| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.10.2013, 20:00
| #1 |
 |  PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Liebes Trojaner-Board, ich hoffe auf eine Lösung meines Problems und danke Ihnen vorab, falls Sie sich meinem Problem annehmen. Zuerst mein System: Mainboard: MSI 970A-G45 (AMD AM3+) CPU: AMD FX-6100 Bulldozr (3,3 GHz) GPU: MSI GTX560 Ti Twin Frozr II DX11 2GB GDDR5 RAM: Crucial 8GB DDR3-1866 Netzteil: Arctic 550W Netzteil 80Plus OS: Windows 7 Professional 64-Bit Festplatten: 1x SSD 60GB, 1x HDD 1TB, 1x HDD 2TB Wie im Titel erwähnt, friert mein Bild des öfteren ein. Dies kann nur kurz sein, aber auch länger andauern. Beim Ersteren muss ich danach aber den PC neustarten, da ich mit diversen Problemen zu kämpfen habe, oft darauffolgende Freezes. So auch, dass sich mein Mauszeiger verändert in eine Art 8-Bit-Variante mit blauen und roten "Schatten" (sehr komisch wie ich anmerken darf). Falls ein permanentes Einfrieren eintritt, hilft nur noch der Reset-Knopf an meinem PC. An sich läuft der PC weiter und macht keine auffälligen Geräusche, manchmal funktioniert sogar noch Skype nebenbei (obwohl das sogar fast immer funktioniert, selbst bei Bluescreens  )Grafikkartentreiber-Updates haben bisher nichts gebracht. Die CPU-Auslastung ist sehr gering und die Temperaturen im PC Standardwerte, da dieses Problem meist beim Nutzen des Interne-Browsers auftritt. Jedoch hat ein Browserwechsel nichts bewirkt. Ich hoffe nun auf Resonanz Ihrerseits und danke Ihnen erneut und vorab für die Hilfe bei meinem Problem. Mit freundlichen Grüßen, iTelix |
|
20.10.2013, 06:46
| #2 |
| /// the machine /// TB-Ausbilder    | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
20.10.2013, 09:27
| #3 |
| | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Danke für die schnelle Antwort!
__________________ Hier die .txt's: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-10-2013
Ran by Felix (administrator) on FELIX-PC on 20-10-2013 10:21:50
Running from C:\Users\Felix\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) D:\Felix\Programme\Hamachi\hamachi-2.exe
(LogMeIn, Inc.) D:\Felix\Programme\Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7302\Monitor.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() D:\Felix\Programme\puush\puush.exe
(Valve Corporation) D:\Spiele\Steam\Steam.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDWebCam.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [PAC7302_Monitor] - C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-27] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
HKCU\...\Run: [B144E092EADCA0B5E85681614B171BAF8D0F881F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752 2013-10-09] (Google Inc.)
HKCU\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Felix\AppData\Local\Temp\kyvhgctkakiuavpeb.exe <===== ATTENTION
HKCU\...\Run: [puush] - D:\Felix\Programme\puush\puush.exe [567880 2013-08-19] ()
HKCU\...\Run: [Steam] - D:\Spiele\Steam\steam.exe [1813928 2013-10-09] (Valve Corporation)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x952CA7BB21E8CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - No File
URLSearchHook: (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
URLSearchHook: (No Name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (YouTube Smart Pause) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcflkimagfnicklojfonbbcppnikogih\1.1.9_0
CHR Extension: (AdBlock) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (Looper for YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggpfpnahkgpnindfkdncknoldgnccdg\4.9.6_0
CHR Extension: (SmallringFX DarkBlue Theme) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfijmgohofmpjlcgmjplbpmkpchdhpk\1.7_0
CHR Extension: (Save as PDF) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdjmbiefanbdgnkcikhllpmjnnllbbc\1.7_0
CHR Extension: (Skype Click to Call) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0
CHR Extension: (FlashControl) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe\3.3.15_0
CHR Extension: (Norton Identity Protection) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0
CHR Extension: (Downloads) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngbcgifdaopbfflfhbcfeomijfbbcadi\1.5_0
CHR Extension: (dict-cc) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknonnojlmhnmjhpeokdbeineeajcemh\1.6.88_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (SwiftPreview) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nphfkpgklibhnhgegdblhnhicgfginnj\2.2.4_0
CHR Extension: (YouTube Unblocker) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.5_0
CHR Extension: (ScriptSafe) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0
CHR Extension: (Gmail) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-07-04] (Advanced Micro Devices, Inc.)
R2 Hamachi2Svc; D:\Felix\Programme\Hamachi\hamachi-2.exe [2746704 2013-10-01] (LogMeIn Inc.)
S3 MatSvc; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [343856 2011-06-13] (Microsoft Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-29] ()
S3 TunngleService; D:\Felix\Programme\Tunngle\TnglCtrl.exe [759192 2013-09-03] (Tunngle.net GmbH)
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-02] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-02] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-17] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-17] (Symantec Corporation)
S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)
S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-09-02] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-09-02] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-09-02] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-09-02] (Symantec Corporation)
S3 NTIOLib_1_0_4; D:\Felix\Programme\Live Update 5\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_4; D:\Felix\Programme\Live Update 5\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7693v1B0\NTIOLib_X64.sys [11888 2011-01-06] (MSI)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7693v1B0\NTIOLib_X64.sys [11888 2011-01-06] (MSI)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
R3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527872 2007-11-08] (PixArt Imaging Inc.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 MSI_MSIBIOS_010507; \??\D:\Felix\Programme\MSI\Live Update 5\msibios64_100507.sys [x]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-20 10:21 - 2013-10-20 10:21 - 00000000 ____D C:\FRST
2013-10-20 10:20 - 2013-10-20 10:20 - 01954548 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2013-10-18 20:20 - 2013-10-18 22:43 - 00000000 ____D C:\Users\Felix\Documents\Endless Space
2013-10-18 19:48 - 2013-10-18 19:49 - 00018473 _____ C:\Windows\DirectX.log
2013-10-13 23:23 - 2013-10-13 23:23 - 00000891 _____ C:\Users\Felix\Desktop\Formel-Editor-Tutorial.lnk
2013-10-13 23:23 - 2013-10-13 23:23 - 00000825 _____ C:\Users\Felix\Desktop\Formel-Editor.lnk
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-09 16:44 - 2013-09-22 17:43 - 17833984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 16:44 - 2013-09-22 17:01 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 16:44 - 2013-09-22 16:42 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 16:44 - 2013-09-22 16:36 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 16:44 - 2013-09-22 16:33 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-09 16:44 - 2013-09-22 16:33 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 16:44 - 2013-09-22 16:30 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-09 16:44 - 2013-09-22 16:27 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 16:44 - 2013-09-22 16:23 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-09 16:44 - 2013-09-22 16:22 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 16:44 - 2013-09-22 16:21 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-09 16:44 - 2013-09-22 16:19 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 16:44 - 2013-09-22 16:19 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 16:44 - 2013-09-22 16:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-09 16:44 - 2013-09-22 16:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 16:44 - 2013-09-22 16:07 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 16:44 - 2013-09-22 12:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 16:44 - 2013-09-22 12:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 16:44 - 2013-09-22 12:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 16:44 - 2013-09-22 12:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-10-09 16:44 - 2013-09-22 12:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 16:44 - 2013-09-22 12:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 16:44 - 2013-09-22 12:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-10-09 16:44 - 2013-09-22 12:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 16:44 - 2013-09-22 12:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-10-09 16:44 - 2013-09-22 12:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 16:44 - 2013-09-22 12:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-10-09 16:44 - 2013-09-22 12:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 16:44 - 2013-09-22 12:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 16:44 - 2013-09-22 12:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 16:44 - 2013-09-22 12:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-10-09 16:44 - 2013-09-22 11:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 16:37 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 16:37 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 16:37 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 16:37 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 16:37 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 16:37 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 16:37 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 16:37 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 16:37 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 16:37 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 16:37 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 16:37 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 16:37 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 16:37 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 16:37 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 16:37 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 16:37 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 16:37 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 16:37 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 16:37 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 16:37 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 16:37 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 16:37 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 16:37 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 16:37 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 16:37 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 16:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 16:37 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 16:37 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 16:37 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 16:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 16:37 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 16:37 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 16:37 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 16:37 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 16:37 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 16:37 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 16:37 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 16:37 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 16:37 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 16:37 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 16:37 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 16:37 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 16:37 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 16:37 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 16:36 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 16:36 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-02 14:08 - 2013-10-08 14:37 - 00001464 _____ C:\Windows\PFRO.log
