2013-10-14 21:10 - 2013-10-14 21:10 - 00000000 ____D C:\Users\42\AppData\Local\Yenka
2013-10-14 21:07 - 2013-10-14 21:05 - 00000000 ____D C:\Program Files (x86)\Yenka
2013-10-14 20:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-14 19:23 - 2013-10-14 19:23 - 00000000 ____D C:\FRST
2013-10-14 17:02 - 2011-09-26 15:07 - 00000000 ____D C:\Program Files (x86)\foobar2000
2013-10-14 14:40 - 2013-03-27 16:09 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-14 14:40 - 2012-08-06 21:34 - 00000000 ____D C:\Program Files\Rainmeter
2013-10-14 14:28 - 2013-10-14 14:28 - 01308744 _____ C:\Users\42\Downloads\Rainmeter-3.0.exe
2013-10-14 01:01 - 2013-09-02 19:56 - 00000000 ____D C:\CrashReport
2013-10-13 23:10 - 2011-10-07 13:14 - 00000000 ____D C:\Users\42\AppData\Roaming\SFBot
2013-10-12 00:36 - 2012-12-25 01:38 - 00000372 _____ C:\Windows\system32\TeamViewer8_Hooks.log
2013-10-12 00:35 - 2012-07-18 11:52 - 00000000 ____D C:\Users\42\AppData\Roaming\TeamViewer
2013-10-11 15:48 - 2013-07-29 12:32 - 00000000 ____D C:\Windows\system32\MRT
2013-10-11 15:41 - 2011-10-15 11:27 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-11 03:05 - 2013-10-11 02:12 - 00000000 ____D C:\Program Files (x86)\Magic Workstation
2013-10-10 19:59 - 2013-10-10 19:59 - 00000000 ____D C:\found.003
2013-10-10 13:34 - 2011-10-21 22:52 - 00007618 _____ C:\Users\42\AppData\Local\Resmon.ResmonCfg
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\Users\42\AppData\Local\LogMeIn
2013-10-10 13:20 - 2013-10-10 13:20 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 02:59 - 2011-10-29 12:59 - 00000000 ____D C:\Users\42\AppData\Roaming\Audacity
2013-10-10 02:36 - 2013-10-09 23:36 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-10 02:36 - 2013-07-14 03:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-10 02:36 - 2012-03-30 10:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 02:36 - 2011-09-26 14:20 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-10 02:36 - 2011-09-25 23:56 - 00000000 ___RD C:\Bin
2013-10-10 02:34 - 2012-10-10 01:15 - 00000000 ____D C:\Program Files (x86)\freac
2013-10-10 01:51 - 2013-02-04 00:20 - 00000000 ____D C:\Users\42\AppData\Roaming\NoNameScript
2013-10-10 01:05 - 2013-10-10 01:05 - 03740128 _____ (foobar2000.org) C:\Users\42\Downloads\foobar2000_v1.2.9.exe
2013-10-09 23:30 - 2013-01-27 01:10 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-09 23:30 - 2011-09-26 14:40 - 00000000 ____D C:\ProgramData\Skype
2013-10-09 16:45 - 2013-10-09 16:45 - 00000000 ____D C:\Users\42\Documents\SavedGames
2013-10-09 15:10 - 2013-10-09 15:10 - 00000000 ____D C:\Users\42\Documents\Dungeon Siege
2013-10-08 07:50 - 2013-10-19 09:20 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-08 07:46 - 2013-10-19 09:20 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-08 07:46 - 2013-10-19 09:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-08 07:46 - 2013-10-19 09:20 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-05 16:14 - 2011-09-30 13:23 - 00000600 _____ C:\Users\42\PUTTY.RND
2013-10-03 17:38 - 2013-10-03 17:37 - 05309836 _____ ( ) C:\Users\42\Downloads\mtgpicssetup20121006.exe
2013-10-03 00:01 - 2011-09-30 16:59 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-02 22:23 - 2013-10-02 22:22 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 15:55 - 2013-10-02 15:55 - 00061443 _____ C:\Windows\SysWOW64\CCCInstall_201310021555318539.log
2013-10-02 15:41 - 2012-03-04 22:15 - 01605714 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-02 15:31 - 2013-10-02 15:31 - 273848352 _____ C:\Users\42\Downloads\Gliga_Catalog_2008.pdf.part
2013-10-02 13:54 - 2011-11-03 21:45 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-10-02 13:52 - 2011-09-26 15:46 - 00000000 ____D C:\Users\42\AppData\Local\Mozilla