2013-10-01 17:04 - 2013-10-01 17:04 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-10-01 17:04 - 2012-02-12 16:50 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-10-01 17:04 - 2012-02-11 23:22 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-10-01 17:04 - 2012-01-31 04:05 - 00000000 ____D C:\Users\UpdatusUser\Desktop\extra Software
2013-10-01 17:04 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-01 17:04 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-01 17:03 - 2013-10-20 09:56 - 00005965 _____ C:\Windows\setupact.log
2013-10-01 17:03 - 2013-10-01 17:03 - 00000000 _____ C:\Windows\setuperr.log
2013-10-01 17:03 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-10-01 17:03 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-10-01 17:03 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-10-01 16:49 - 2013-10-01 16:49 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-01 16:49 - 2013-10-01 16:49 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-01 16:49 - 2013-10-01 16:49 - 00000000 ____D C:\Program Files\CCleaner
2013-10-01 16:25 - 2013-09-27 10:57 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 22925088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 18229224 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 15832920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 12528416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-10-01 16:25 - 2013-09-27 10:57 - 11345168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 11292144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 09480840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 09436544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 03130144 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 03121952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02945312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02745632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02682816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433140.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433140.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01239304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00654624 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00559904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-10-01 16:21 - 2013-10-01 16:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-10-01 16:20 - 2013-09-12 10:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-10-01 16:20 - 2013-09-12 10:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-10-01 16:20 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-10-01 16:20 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-10-01 15:58 - 2013-10-01 16:01 - 00000000 ____D C:\Users\Felix\Documents\Battlefield 4
2013-09-29 19:24 - 2013-09-29 19:24 - 00000813 _____ C:\Users\Public\Desktop\Battlefield 4™ Beta.lnk
2013-09-29 19:24 - 2013-09-29 19:24 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-29 14:21 - 2013-09-29 14:21 - 00000812 _____ C:\Users\Felix\Desktop\StarCitizen.lnk
2013-09-29 14:21 - 2013-09-29 14:21 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2013-09-27 02:37 - 2013-09-27 02:37 - 00587040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-24 19:49 - 2013-09-24 19:49 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Guild Wars 2
2013-09-22 22:18 - 2013-09-22 22:18 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Doublefine
==================== One Month Modified Files and Folders =======
2013-10-20 10:21 - 2013-10-20 10:21 - 00000000 ____D C:\FRST
2013-10-20 10:20 - 2013-10-20 10:20 - 01954548 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2013-10-20 10:12 - 2013-07-19 20:33 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-20 10:12 - 2012-02-10 20:50 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Skype
2013-10-20 10:03 - 2009-07-14 06:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-20 10:03 - 2009-07-14 06:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-20 10:00 - 2012-01-30 11:31 - 01557602 _____ C:\Windows\WindowsUpdate.log
2013-10-20 10:00 - 2011-04-12 09:43 - 00707462 _____ C:\Windows\system32\perfh007.dat
2013-10-20 10:00 - 2011-04-12 09:43 - 00153054 _____ C:\Windows\system32\perfc007.dat
2013-10-20 10:00 - 2009-07-14 07:13 - 01642812 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-20 09:56 - 2013-10-01 17:03 - 00005965 _____ C:\Windows\setupact.log
2013-10-20 09:56 - 2012-05-28 16:43 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-20 09:56 - 2012-01-31 04:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-20 09:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-20 01:49 - 2013-07-19 20:33 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-20 01:28 - 2012-04-02 14:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-19 16:30 - 2012-03-26 21:23 - 00000000 ____D C:\Users\Felix\AppData\Local\PMB Files
2013-10-19 16:29 - 2012-03-26 21:23 - 00000000 ____D C:\ProgramData\PMB Files
2013-10-19 15:04 - 2012-11-23 18:41 - 00000000 ____D C:\Users\Felix\AppData\Local\CrashDumps
2013-10-18 22:43 - 2013-10-18 20:20 - 00000000 ____D C:\Users\Felix\Documents\Endless Space
2013-10-18 19:49 - 2013-10-18 19:48 - 00018473 _____ C:\Windows\DirectX.log
2013-10-17 20:44 - 2013-07-19 20:33 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-17 20:44 - 2013-07-19 20:33 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-16 22:49 - 2013-07-19 20:34 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 23:23 - 2013-10-13 23:23 - 00000891 _____ C:\Users\Felix\Desktop\Formel-Editor-Tutorial.lnk
2013-10-13 23:23 - 2013-10-13 23:23 - 00000825 _____ C:\Users\Felix\Desktop\Formel-Editor.lnk
2013-10-13 17:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-12 08:35 - 2012-02-10 20:50 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-12 08:35 - 2012-02-10 20:50 - 00000000 ____D C:\ProgramData\Skype
2013-10-11 19:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-11 19:41 - 2013-03-19 20:56 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn Hamachi
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 23:47 - 2013-07-19 11:00 - 00000000 ____D C:\Users\Felix\Documents\Nexus Mod Manager
2013-10-10 23:47 - 2013-04-25 17:52 - 00000000 ____D C:\Users\Felix\AppData\Local\Skyrim
2013-10-10 16:28 - 2012-04-02 14:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 16:28 - 2012-04-02 14:48 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-10 16:28 - 2012-02-10 20:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 17:01 - 2013-06-09 11:24 - 04939648 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 17:00 - 2012-05-09 21:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-09 16:47 - 2012-02-12 16:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-09 16:45 - 2012-05-09 21:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 16:44 - 2012-12-16 23:22 - 01619770 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-09 16:41 - 2013-07-10 13:52 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 16:40 - 2012-02-11 11:39 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-08 14:37 - 2013-10-02 14:08 - 00001464 _____ C:\Windows\PFRO.log
2013-10-07 14:54 - 2012-02-10 23:59 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-01 17:05 - 2013-01-31 15:01 - 00000000 ____D C:\Users\Felix\AppData\Local\NVIDIA
2013-10-01 17:04 - 2013-10-01 17:04 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-10-01 17:04 - 2012-01-31 04:03 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-10-01 17:04 - 2012-01-31 04:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-10-01 17:04 - 2012-01-31 04:00 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-10-01 17:03 - 2013-10-01 17:03 - 00000000 _____ C:\Windows\setuperr.log
2013-10-01 16:52 - 2012-11-23 18:10 - 00000000 ____D C:\Windows\Minidump
2013-10-01 16:52 - 2012-01-30 11:23 - 00000000 ____D C:\Windows\Panther
2013-10-01 16:49 - 2013-10-01 16:49 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-01 16:49 - 2013-10-01 16:49 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-01 16:49 - 2013-10-01 16:49 - 00000000 ____D C:\Program Files\CCleaner
2013-10-01 16:21 - 2013-10-01 16:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-10-01 16:01 - 2013-10-01 15:58 - 00000000 ____D C:\Users\Felix\Documents\Battlefield 4
2013-09-29 19:24 - 2013-09-29 19:24 - 00000813 _____ C:\Users\Public\Desktop\Battlefield 4™ Beta.lnk
2013-09-29 19:24 - 2013-09-29 19:24 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-29 19:24 - 2012-02-11 01:25 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-09-29 19:24 - 2012-02-11 01:12 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-09-29 19:24 - 2012-02-11 01:12 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-09-29 19:24 - 2012-02-11 01:12 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-09-29 14:21 - 2013-09-29 14:21 - 00000812 _____ C:\Users\Felix\Desktop\StarCitizen.lnk
2013-09-29 14:21 - 2013-09-29 14:21 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2013-09-29 14:21 - 2012-08-22 18:07 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-09-27 10:57 - 2013-10-01 16:25 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 22925088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 18229224 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 15832920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 12528416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-27 10:57 - 2013-10-01 16:25 - 11345168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 11292144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 09480840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 09436544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 03130144 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 03121952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02945312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02745632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02682816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433140.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433140.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01239304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00654624 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00559904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-27 10:57 - 2012-08-21 21:16 - 30334752 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-27 10:57 - 2012-02-24 20:53 - 01432408 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 18259624 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 03052616 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 00023307 _____ C:\Windows\system32\nvinfo.pb
2013-09-27 09:45 - 2012-01-31 04:02 - 06641440 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-27 09:45 - 2012-01-31 04:02 - 03483424 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-27 09:44 - 2012-01-31 04:02 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-27 02:37 - 2013-09-27 02:37 - 00587040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-26 15:32 - 2012-02-24 20:55 - 03386608 _____ C:\Windows\system32\nvcoproc.bin
2013-09-24 19:49 - 2013-09-24 19:49 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Guild Wars 2
2013-09-24 19:49 - 2012-08-21 15:45 - 00000000 ____D C:\Users\Felix\Documents\Guild Wars 2
2013-09-22 22:36 - 2012-02-11 03:33 - 00000000 ____D C:\Users\Felix\Documents\My Games
2013-09-22 22:18 - 2013-09-22 22:18 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Doublefine
2013-09-22 17:43 - 2013-10-09 16:44 - 17833984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-22 17:01 - 2013-10-09 16:44 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-22 16:42 - 2013-10-09 16:44 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-22 16:36 - 2013-10-09 16:44 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-22 16:33 - 2013-10-09 16:44 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-22 16:33 - 2013-10-09 16:44 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-22 16:30 - 2013-10-09 16:44 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-22 16:27 - 2013-10-09 16:44 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-22 16:23 - 2013-10-09 16:44 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-22 16:22 - 2013-10-09 16:44 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-22 16:21 - 2013-10-09 16:44 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-22 16:19 - 2013-10-09 16:44 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-22 16:19 - 2013-10-09 16:44 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-22 16:16 - 2013-10-09 16:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-22 16:15 - 2013-10-09 16:44 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-22 16:07 - 2013-10-09 16:44 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-22 12:29 - 2013-10-09 16:44 - 12336128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-22 12:22 - 2013-10-09 16:44 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-22 12:22 - 2013-10-09 16:44 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-22 12:14 - 2013-10-09 16:44 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-22 12:13 - 2013-10-09 16:44 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-22 12:13 - 2013-10-09 16:44 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-22 12:12 - 2013-10-09 16:44 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-22 12:09 - 2013-10-09 16:44 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-22 12:08 - 2013-10-09 16:44 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-22 12:07 - 2013-10-09 16:44 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-22 12:06 - 2013-10-09 16:44 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-22 12:05 - 2013-10-09 16:44 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-22 12:03 - 2013-10-09 16:44 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-22 12:03 - 2013-10-09 16:44 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-22 12:03 - 2013-10-09 16:44 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-22 11:59 - 2013-10-09 16:44 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
Some content of TEMP:
====================
C:\Users\Felix\AppData\Local\Temp\drm_dyndata_7400006.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-13 17:04
==================== End Of Log ============================
--- --- --- Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-10-2013
Ran by Felix at 2013-10-20 10:22:13
Running from C:\Users\Felix\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (x32)
64 Bit HP CIO Components Installer (Version: 7.2.8)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
A Virus Named TOM (x32)
Adobe AIR (x32 Version: 3.7.0.2090)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.3.133)
AION Free-to-Play Version 1.0 (x32 Version: 1.0)
Alan Wake (x32)
Alan Wake's American Nightmare (x32)
Alien Swarm (x32)
Alternative Flash Player Auto-Updater (x32 Version: 1.1.0.3)
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)
AMD APP SDK Runtime (Version: 10.0.873.1)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Fuel (Version: 2012.0704.2139.36919)
ANNO 2070 (x32 Version: 1.0.0.0)
ARMA 2 (x32)
Arma 2: DayZ Mod (x32)
ARMA 2: Operation Arrowhead (x32)
Arma 3 Alpha (x32)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.10.0)
Assassin's Creed(R) III v1.06 (x32 Version: 1.06)
Audacity 2.0.3 (x32 Version: 2.0.3)
Audials (x32 Version: 8.0.54900.0)
Audials TV (x32 Version: 1.3.10803.300)
Bandisoft MPEG-1 Decoder (x32)
Bastion (x32)
Battlefield 1942™ (x32 Version: 1.6.20.0)
Battlefield 3™ (x32 Version: 1.4.0.0)
Battlefield 4™ Beta (x32 Version: 1.0.0.0)
Battlefront Extreme 2.2 (x32)
Battlelog Web Plugins (x32 Version: 2.3.0)
BattlEye for OA Uninstall (x32)
Borderlands (x32)
Borderlands 2 (x32)
Brütal Legend (x32)
BufferChm (x32 Version: 140.0.212.000)
Burnout Paradise: The Ultimate Box (x32)
CANYON USB PC CAMERA (x32 Version: 1.0.20)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.0704.2139.36919)
Catalyst Control Center Localization All (x32 Version: 2012.0704.2139.36919)
CCC Help Chinese Standard (x32 Version: 2012.0704.2138.36919)
CCC Help Chinese Traditional (x32 Version: 2012.0704.2138.36919)
CCC Help Czech (x32 Version: 2012.0704.2138.36919)
CCC Help Danish (x32 Version: 2012.0704.2138.36919)
CCC Help Dutch (x32 Version: 2012.0704.2138.36919)
CCC Help English (x32 Version: 2012.0704.2138.36919)
CCC Help Finnish (x32 Version: 2012.0704.2138.36919)
CCC Help French (x32 Version: 2012.0704.2138.36919)
CCC Help German (x32 Version: 2012.0704.2138.36919)
CCC Help Greek (x32 Version: 2012.0704.2138.36919)
CCC Help Hungarian (x32 Version: 2012.0704.2138.36919)
CCC Help Italian (x32 Version: 2012.0704.2138.36919)
CCC Help Japanese (x32 Version: 2012.0704.2138.36919)
CCC Help Korean (x32 Version: 2012.0704.2138.36919)
CCC Help Norwegian (x32 Version: 2012.0704.2138.36919)
CCC Help Polish (x32 Version: 2012.0704.2138.36919)
CCC Help Portuguese (x32 Version: 2012.0704.2138.36919)
CCC Help Russian (x32 Version: 2012.0704.2138.36919)
CCC Help Spanish (x32 Version: 2012.0704.2138.36919)
CCC Help Swedish (x32 Version: 2012.0704.2138.36919)
CCC Help Thai (x32 Version: 2012.0704.2138.36919)
CCC Help Turkish (x32 Version: 2012.0704.2138.36919)
ccc-utility64 (Version: 2012.0704.2139.36919)
CCleaner (Version: 4.06)
Command & Conquer 3 Tiberium Wars™ (x32 Version: 1.0.0.0)
Command and Conquer: Red Alert 3 - Uprising (x32)
Command and Conquer: Red Alert 3 (x32)
Company of Heroes 2 (x32)
Copy (x32 Version: 140.0.212.000)
CPUID HWMonitor 1.23
Crusader Kings II (x32)
Crysis (x32)
Crysis 2 Maximum Edition (x32)
Crysis Warhead (x32)
Darth Vader Theme Win7 (x32)
Dead Space™ (x32 Version: 1.0.222.0)
Dead Space™ 3 (x32 Version: 1.0.0.0)
Destinations (x32 Version: 140.0.77.000)
DeviceDiscovery (x32 Version: 140.0.212.000)
Die Sims™ 3 (x32 Version: 1.55.4)
Die Sims™ 3 Late Night (x32 Version: 6.5.1)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38)
DJ_AIO_06_F4500_SW_MIN (x32 Version: 140.0.690.000)
Don't Starve (x32)
Dota 2 (x32)
Dungeonland (x32)
EA Shared Game Component: Activation (x32 Version: 2.2.0)
EA Shared Game Component: Activation (x32 Version: 2.2.0.62)
Eets Munchies (x32)
Empire: Total War (x32)
Endless Space (x32)
eReg (x32 Version: 1.20.138.34)
ESN Sonar (x32 Version: 0.70.4)
Euro Truck Simulator 2 (x32 Version: 1.1.1)
Europa Universalis III (x32)
EVEREST Home Edition v2.20 (x32 Version: 2.20)
F4500 (x32 Version: 140.0.690.000)
Far Cry 3 (x32 Version: 1.05)
FEZ (x32)
FormatFactory 2.90 (x32 Version: 2.90)
Free YouTube to MP3 Converter version 3.12.2.430 (x32 Version: 3.12.2.430)
FTL: Faster Than Light (x32)
Galactic Civilizations II: Ultimate Edition (x32)
Gameforge Live 1.0 "Legend" (x32 Version: 1.1.1724)
GameSpy Comrade (x32 Version: 1.5.0.156)
Geeks3D.com FurMark 1.9.0 (x32)
GeForce Experience NvStream Client Components (Version: 0.1.87)
GIMP 2.6.8
Google Chrome (x32 Version: 30.0.1599.101)
Google Talk Plugin (x32 Version: 3.19.1.13088)
Google Update Helper (x32 Version: 1.3.21.165)
GPBaseService2 (x32 Version: 140.0.211.000)
GPL Ghostscript (x32 Version: 9.05)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Grand Theft Auto IV (x32 Version: 1.00.0000)
Guild Wars 2 (x32)
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000)
Hotline Miami (x32)
HP Customer Participation Program 14.0 (Version: 14.0)
HP Deskjet F4500 All-in-One Driver Software 14.0 Rel. 6 (Version: 14.0)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP Product Detection (x32 Version: 11.14.0001)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (x32 Version: 5.003.001.001)
HPDiagnosticAlert (x32 Version: 1.00.0000)
HPPhotoGadget (x32 Version: 140.0.524.000)
HPProductAssistant (x32 Version: 140.0.212.000)
HPSSupply (x32 Version: 140.0.211.000)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JDownloader 0.9 (x32 Version: 0.9)
Kalydo Player 5.00.01 (HKCU Version: 5.00.01)
League of Legends (x32 Version: 1.3)
Leviathan: Warships (x32)
LIMBO (x32)
Live Update 5 (x32 Version: 5.0.106)
Logitech Gaming Software (Version: 8.35.18)
Logitech Gaming Software 8.35 (Version: 8.35.18)
Logitech SetPoint 6.32 (Version: 6.32.20)
LogMeIn Hamachi (x32 Version: 2.2.0.58)
Magicka (x32)
Mango Skin Pack 2.0-X86 (x32 Version: 2.0-X86)
Mark of the Ninja (x32)
MarketResearch (x32 Version: 140.0.212.000)
Mass Effect (x32 Version: 1.00)
Mass Effect 2 (x32 Version: 1.2.1604.0)
Mass Effect™ 3 (x32 Version: 1.05.0.0)
McPixel (x32)
Medal of Honor(TM) Multiplayer (x32)
Medal of Honor(TM) Single Player (x32)
Metro 2033 (x32)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Fix it Center (Version: 1.0.0100)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)
Minecraft Texturepack Editor (x32)
Mirror's Edge (x32)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Napoleon: Total War (x32)
Network64 (Version: 140.0.215.000)
Nexus Mod Manager (Version: 0.45.6)
Norton Internet Security (x32 Version: 20.4.0.40)
NVIDIA 3D Vision Controller-Treiber 331.40 (Version: 331.40)
NVIDIA 3D Vision Treiber 331.40 (Version: 331.40)
NVIDIA GeForce Experience 1.6.1 (Version: 1.6.1)
NVIDIA Grafiktreiber 331.40 (Version: 331.40)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.133.902)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3140)
NVIDIA Systemsteuerung 331.40 (Version: 331.40)
NVIDIA Update 8.3.14 (Version: 8.3.14)
NVIDIA Update Components (Version: 8.3.14)
NVIDIA Virtual Audio 1.2.5 (Version: 1.2.5)
OpenAL (x32)
Origin (x32 Version: 8.5.0.4518)
Pando Media Booster (x32 Version: 2.6.0.6)
PlanetSide 2 (x32)
PSPad editor (x32)
PunkBuster Services (x32 Version: 0.993)
puush (x32 Version: 1.0.0.0)
PxMergeModule (x32 Version: 1.00.0000)
Realtek Ethernet Controller Driver (x32 Version: 7.67.1226.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6923)
RealWorld Change Cursor (Version: 2.0.0)
Republic at War 1.1.5 (x32 Version: 1.1.5)
Republic at War 1.1.5 Deutsch (x32 Version: 1.1.5)
Revo Uninstaller 1.95 (x32 Version: 1.95)
Rocketbirds: Hardboiled Chicken (x32)
Runes of Magic (x32 Version: 5.0.5.2592)
RunesOfMagic (HKCU Version: 5.00.10.2634)
Scan (x32 Version: 140.0.80.000)
SHIELD Streaming (Version: 1.05.28)
Shop for HP Supplies (Version: 14.0)
Sid Meier's Civilization V (x32)
SimCity™ (x32 Version: 1.0.0.0)
SimCity™ Closed Beta (x32 Version: 1.0.0.0)
Skype Click to Call (x32 Version: 6.3.11079)
Skype™ 6.9 (x32 Version: 6.9.106)
SmartWebPrinting (x32 Version: 140.0.186.000)
SolutionCenter (x32 Version: 140.0.213.000)
Sonic Adventure™ 2 (x32)
Spiral Knights (x32)
SpywareBlaster 5.0 (x32 Version: 5.0.0)
Star Trek Online (x32)
Star Wars - Battlefront II (x32)
Star Wars Empire at War (x32 Version: 1.0)
Star Wars Empire at War Forces of Corruption (x32 Version: 1.0)
Star Wars: Knights of the Old Republic (x32)
Star Wars: Knights of the Old Republic II (x32)
Star Wars: The Force Unleashed 2 (x32 Version: 1.0)
Star Wars: The Old Republic (x32 Version: 1.00)
Status (x32 Version: 140.0.212.000)
Steam (x32 Version: 1.0.0.0)
swMSM (x32 Version: 12.0.0.1)
TeamSpeak 3 Client (HKCU Version: 3.0.12)
Terraria (x32)
The Binding of Isaac (x32)
The Elder Scrolls V: Skyrim (x32)
The Lord of the Rings: War in the North (x32)
The Showdown Effect (x32)
The Walking Dead (x32)
Toolbox (x32 Version: 140.0.428.000)
Total War: SHOGUN 2 (x32)
TrayApp (x32 Version: 140.0.212.000)
Trine 2 (x32)
TSLRCM 1.8.1 (x32)
Tunngle beta (x32)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Unity Web Player (HKCU Version: )
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
War of the Roses (x32)
War of the Roses Balance Beta (x32)
War of the Vikings Alpha (x32)
War Thunder Launcher 1.0.1.246 (x32)
Warlock - Master of the Arcane (x32)
WebReg (x32 Version: 140.0.212.017)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
XCOM: Enemy Unknown (x32)
Yahoo! Toolbar (x32)
Zip Motion Block Video codec (Remove Only) (x32)
==================== Restore Points =========================
==================== Hosts content: ==========================
2013-10-19 20:33 - 2013-10-19 20:35 - 00001226 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 host42.hrwebservices.net
127.0.0.1 rdr2ps3.ms4.gamespy.com
127.0.0.1 match.gta4ps3.gamespy.com
127.0.0.1 *.ms4.gamespy.com
127.0.0.1 207.38.11.34
127.0.0.1 Owner-PC.gateway.2wire.net
127.0.0.1 host42.hrwebservices.net
127.0.0.1 rdr2ps3.ms4.gamespy.com
127.0.0.1 match.gta4ps3.gamespy.com
127.0.0.1 *.ms4.gamespy.com
127.0.0.1 207.38.11.34
127.0.0.1 Owner-PC.gateway.2wire.net
==================== Scheduled Tasks (whitelisted) =============
Task: {063585B2-0D45-4C14-82E9-2A2B071F1090} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {0EDC0298-7D0A-4E89-B3C7-60890E3F7423} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {26F60F43-01DE-4A22-A369-0A7E020F047C} - System32\Tasks\{EE1A1B01-4044-4B86-AE24-14F490C07A6E} => Firefox.exe
Task: {392AEB80-61C8-430B-AA4D-175318356167} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-19] (Google Inc.)