2013-10-02 13:40 - 2011-09-25 22:23 - 00000000 ___RD C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-02 13:40 - 2011-09-25 22:23 - 00000000 ___RD C:\Users\42\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-02 13:35 - 2009-07-14 06:45 - 04874880 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-02 00:03 - 2013-10-02 00:03 - 01189552 _____ (AMD Inc.) C:\Users\42\Downloads\catalyst_mobility_64-bit_util(3).exe
2013-10-01 15:30 - 2013-10-01 15:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 21:40 - 2013-09-06 17:43 - 00000000 ____D C:\Users\42\AppData\Roaming\NaviFirmPlus
2013-09-27 23:07 - 2013-09-27 23:07 - 00212256 _____ C:\Users\42\Downloads\raptr_installer(1).exe
2013-09-27 18:03 - 2013-09-27 18:03 - 00000000 ____D C:\Users\42\AppData\Roaming\Guild Wars 2
2013-09-27 18:03 - 2013-02-16 18:50 - 00000000 ____D C:\Users\42\Documents\Guild Wars 2
2013-09-27 16:58 - 2011-10-10 13:55 - 00071840 _____ C:\Users\42\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-27 16:15 - 2013-09-27 16:15 - 00050964 _____ C:\Users\42\Downloads\razer___regular___font_by_shikkyaku_yuki-d35z4x8.ttf
2013-09-26 20:31 - 2013-09-26 14:00 - 00000000 ____D C:\ProgramData\GFACE
2013-09-26 20:28 - 2012-09-25 23:15 - 00000000 ____D C:\Users\42\AppData\Roaming\Mp3tag
2013-09-23 16:07 - 2013-09-17 17:41 - 00000000 ____D C:\Program Files (x86)\osu!
2013-09-23 15:21 - 2013-09-23 15:21 - 00347424 _____ (Microsoft Corporation) C:\Users\42\Downloads\MicrosoftFixit.Devices.Run.exe
2013-09-21 05:27 - 2013-09-21 05:27 - 00000000 ____D C:\Program Files (x86)\Duty Calls
2013-09-21 02:33 - 2013-09-21 02:33 - 00000000 ____D C:\Program Files (x86)\Hex-Editor MX
2013-09-21 01:03 - 2011-09-26 14:20 - 00000000 ____D C:\Users\42\AppData\Roaming\Adobe
Files to move or delete:
====================
C:\Users\42\AppData\Roaming\version.ini
Some content of TEMP:
====================
C:\Users\42\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\42\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-11 20:43
==================== End Of Log ============================
Symptome habe ich in letzter Zeit selbst kaum noch bemerkt, jedoch scheint der Rechner sich vor kurzem beim Ausführen aus dem Ruhezustand mal wieder aufgehängt zu haben, da als ich zum Laptop ging, dieser mit der Meldung "Nach unerwartetem Herunterfahren wieder ausgeführt." neu gestartet war. Die Meldung von Windows zu Win32/Adload.DA ist auch nicht mehr vorhanden. Gruß, Midrask |
|
20.10.2013, 17:44
| #12 |
| /// the machine /// TB-Ausbilder | Win32/Adload.DA & viele verschiedene Symptome Java updaten. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.10.2013, 20:36
| #13 |
| | Win32/Adload.DA & viele verschiedene Symptome Soweit ich das sehe ist mein Java schon auf dem neuesten Stand. Kurz zu TFC: Löscht dieses auch den Download-Ordner oder wirklich nur die generellen temporären Verzeichnisse? DelFix werde ich so direkt nicht anwenden, ich lösche vorhandene Reste der verwendeten Tools lieber selbst, da DelFix mir zu viel löscht und umstellt, was ich so schon von Haus aus selbst erstellt bzw. eingestellt habe. Danke für Deine Mühe und die Hilfe! Schön sauber hier...  Gruß, Midrask |
|
21.10.2013, 11:06
| #14 |
| /// the machine /// TB-Ausbilder | Win32/Adload.DA & viele verschiedene Symptome Der löscht nur temp-Sachen. Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win32/Adload.DA & viele verschiedene Symptome |
| antivirus, avast, brauche, fehlermeldung, funktioniert, hängt, neue, nicht mehr, probleme, programme, pup.optional.babylon.a, pup.optional.opencandy, sekunden, trojan-downloader, webseiten, win32/adload.da, win32/adload.da-virus, windows 7 |
WARNUNG an die MITLESER: 
Linear-Darstellung