Task: {6932DC68-B7E6-45A7-8C76-F128CF6E4832} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3461110047-3363698456-2598581639-1002Core => C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-23] (Google Inc.)
Task: {71C9F9D5-C5F0-4B1F-B06A-65B6E2991BD9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3461110047-3363698456-2598581639-1002UA => C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-23] (Google Inc.)
Task: {909616F2-CC53-4F07-B6CD-8826CF207253} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3461110047-3363698456-2598581639-1002 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {9A14A314-08A5-4885-8CF1-0C417CABC143} - System32\Tasks\Game_Booster_AutoUpdate => D:\Felix\Programme\Game Booster 3\AutoUpdate.exe
Task: {9B84B640-00D9-45EF-901B-57E439D29006} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3461110047-3363698456-2598581639-1002 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {A395046B-8B68-4A6F-9FD7-AB244A41F35F} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {B1A31320-69F6-44D0-81CA-0105BAB7A72B} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3461110047-3363698456-2598581639-1002 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {BB104867-A9E6-43A3-ADB2-1422B3F1AD72} - System32\Tasks\RealCreateProcessScheduledTask206794S-1-5-21-3461110047-3363698456-2598581639-1002 => c:\program files (x86)\real\realplayer\realplay.exe
Task: {BFC5A2A0-8EFB-4F98-B352-C7D4252FCDCD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-19] (Google Inc.)
Task: {D0D8D25B-D2A7-4F92-A0D9-610CF2168572} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3461110047-3363698456-2598581639-1002 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {F6315600-8E80-43EF-B437-A0B2433FC0C2} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {F6A56299-0D0B-4207-A918-6E048D25B8E6} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3461110047-3363698456-2598581639-1002Core.job => C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3461110047-3363698456-2598581639-1002UA.job => C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-09-19 09:07 - 2011-09-19 09:07 - 00062976 _____ () C:\Windows\system32\bdmpega64.acm
2012-03-25 19:55 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2011-10-07 11:39 - 2011-10-07 11:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll
2013-06-13 15:15 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll
2013-03-12 18:10 - 2013-08-22 00:18 - 00687104 _____ () D:\Spiele\Steam\SDL2.dll
2012-02-11 02:07 - 2013-10-09 04:19 - 01121704 _____ () D:\Spiele\Steam\bin\chromehtml.DLL
2012-02-11 02:07 - 2013-09-11 00:20 - 20625832 _____ () D:\Spiele\Steam\bin\libcef.dll
2012-03-18 13:32 - 2013-06-15 01:49 - 01100800 _____ () D:\Spiele\Steam\bin\avcodec-53.dll
2012-03-18 13:32 - 2013-06-15 01:49 - 00124416 _____ () D:\Spiele\Steam\bin\avutil-51.dll
2012-03-18 13:32 - 2013-06-15 01:49 - 00192000 _____ () D:\Spiele\Steam\bin\avformat-53.dll
2013-10-16 22:49 - 2013-10-09 02:01 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll
2013-10-16 22:49 - 2013-10-09 02:01 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll
2013-10-16 22:49 - 2013-10-09 02:02 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll
2013-10-16 22:49 - 2013-10-09 02:02 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll
2013-10-16 22:49 - 2013-10-09 02:01 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll
2013-10-16 22:49 - 2013-10-09 02:02 - 13584336 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
AlternateDataStreams: C:\Users\Felix\AppData\Local\14CQveFtZ:d3O2u0cRizbcnsSaLGx0Sk
AlternateDataStreams: C:\Users\Felix\AppData\Local\Temp:J2cnVahUsn50xhod9J
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Faulty Device Manager Devices =============
Name: Deskjet F4500 series
Description: Deskjet F4500 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Deskjet F4500 series
Description: Deskjet F4500 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: TAP-Win32 Adapter V9 (Tunngle)
Description: TAP-Win32 Adapter V9 (Tunngle)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Win32 Provider V9 (Tunngle)
Service: tap0901t
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Deskjet F4500 series
Description: Deskjet F4500 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/20/2013 09:58:13 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/20/2013 09:56:25 AM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]
Error: (10/20/2013 09:56:25 AM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcFailed to open Audio Capture session [6]
Error: (10/20/2013 01:20:51 AM) (Source: Application Hang) (User: )
Description: Programm Skype.exe, Version 6.9.0.106 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: c88
Startzeit: 01ceccf8abef2923
Endzeit: 27
Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe
Berichts-ID:
Error: (10/19/2013 08:27:42 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/19/2013 08:25:53 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]
Error: (10/19/2013 08:25:53 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcFailed to open Audio Capture session [6]
Error: (10/19/2013 03:04:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/19/2013 03:04:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: StarCitizen.exe, Version: 3.5.3.1215, Zeitstempel: 0x525925a1
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000000006
ID des fehlerhaften Prozesses: 0x127c
Startzeit der fehlerhaften Anwendung: 0xStarCitizen.exe0
Pfad der fehlerhaften Anwendung: StarCitizen.exe1
Pfad des fehlerhaften Moduls: StarCitizen.exe2
Berichtskennung: StarCitizen.exe3
Error: (10/19/2013 03:02:52 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]
System errors:
=============
Error: (10/20/2013 09:56:26 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.1" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/20/2013 09:56:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.1" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/19/2013 10:48:09 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (10/19/2013 10:01:55 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (10/19/2013 09:02:08 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (10/19/2013 08:46:09 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (10/19/2013 08:44:58 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (10/19/2013 08:26:18 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "KNOTHE-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{085A730D-AF77-4267-BCAA-0E290C9F6472}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (10/19/2013 08:25:55 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (10/19/2013 08:25:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.1" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-07-11 00:40:16.705
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Felix\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 00:40:16.652
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Felix\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 00:40:16.547
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 00:40:16.493
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 33%
Total physical RAM: 8162.13 MB
Available physical RAM: 5442.75 MB
Total Pagefile: 24884.55 MB
Available Pagefile: 21705.14 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:55.8 GB) (Free:9.05 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.51 GB) (Free:123.18 GB) NTFS
Drive e: (Volume) (Fixed) (Total:1763.01 GB) (Free:1745 GB) NTFS
Drive f: (Systemabbild) (Fixed) (Total:100 GB) (Free:99.91 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 56 GB) (Disk ID: 5EDE2BD1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=56 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 8471AA3F)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: E514680D)
Partition 1: (Not Active) - (Size=-306000691200) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
20.10.2013, 17:31
| #4 | |
| /// the machine /// TB-Ausbilder | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf)Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.10.2013, 19:33
| #5 |
| | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Hier die ComboFix.txt: Code:
ATTFilter ComboFix 13-10-19.02 - Felix 20.10.2013 20:05:11.1.6 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.8162.6016 [GMT 2:00]
ausgeführt von:: c:\users\Felix\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Felix\AppData\Roaming\Espyw
c:\users\Felix\AppData\Roaming\Espyw\bebul.daa
c:\users\Felix\AppData\Roaming\Ocxi
c:\users\Felix\AppData\Roaming\Ocxi\xienw.caz
c:\users\Felix\AppData\Roaming\Xymyom
c:\users\Felix\AppData\Roaming\Xymyom\sevyk.sim
c:\users\Felix\AppData\Roaming\Yfvy
c:\users\Felix\AppData\Roaming\Yfvy\ticic.kue
c:\windows\SysWow64\frapsvid.dll
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-09-20 bis 2013-10-20 ))))))))))))))))))))))))))))))
.
.
2013-10-20 18:14 . 2013-10-20 18:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-10-20 08:21 . 2013-10-20 08:21 -------- d-----w- C:\FRST
2013-10-10 22:01 . 2013-10-10 22:01 -------- d-----w- c:\users\Felix\AppData\Local\LogMeIn
2013-10-10 22:01 . 2013-10-10 22:01 -------- d-----w- c:\programdata\LogMeIn
2013-10-09 14:37 . 2013-08-29 02:17 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-10-09 14:36 . 2013-08-01 12:09 983488 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-10-09 14:36 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-10-09 14:36 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-10-09 14:36 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-10-09 14:36 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-10-09 14:36 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-10-09 14:36 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-10-09 14:36 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-10-01 15:04 . 2013-10-01 15:04 -------- d-----w- c:\users\UpdatusUser
2013-10-01 15:03 . 2013-08-20 13:33 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2013-10-01 15:03 . 2013-08-20 13:32 29984 ----a-w- c:\windows\system32\nvaudcap64v.dll
2013-10-01 15:03 . 2013-08-20 13:32 28448 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2013-10-01 14:49 . 2013-10-01 14:49 -------- d-----w- c:\program files\CCleaner
2013-10-01 14:21 . 2013-10-01 14:21 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-10-01 14:20 . 2013-06-16 12:38 31520 ----a-w- c:\windows\system32\nvhdap64.dll
2013-10-01 14:20 . 2013-06-16 12:38 196384 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2013-10-01 14:20 . 2013-09-12 08:58 1884448 ----a-w- c:\windows\system32\nvdispco6432723.dll
2013-10-01 14:20 . 2013-09-12 08:58 1511712 ----a-w- c:\windows\system32\nvdispgenco6432723.dll
2013-09-29 17:24 . 2013-09-29 17:24 -------- d-----w- c:\programdata\Package Cache
2013-09-27 00:37 . 2013-09-27 00:37 587040 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-09-24 17:49 . 2013-09-24 17:49 -------- d-----w- c:\users\Felix\AppData\Roaming\Guild Wars 2
2013-09-22 20:18 . 2013-09-22 20:18 -------- d-----w- c:\users\Felix\AppData\Roaming\Doublefine
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-10 14:28 . 2012-04-02 12:48 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-10-10 14:28 . 2012-02-10 18:30 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-10-09 14:40 . 2012-02-11 09:39 80541720 ----a-w- c:\windows\system32\MRT.exe
2013-09-29 17:24 . 2012-02-10 23:12 281872 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-09-29 17:24 . 2012-02-10 23:12 281872 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-09-29 17:24 . 2012-02-10 23:12 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-09-27 08:57 . 2012-08-21 19:16 30334752 ----a-w- c:\windows\system32\nvoglv64.dll
2013-09-27 08:57 . 2012-02-24 18:53 1432408 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-09-27 08:57 . 2012-01-31 02:01 18259624 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-09-27 08:57 . 2012-01-31 02:01 15232424 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-09-27 08:57 . 2012-01-31 02:01 3052616 ----a-w- c:\windows\system32\nvapi64.dll
2013-09-27 07:45 . 2012-01-31 02:02 6641440 ----a-w- c:\windows\system32\nvcpl.dll
2013-09-27 07:45 . 2012-01-31 02:02 3483424 ----a-w- c:\windows\system32\nvsvc64.dll
2013-09-27 07:44 . 2012-01-31 02:02 922912 ----a-w- c:\windows\system32\nvvsvc.exe
2013-09-27 07:44 . 2012-01-31 02:02 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-09-27 07:44 . 2012-01-31 02:02 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2013-09-27 07:44 . 2012-01-31 02:02 219424 ----a-w- c:\windows\system32\nvmctray.dll
2013-09-26 13:32 . 2012-02-24 18:55 3386608 ----a-w- c:\windows\system32\nvcoproc.bin
2013-09-12 21:36 . 2013-09-12 21:36 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2013-09-12 21:36 . 2013-09-12 21:36 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2013-09-12 21:36 . 2013-09-12 21:36 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2013-09-12 21:36 . 2013-09-12 21:36 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2013-08-29 01:48 . 2013-10-09 14:37 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-08-15 13:20 . 2013-08-15 13:21 447752 ----a-w- c:\windows\SysWow64\vp6vfw.dll
2013-08-05 02:25 . 2013-09-12 13:22 155584 ----a-w- c:\windows\system32\drivers\ataport.sys
2013-08-02 02:14 . 2013-09-12 13:22 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-08-02 02:13 . 2013-09-12 13:22 424448 ----a-w- c:\windows\system32\KernelBase.dll
2013-08-02 02:13 . 2013-09-12 13:22 1161216 ----a-w- c:\windows\system32\kernel32.dll
2013-08-02 02:12 . 2013-09-12 13:22 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-08-02 02:12 . 2013-09-12 13:22 6656 ----a-w- c:\windows\system32\apisetschema.dll
2013-08-02 02:12 . 2013-09-12 13:22 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-08-02 02:12 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-08-02 01:50 . 2013-09-12 13:22 274944 ----a-w- c:\windows\SysWow64\KernelBase.dll
2013-08-02 01:48 . 2013-09-12 13:22 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-08-02 01:48 . 2013-09-12 13:22 5120 ---ha-w- c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
2013-08-02 01:48 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
2013-08-02 01:09 . 2013-09-12 13:22 338432 ----a-w- c:\windows\system32\conhost.exe
2013-08-02 00:59 . 2013-09-12 13:22 112640 ----a-w- c:\windows\system32\smss.exe
2013-08-02 00:43 . 2013-09-12 13:22 6144 ---ha-w- c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2013-08-02 00:43 . 2013-09-12 13:22 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 00:43 . 2013-09-12 13:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 00:43 . 2013-09-12 13:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2013-07-26 02:24 . 2013-09-12 13:22 14172672 ----a-w- c:\windows\system32\shell32.dll
2013-07-26 02:24 . 2013-09-12 13:22 197120 ----a-w- c:\windows\system32\shdocvw.dll
2013-07-25 09:25 . 2013-08-15 12:34 1888768 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-15 12:34 1620992 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-10-02 20472992]
"B144E092EADCA0B5E85681614B171BAF8D0F881F._service_run"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2013-10-09 844752]
"puush"="d:\felix\Programme\puush\puush.exe" [2013-08-19 567880]
"Steam"="d:\spiele\Steam\steam.exe" [2013-10-09 1813928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-07-04 642728]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
R2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 LADF_DHP2;G35 DHP2 Filter Driver;c:\windows\system32\DRIVERS\ladfDHP2amd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfDHP2amd64.sys [x]
R3 LADF_SBVM;G35 SBVM Filter Driver;c:\windows\system32\DRIVERS\ladfSBVMamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfSBVMamd64.sys [x]
R3 MatSvc;Microsoft Fix it Supportcenter;c:\program files\Microsoft Fix it Center\Matsvc.exe;c:\program files\Microsoft Fix it Center\Matsvc.exe [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;d:\felix\Programme\MSI\Live Update 5\msibios64_100507.sys;d:\felix\Programme\MSI\Live Update 5\msibios64_100507.sys [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4;d:\felix\Programme\Live Update 5\Live Update 5\NTIOLib_X64.sys;d:\felix\Programme\Live Update 5\Live Update 5\NTIOLib_X64.sys [x]
R3 NTIOLib_1_0_6;NTIOLib_1_0_6;c:\program files (x86)\Setup Files\Ms7693v1B0\NTIOLib_X64.sys;c:\program files (x86)\Setup Files\Ms7693v1B0\NTIOLib_X64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;d:\ntiolib_x64.sys;d:\NTIOLib_X64.sys [x]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys;c:\windows\SYSNATIVE\DRIVERS\tap0901t.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;d:\felix\Programme\Tunngle\TnglCtrl.exe;d:\felix\Programme\Tunngle\TnglCtrl.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\BASHDefs\20131002.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [x]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\IPSDefs\20131018.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\IPSDefs\20131018.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1404000.028\SYMNETS.SYS [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\felix\Programme\Hamachi\hamachi-2.exe;d:\felix\Programme\Hamachi\hamachi-2.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys;c:\windows\SYSNATIVE\Drivers\LGPBTDD.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-16 20:46 1185744 ----a-w- c:\program files (x86)\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-10-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 14:28]
.
2013-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-19 18:33]
.
2013-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-19 18:33]
.
2013-06-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3461110047-3363698456-2598581639-1002Core.job
- c:\users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-23 18:37]
.
2013-06-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3461110047-3363698456-2598581639-1002UA.job
- c:\users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-23 18:37]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 6900024]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-05-27 7188552]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-08-27 1028896]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
IE: Free YouTube to MP3 Converter - c:\users\Felix\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - d:\felix\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.2.1
.
.
------- Dateityp-Verknüpfung -------
.
txtfile="d:\felix\Programme\PSPad editor\PSPad.exe" "%1"
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{c840e246-6b95-475e-9bd7-caa1c7eca9f2} - (no file)
URLSearchHooks-{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
WebBrowser-{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - (no file)
AddRemove-Republic at War 1.1.5 Deutsch 1.1.5 - c:\programdata\Caphyon\Advanced Installer\{D35A453A-4409-423C-BEC5-3D09A982FB62}\Republic at War 1.1.5
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=hex:51,66,7a,6c,4c,1d,38,12,11,7f,11,
d0,78,5b,08,05,de,bb,01,03,dd,4c,30,54
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"=hex:51,66,7a,6c,4c,1d,38,12,8d,ec,f8,
7b,2b,25,27,06,e7,c4,bc,f0,98,15,0d,de
"{0347C33E-8762-4905-BF09-768834316C61}"=hex:51,66,7a,6c,4c,1d,38,12,50,c0,54,
07,50,c9,6b,0c,c0,1f,35,c8,31,6f,28,75
"{3049C3E9-B461-4BC5-8870-4C09146192CA}"=hex:51,66,7a,6c,4c,1d,38,12,87,c0,5a,
34,53,fa,ab,0e,f7,66,0f,49,11,3f,d6,de
"{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}"=hex:51,66,7a,6c,4c,1d,38,12,60,d8,39,
64,cd,04,79,07,f5,b7,d6,9a,c1,81,e0,1c
"{6D53EC84-6AAE-4787-AEEE-F4628F01010C}"=hex:51,66,7a,6c,4c,1d,38,12,ea,ef,40,
69,9c,24,e9,02,d1,f8,b7,22,8a,5f,45,18
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93,
aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}"=hex:51,66,7a,6c,4c,1d,38,12,91,fc,ec,
fb,7c,81,45,0a,c2,d4,4d,32,e4,48,ec,42
.
[HKEY_USERS\S-1-5-21-3461110047-3363698456-2598581639-1002\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:ec,26,b2,5f,96,48,63,26,60,f6,c2,3c,3a,4e,3c,4f,43,c4,cc,af,a4,a8,51,
15,45,d3,ce,3b,9b,55,ad,4a,6c,4b,82,7e,02,2c,08,6a,15,6a,2c,f8,b1,05,a3,19,\
"??"=hex:d2,8a,3d,7f,d6,ee,ff,ab,38,51,7b,8c,dc,d7,d2,0c
.
[HKEY_USERS\S-1-5-21-3461110047-3363698456-2598581639-1002\Software\SecuROM\License information*]
"datasecu"=hex:92,b4,d3,5a,55,db,ee,85,8b,c6,3c,e8,36,b9,d8,51,51,8a,89,c1,6f,
86,3c,7a,3f,45,0b,1f,d4,24,9d,e8,3f,ed,25,7f,1c,50,c7,ec,f6,af,34,a7,39,6b,\
"rkeysecu"=hex:e8,16,fb,b3,41,a4,c6,30,73,54,26,02,68,76,f8,22
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-10-20 20:28:21
ComboFix-quarantined-files.txt 2013-10-20 18:28
.
Vor Suchlauf: 9.060.585.472 Bytes frei
Nach Suchlauf: 9.051.635.712 Bytes frei
.
- - End Of File - - D0B859DB414168EE4A45ECF29BA9AEAD
A36C5E4F47E84449FF07ED3517B43A31
|
|
21.10.2013, 10:54
| #6 |
| /// the machine /// TB-Ausbilder | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) |
|
21.10.2013, 15:09
| #7 |
| | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) So, hier von Malwarebytes Anti-Malware: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.21.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Felix :: FELIX-PC [Administrator] 21.10.2013 15:46:57 mbam-log-2013-10-21 (15-46-57).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 232797 Laufzeit: 1 Minute(n), 14 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.010 - Bericht erstellt am 21/10/2013 um 15:50:34
# Updated 20/10/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Felix - FELIX-PC
# Gestartet von : C:\Users\Felix\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Felix\AppData\LocalLow\boost_interprocess
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_4gb-skyrim-mod_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_4gb-skyrim-mod_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fraps_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fraps_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_scribus_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_scribus_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_skyrim-hd-2k-textures_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_skyrim-hd-2k-textures_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
***** [ Browser ] *****
-\\ Internet Explorer v0.0.0.0
-\\ Google Chrome v30.0.1599.101
[ Datei : C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [4313 octets] - [21/10/2013 15:49:15]
AdwCleaner[S0].txt - [4224 octets] - [21/10/2013 15:50:34]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4284 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:2)
OS: Windows 7 Professional x64
Ran by Felix on 21.10.2013 at 15:59:05,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Users\Felix\appdata\local\cre"
~~~ Chrome
Successfully deleted: [Folder] C:\Users\Felix\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.10.2013 at 16:01:39,52
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-10-2013
Ran by Felix (administrator) on FELIX-PC on 21-10-2013 16:04:43
Running from C:\Users\Felix\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) D:\Felix\Programme\Hamachi\hamachi-2.exe
(LogMeIn, Inc.) D:\Felix\Programme\Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7302\Monitor.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() D:\Felix\Programme\puush\puush.exe
(Valve Corporation) D:\Spiele\Steam\Steam.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDWebCam.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [PAC7302_Monitor] - C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-27] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
HKCU\...\Run: [B144E092EADCA0B5E85681614B171BAF8D0F881F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752 2013-10-09] (Google Inc.)
HKCU\...\Run: [puush] - D:\Felix\Programme\puush\puush.exe [567880 2013-08-19] ()
HKCU\...\Run: [Steam] - D:\Spiele\Steam\steam.exe [1813928 2013-10-09] (Valve Corporation)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x952CA7BB21E8CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Chrome:
=======
CHR HomePage: hxxp://www.youtube.com/feed/subscriptions
CHR RestoreOnStartup: "hxxp://www.youtube.com/feed/subscriptions"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\Felix\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Felix\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Felix\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Unity Player) - C:\Users\Felix\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Kalydo Player Plugin for Mozilla) - C:\Users\Felix\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (AmazonMP3DownloaderPlugin) - D:\Felix\Programme\AmazonMP3Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
CHR Extension: (Google Docs) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (YouTube Smart Pause) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcflkimagfnicklojfonbbcppnikogih\1.1.9_0
CHR Extension: (AdBlock) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (Looper for YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggpfpnahkgpnindfkdncknoldgnccdg\4.9.6_0
CHR Extension: (SmallringFX DarkBlue Theme) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfijmgohofmpjlcgmjplbpmkpchdhpk\1.7_0
CHR Extension: (Save as PDF) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdjmbiefanbdgnkcikhllpmjnnllbbc\1.7_0
CHR Extension: (Skype Click to Call) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0
CHR Extension: (FlashControl) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe\3.3.15_0
CHR Extension: (Norton Identity Protection) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0
CHR Extension: (Downloads) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngbcgifdaopbfflfhbcfeomijfbbcadi\1.5_0
CHR Extension: (dict-cc) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknonnojlmhnmjhpeokdbeineeajcemh\1.6.88_0
CHR Extension: (SwiftPreview) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nphfkpgklibhnhgegdblhnhicgfginnj\2.2.4_0
CHR Extension: (YouTube Unblocker) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.5_0
CHR Extension: (ScriptSafe) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0
CHR Extension: (Gmail) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-07-04] (Advanced Micro Devices, Inc.)
R2 Hamachi2Svc; D:\Felix\Programme\Hamachi\hamachi-2.exe [2746704 2013-10-01] (LogMeIn Inc.)
S3 MatSvc; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [343856 2011-06-13] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-29] ()
S3 TunngleService; D:\Felix\Programme\Tunngle\TnglCtrl.exe [759192 2013-09-03] (Tunngle.net GmbH)
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-02] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-17] (Symantec Corporation)
S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)
S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20131020.019\ENG64.SYS [126040 2013-09-02] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20131020.019\EX64.SYS [2099288 2013-09-02] (Symantec Corporation)
S3 NTIOLib_1_0_4; D:\Felix\Programme\Live Update 5\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7693v1B0\NTIOLib_X64.sys [11888 2011-01-06] (MSI)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
R3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527872 2007-11-08] (PixArt Imaging Inc.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MSI_MSIBIOS_010507; \??\D:\Felix\Programme\MSI\Live Update 5\msibios64_100507.sys [x]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-21 16:04 - 2013-10-21 16:04 - 01954670 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2013-10-21 16:01 - 2013-10-21 16:01 - 00000876 _____ C:\Users\Felix\Desktop\JRT.txt
2013-10-21 15:52 - 2013-10-21 15:52 - 00004376 _____ C:\Users\Felix\Desktop\AdwCleaner[S0].txt
2013-10-21 15:48 - 2013-10-21 15:50 - 00000000 ____D C:\AdwCleaner
2013-10-21 15:38 - 2013-10-21 15:38 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-21 15:38 - 2013-10-21 15:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-21 15:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-21 15:37 - 2013-10-21 15:35 - 01060070 _____ C:\Users\Felix\Desktop\adwcleaner.exe
2013-10-21 15:37 - 2013-10-21 15:35 - 01033335 _____ (Thisisu) C:\Users\Felix\Desktop\JRT.exe
2013-10-20 20:28 - 2013-10-20 20:28 - 00032440 _____ C:\ComboFix.txt
2013-10-20 20:04 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-10-20 20:04 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-10-20 20:04 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-10-20 20:03 - 2013-10-20 20:29 - 00000000 ____D C:\Qoobox
2013-10-20 20:03 - 2013-10-20 20:24 - 00000000 ____D C:\Windows\erdnt
2013-10-20 20:03 - 2013-10-20 20:00 - 05135479 ____R (Swearware) C:\Users\Felix\Desktop\ComboFix.exe
2013-10-20 10:22 - 2013-10-20 10:22 - 00031730 _____ C:\Users\Felix\Desktop\Addition.txt
2013-10-20 10:21 - 2013-10-20 10:21 - 00000000 ____D C:\FRST
2013-10-18 20:20 - 2013-10-18 22:43 - 00000000 ____D C:\Users\Felix\Documents\Endless Space
2013-10-18 19:48 - 2013-10-18 19:49 - 00018473 _____ C:\Windows\DirectX.log
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-09 16:44 - 2013-09-22 17:43 - 17833984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 16:44 - 2013-09-22 17:01 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 16:44 - 2013-09-22 16:42 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 16:44 - 2013-09-22 16:36 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 16:44 - 2013-09-22 16:33 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-09 16:44 - 2013-09-22 16:33 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 16:44 - 2013-09-22 16:30 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-09 16:44 - 2013-09-22 16:27 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 16:44 - 2013-09-22 16:23 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-09 16:44 - 2013-09-22 16:22 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 16:44 - 2013-09-22 16:21 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-09 16:44 - 2013-09-22 16:19 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 16:44 - 2013-09-22 16:19 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 16:44 - 2013-09-22 16:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-09 16:44 - 2013-09-22 16:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 16:44 - 2013-09-22 16:07 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 16:44 - 2013-09-22 12:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 16:44 - 2013-09-22 12:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 16:44 - 2013-09-22 12:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 16:44 - 2013-09-22 12:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-10-09 16:44 - 2013-09-22 12:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 16:44 - 2013-09-22 12:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 16:44 - 2013-09-22 12:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-10-09 16:44 - 2013-09-22 12:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 16:44 - 2013-09-22 12:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-10-09 16:44 - 2013-09-22 12:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 16:44 - 2013-09-22 12:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-10-09 16:44 - 2013-09-22 12:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 16:44 - 2013-09-22 12:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 16:44 - 2013-09-22 12:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 16:44 - 2013-09-22 12:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-10-09 16:44 - 2013-09-22 11:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 16:37 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 16:37 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 16:37 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 16:37 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 16:37 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 16:37 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 16:37 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 16:37 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 16:37 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 16:37 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 16:37 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 16:37 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 16:37 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 16:37 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 16:37 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 16:37 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 16:37 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 16:37 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 16:37 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 16:37 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 16:37 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 16:37 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 16:37 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 16:37 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 16:37 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 16:37 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 16:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 16:37 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 16:37 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 16:37 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 16:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 16:37 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 16:37 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 16:37 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 16:37 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 16:37 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 16:37 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 16:37 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 16:37 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 16:37 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 16:37 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 16:37 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 16:37 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 16:37 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 16:37 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 16:36 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 16:36 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-02 14:08 - 2013-10-20 20:30 - 00002022 _____ C:\Windows\PFRO.log
2013-10-01 17:04 - 2013-10-01 17:04 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-10-01 17:04 - 2012-02-12 16:50 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-10-01 17:04 - 2012-02-11 23:22 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-10-01 17:04 - 2012-01-31 04:05 - 00000000 ____D C:\Users\UpdatusUser\Desktop\extra Software
2013-10-01 17:04 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-01 17:04 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-01 17:03 - 2013-10-21 15:58 - 00006189 _____ C:\Windows\setupact.log
2013-10-01 17:03 - 2013-10-01 17:03 - 00000000 _____ C:\Windows\setuperr.log
2013-10-01 17:03 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-10-01 17:03 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-10-01 17:03 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-10-01 16:49 - 2013-10-01 16:49 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-01 16:49 - 2013-10-01 16:49 - 00000000 ____D C:\Program Files\CCleaner
2013-10-01 16:25 - 2013-09-27 10:57 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 22925088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 18229224 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 15832920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 12528416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-10-01 16:25 - 2013-09-27 10:57 - 11345168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 11292144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 09480840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 09436544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 03130144 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 03121952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02945312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02745632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02682816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433140.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433140.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01239304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00654624 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00559904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-10-01 16:21 - 2013-10-01 16:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-10-01 16:20 - 2013-09-12 10:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-10-01 16:20 - 2013-09-12 10:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-10-01 16:20 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-10-01 16:20 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-10-01 15:58 - 2013-10-01 16:01 - 00000000 ____D C:\Users\Felix\Documents\Battlefield 4
2013-09-29 19:24 - 2013-09-29 19:24 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-29 14:21 - 2013-09-29 14:21 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2013-09-27 02:37 - 2013-09-27 02:37 - 00587040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-24 19:49 - 2013-10-20 21:14 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Guild Wars 2
2013-09-22 22:18 - 2013-09-22 22:18 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Doublefine
==================== One Month Modified Files and Folders =======
2013-10-21 16:04 - 2013-10-21 16:04 - 01954670 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2013-10-21 16:03 - 2011-04-12 09:43 - 00707462 _____ C:\Windows\system32\perfh007.dat
2013-10-21 16:03 - 2011-04-12 09:43 - 00153054 _____ C:\Windows\system32\perfc007.dat
2013-10-21 16:03 - 2009-07-14 07:13 - 01642812 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-21 16:01 - 2013-10-21 16:01 - 00000876 _____ C:\Users\Felix\Desktop\JRT.txt
2013-10-21 15:59 - 2013-07-19 20:33 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-21 15:59 - 2012-02-10 20:50 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Skype
2013-10-21 15:58 - 2013-10-01 17:03 - 00006189 _____ C:\Windows\setupact.log
2013-10-21 15:58 - 2012-05-28 16:43 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-21 15:58 - 2012-01-31 04:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-21 15:58 - 2012-01-30 11:31 - 01584186 _____ C:\Windows\WindowsUpdate.log
2013-10-21 15:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-21 15:58 - 2009-07-14 06:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-21 15:58 - 2009-07-14 06:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-21 15:52 - 2013-10-21 15:52 - 00004376 _____ C:\Users\Felix\Desktop\AdwCleaner[S0].txt
2013-10-21 15:50 - 2013-10-21 15:48 - 00000000 ____D C:\AdwCleaner
2013-10-21 15:49 - 2013-07-19 20:33 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-21 15:38 - 2013-10-21 15:38 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-21 15:38 - 2013-10-21 15:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-21 15:35 - 2013-10-21 15:37 - 01060070 _____ C:\Users\Felix\Desktop\adwcleaner.exe
2013-10-21 15:35 - 2013-10-21 15:37 - 01033335 _____ (Thisisu) C:\Users\Felix\Desktop\JRT.exe
2013-10-21 15:28 - 2012-04-02 14:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-20 21:14 - 2013-09-24 19:49 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Guild Wars 2
2013-10-20 21:14 - 2013-07-19 11:00 - 00000000 ____D C:\Users\Felix\Documents\Nexus Mod Manager
2013-10-20 21:14 - 2013-04-25 17:52 - 00000000 ____D C:\Users\Felix\AppData\Local\Skyrim
2013-10-20 20:30 - 2013-10-02 14:08 - 00002022 _____ C:\Windows\PFRO.log
2013-10-20 20:29 - 2013-10-20 20:03 - 00000000 ____D C:\Qoobox
2013-10-20 20:28 - 2013-10-20 20:28 - 00032440 _____ C:\ComboFix.txt
2013-10-20 20:28 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-10-20 20:24 - 2013-10-20 20:03 - 00000000 ____D C:\Windows\erdnt
2013-10-20 20:15 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-10-20 20:00 - 2013-10-20 20:03 - 05135479 ____R (Swearware) C:\Users\Felix\Desktop\ComboFix.exe
2013-10-20 19:57 - 2012-03-26 21:23 - 00000000 ____D C:\Users\Felix\AppData\Local\PMB Files
2013-10-20 19:57 - 2012-03-26 21:23 - 00000000 ____D C:\ProgramData\PMB Files
2013-10-20 10:22 - 2013-10-20 10:22 - 00031730 _____ C:\Users\Felix\Desktop\Addition.txt
2013-10-20 10:21 - 2013-10-20 10:21 - 00000000 ____D C:\FRST
2013-10-19 15:04 - 2012-11-23 18:41 - 00000000 ____D C:\Users\Felix\AppData\Local\CrashDumps
2013-10-18 22:43 - 2013-10-18 20:20 - 00000000 ____D C:\Users\Felix\Documents\Endless Space
2013-10-18 19:49 - 2013-10-18 19:48 - 00018473 _____ C:\Windows\DirectX.log
2013-10-17 20:44 - 2013-07-19 20:33 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-17 20:44 - 2013-07-19 20:33 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 17:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-12 08:35 - 2012-02-10 20:50 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-12 08:35 - 2012-02-10 20:50 - 00000000 ____D C:\ProgramData\Skype
2013-10-11 19:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-11 19:41 - 2013-03-19 20:56 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn Hamachi
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 16:28 - 2012-04-02 14:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 16:28 - 2012-04-02 14:48 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-10 16:28 - 2012-02-10 20:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 17:01 - 2013-06-09 11:24 - 04939648 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 17:00 - 2012-05-09 21:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-09 16:47 - 2012-02-12 16:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-09 16:45 - 2012-05-09 21:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 16:44 - 2012-12-16 23:22 - 01619770 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-09 16:41 - 2013-07-10 13:52 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 16:40 - 2012-02-11 11:39 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-07 14:54 - 2012-02-10 23:59 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-01 17:05 - 2013-01-31 15:01 - 00000000 ____D C:\Users\Felix\AppData\Local\NVIDIA
2013-10-01 17:04 - 2013-10-01 17:04 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-10-01 17:04 - 2012-01-31 04:03 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-10-01 17:04 - 2012-01-31 04:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-10-01 17:04 - 2012-01-31 04:00 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-10-01 17:03 - 2013-10-01 17:03 - 00000000 _____ C:\Windows\setuperr.log
2013-10-01 16:52 - 2012-11-23 18:10 - 00000000 ____D C:\Windows\Minidump
2013-10-01 16:52 - 2012-01-30 11:23 - 00000000 ____D C:\Windows\Panther
2013-10-01 16:49 - 2013-10-01 16:49 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-01 16:49 - 2013-10-01 16:49 - 00000000 ____D C:\Program Files\CCleaner
2013-10-01 16:21 - 2013-10-01 16:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-10-01 16:01 - 2013-10-01 15:58 - 00000000 ____D C:\Users\Felix\Documents\Battlefield 4
2013-09-29 19:24 - 2013-09-29 19:24 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-29 19:24 - 2012-02-11 01:25 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-09-29 19:24 - 2012-02-11 01:12 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-09-29 19:24 - 2012-02-11 01:12 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-09-29 19:24 - 2012-02-11 01:12 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-09-29 14:21 - 2013-09-29 14:21 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2013-09-29 14:21 - 2012-08-22 18:07 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-09-27 10:57 - 2013-10-01 16:25 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 22925088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 18229224 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 15832920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 12528416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-27 10:57 - 2013-10-01 16:25 - 11345168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 11292144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 09480840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 09436544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 03130144 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 03121952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02945312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02745632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02682816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433140.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433140.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01239304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00654624 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00559904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-27 10:57 - 2012-08-21 21:16 - 30334752 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-27 10:57 - 2012-02-24 20:53 - 01432408 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 18259624 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 03052616 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 00023307 _____ C:\Windows\system32\nvinfo.pb
2013-09-27 09:45 - 2012-01-31 04:02 - 06641440 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-27 09:45 - 2012-01-31 04:02 - 03483424 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-27 09:44 - 2012-01-31 04:02 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-27 02:37 - 2013-09-27 02:37 - 00587040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-26 15:32 - 2012-02-24 20:55 - 03386608 _____ C:\Windows\system32\nvcoproc.bin
2013-09-24 19:49 - 2012-08-21 15:45 - 00000000 ____D C:\Users\Felix\Documents\Guild Wars 2
2013-09-22 22:36 - 2012-02-11 03:33 - 00000000 ____D C:\Users\Felix\Documents\My Games
2013-09-22 22:18 - 2013-09-22 22:18 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Doublefine
2013-09-22 17:43 - 2013-10-09 16:44 - 17833984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-22 17:01 - 2013-10-09 16:44 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-22 16:42 - 2013-10-09 16:44 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-22 16:36 - 2013-10-09 16:44 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-22 16:33 - 2013-10-09 16:44 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-22 16:33 - 2013-10-09 16:44 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-22 16:30 - 2013-10-09 16:44 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-22 16:27 - 2013-10-09 16:44 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-22 16:23 - 2013-10-09 16:44 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-22 16:22 - 2013-10-09 16:44 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-22 16:21 - 2013-10-09 16:44 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-22 16:19 - 2013-10-09 16:44 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-22 16:19 - 2013-10-09 16:44 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-22 16:16 - 2013-10-09 16:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-22 16:15 - 2013-10-09 16:44 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-22 16:07 - 2013-10-09 16:44 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-22 12:29 - 2013-10-09 16:44 - 12336128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-22 12:22 - 2013-10-09 16:44 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-22 12:22 - 2013-10-09 16:44 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-22 12:14 - 2013-10-09 16:44 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-22 12:13 - 2013-10-09 16:44 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-22 12:13 - 2013-10-09 16:44 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-22 12:12 - 2013-10-09 16:44 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-22 12:09 - 2013-10-09 16:44 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-22 12:08 - 2013-10-09 16:44 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-22 12:07 - 2013-10-09 16:44 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-22 12:06 - 2013-10-09 16:44 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-22 12:05 - 2013-10-09 16:44 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-22 12:03 - 2013-10-09 16:44 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-22 12:03 - 2013-10-09 16:44 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-22 12:03 - 2013-10-09 16:44 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-22 11:59 - 2013-10-09 16:44 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
Some content of TEMP:
====================
C:\Users\Felix\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-13 17:04
==================== End Of Log ============================
|
|
22.10.2013, 07:30
| #8 |
| /// the machine /// TB-Ausbilder | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf)ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.10.2013, 04:24
| #9 |
| | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Hier die Ergebnisse von ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=d2dd50b9ed2c2b48888f0136ca3feef4
# engine=15590
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-23 02:00:45
# local_time=2013-10-23 04:00:45 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3591 16777213 100 91 1253170 145090230 0 0
# compatibility_mode=5893 16776574 100 94 9038356 134123495 0 0
# scanned=520377
# found=1
# cleaned=0
# scan_time=17781
sh=1FC8EDDDFD4052E2B46C5E07D7B2B1237FDB337D ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="D:\FELIX-PC\Backup Set 2013-02-12 235435\Backup Files 2013-02-12 235435\Backup files 6.zip"
Code:
ATTFilter Results of screen317's Security Check version 0.99.74
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Norton Internet Security
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
SpywareBlaster 5.0
Java 7 Update 25
Java version out of Date!
Adobe Flash Player 11.9.900.117
Adobe Reader 10.1.8 Adobe Reader out of Date!
Google Chrome 30.0.1599.101
Google Chrome 30.0.1599.69
````````Process Check: objlist.exe by Laurent````````
Norton ccSvcHst.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-10-2013
Ran by Felix (administrator) on FELIX-PC on 23-10-2013 05:20:56
Running from C:\Users\Felix\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) D:\Felix\Programme\Hamachi\hamachi-2.exe
(LogMeIn, Inc.) D:\Felix\Programme\Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7302\Monitor.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() D:\Felix\Programme\puush\puush.exe
(Valve Corporation) D:\Spiele\Steam\Steam.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDWebCam.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [PAC7302_Monitor] - C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-27] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
HKCU\...\Run: [B144E092EADCA0B5E85681614B171BAF8D0F881F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752 2013-10-09] (Google Inc.)
HKCU\...\Run: [puush] - D:\Felix\Programme\puush\puush.exe [567880 2013-08-19] ()
HKCU\...\Run: [Steam] - D:\Spiele\Steam\steam.exe [1813928 2013-10-09] (Valve Corporation)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x952CA7BB21E8CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Chrome:
=======
CHR HomePage: hxxp://www.youtube.com/feed/subscriptions
CHR RestoreOnStartup: "hxxp://www.youtube.com/feed/subscriptions"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\Felix\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Felix\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Felix\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Unity Player) - C:\Users\Felix\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Kalydo Player Plugin for Mozilla) - C:\Users\Felix\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (AmazonMP3DownloaderPlugin) - D:\Felix\Programme\AmazonMP3Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
CHR Extension: (Google Docs) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (YouTube Smart Pause) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcflkimagfnicklojfonbbcppnikogih\1.1.9_0
CHR Extension: (AdBlock) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (Looper for YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggpfpnahkgpnindfkdncknoldgnccdg\4.9.6_0
CHR Extension: (SmallringFX DarkBlue Theme) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfijmgohofmpjlcgmjplbpmkpchdhpk\1.7_0
CHR Extension: (Save as PDF) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdjmbiefanbdgnkcikhllpmjnnllbbc\1.7_0
CHR Extension: (Skype Click to Call) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0
CHR Extension: (FlashControl) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe\3.3.15_0
CHR Extension: (Norton Identity Protection) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0
CHR Extension: (Downloads) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngbcgifdaopbfflfhbcfeomijfbbcadi\1.5_0
CHR Extension: (dict-cc) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknonnojlmhnmjhpeokdbeineeajcemh\1.6.88_0
CHR Extension: (SwiftPreview) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nphfkpgklibhnhgegdblhnhicgfginnj\2.2.4_0
CHR Extension: (YouTube Unblocker) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.5_0
CHR Extension: (ScriptSafe) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0
CHR Extension: (Gmail) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-07-04] (Advanced Micro Devices, Inc.)
S3 COMSysApp; C:\Windows\SysWow64\dllhost.exe [7168 2009-07-14] (Microsoft Corporation)
R2 Hamachi2Svc; D:\Felix\Programme\Hamachi\hamachi-2.exe [2746704 2013-10-01] (LogMeIn Inc.)
S3 MatSvc; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [343856 2011-06-13] (Microsoft Corporation)
S3 msiserver; C:\Windows\SysWow64\msiexec.exe [73216 2010-11-21] (Microsoft Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-29] ()
S3 TunngleService; D:\Felix\Programme\Tunngle\TnglCtrl.exe [759192 2013-09-03] (Tunngle.net GmbH)
S4 WSearch; C:\Windows\SysWow64\SearchIndexer.exe [427520 2011-05-04] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-02] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\IPSDefs\20131022.001\IDSvia64.sys [521816 2013-10-17] (Symantec Corporation)
S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)
S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20131022.008\ENG64.SYS [126040 2013-09-02] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20131022.008\EX64.SYS [2099288 2013-09-02] (Symantec Corporation)
S3 NTIOLib_1_0_4; D:\Felix\Programme\Live Update 5\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7693v1B0\NTIOLib_X64.sys [11888 2011-01-06] (MSI)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
R3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527872 2007-11-08] (PixArt Imaging Inc.)
R3 PAC7302; C:\Windows\SysWow64\Drivers\PAC7302.SYS [454656 2007-11-08] (PixArt Imaging Inc.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MSI_MSIBIOS_010507; \??\D:\Felix\Programme\MSI\Live Update 5\msibios64_100507.sys [x]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-23 05:20 - 2013-10-23 05:20 - 01954682 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2013-10-23 05:13 - 2013-10-23 05:13 - 00000916 _____ C:\Users\Felix\Desktop\ESET.TXT
2013-10-22 15:20 - 2013-10-22 15:20 - 00891167 _____ C:\Users\Felix\Desktop\SecurityCheck.exe
2013-10-21 16:01 - 2013-10-21 16:01 - 00000876 _____ C:\Users\Felix\Desktop\JRT.txt
2013-10-21 15:52 - 2013-10-21 15:52 - 00004376 _____ C:\Users\Felix\Desktop\AdwCleaner[S0].txt
2013-10-21 15:48 - 2013-10-21 15:50 - 00000000 ____D C:\AdwCleaner
2013-10-21 15:37 - 2013-10-21 15:35 - 01060070 _____ C:\Users\Felix\Desktop\adwcleaner.exe
2013-10-21 15:37 - 2013-10-21 15:35 - 01033335 _____ (Thisisu) C:\Users\Felix\Desktop\JRT.exe
2013-10-20 20:28 - 2013-10-20 20:28 - 00032440 _____ C:\ComboFix.txt
2013-10-20 20:04 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-10-20 20:04 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-10-20 20:04 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-10-20 20:04 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-10-20 20:03 - 2013-10-20 20:29 - 00000000 ____D C:\Qoobox
2013-10-20 20:03 - 2013-10-20 20:24 - 00000000 ____D C:\Windows\erdnt
2013-10-20 20:03 - 2013-10-20 20:00 - 05135479 ____R (Swearware) C:\Users\Felix\Desktop\ComboFix.exe
2013-10-20 10:22 - 2013-10-20 10:22 - 00031730 _____ C:\Users\Felix\Desktop\Addition.txt
2013-10-20 10:21 - 2013-10-20 10:21 - 00000000 ____D C:\FRST
2013-10-18 20:20 - 2013-10-18 22:43 - 00000000 ____D C:\Users\Felix\Documents\Endless Space
2013-10-18 19:48 - 2013-10-18 19:49 - 00018473 _____ C:\Windows\DirectX.log
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-09 16:44 - 2013-09-22 17:43 - 17833984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 16:44 - 2013-09-22 17:01 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 16:44 - 2013-09-22 16:42 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 16:44 - 2013-09-22 16:36 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 16:44 - 2013-09-22 16:33 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-09 16:44 - 2013-09-22 16:33 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 16:44 - 2013-09-22 16:30 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-09 16:44 - 2013-09-22 16:27 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 16:44 - 2013-09-22 16:23 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-09 16:44 - 2013-09-22 16:22 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 16:44 - 2013-09-22 16:21 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-09 16:44 - 2013-09-22 16:19 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 16:44 - 2013-09-22 16:19 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 16:44 - 2013-09-22 16:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-09 16:44 - 2013-09-22 16:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 16:44 - 2013-09-22 16:07 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 16:44 - 2013-09-22 12:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 16:44 - 2013-09-22 12:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 16:44 - 2013-09-22 12:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 16:44 - 2013-09-22 12:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-10-09 16:44 - 2013-09-22 12:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 16:44 - 2013-09-22 12:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 16:44 - 2013-09-22 12:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-10-09 16:44 - 2013-09-22 12:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 16:44 - 2013-09-22 12:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-10-09 16:44 - 2013-09-22 12:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 16:44 - 2013-09-22 12:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-10-09 16:44 - 2013-09-22 12:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 16:44 - 2013-09-22 12:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 16:44 - 2013-09-22 12:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 16:44 - 2013-09-22 12:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-10-09 16:44 - 2013-09-22 11:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 16:37 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 16:37 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 16:37 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 16:37 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 16:37 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 16:37 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 16:37 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 16:37 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 16:37 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 16:37 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 16:37 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 16:37 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 16:37 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 16:37 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 16:37 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 16:37 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 16:37 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 16:37 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 16:37 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 16:37 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 16:37 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 16:37 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 16:37 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 16:37 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 16:37 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 16:37 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 16:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 16:37 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 16:37 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 16:37 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 16:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 16:37 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 16:37 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 16:37 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 16:37 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 16:37 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 16:37 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 16:37 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 16:37 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 16:37 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 16:37 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 16:37 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 16:37 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 16:37 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 16:37 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 16:36 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 16:36 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 16:36 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-02 14:08 - 2013-10-20 20:30 - 00002022 _____ C:\Windows\PFRO.log
2013-10-01 17:04 - 2013-10-01 17:04 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-10-01 17:04 - 2012-02-12 16:50 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-10-01 17:04 - 2012-02-11 23:22 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-10-01 17:04 - 2012-01-31 04:05 - 00000000 ____D C:\Users\UpdatusUser\Desktop\extra Software
2013-10-01 17:04 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-01 17:04 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-01 17:03 - 2013-10-22 22:59 - 00006525 _____ C:\Windows\setupact.log
2013-10-01 17:03 - 2013-10-01 17:03 - 00000000 _____ C:\Windows\setuperr.log
2013-10-01 17:03 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-10-01 17:03 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-10-01 17:03 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-10-01 16:49 - 2013-10-01 16:49 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-01 16:49 - 2013-10-01 16:49 - 00000000 ____D C:\Program Files\CCleaner
2013-10-01 16:25 - 2013-09-27 10:57 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 22925088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 18229224 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 15832920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 12528416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-10-01 16:25 - 2013-09-27 10:57 - 11345168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 11292144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 09480840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 09436544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 03130144 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 03121952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02945312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02745632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 02682816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433140.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433140.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 01239304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00654624 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00559904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-10-01 16:25 - 2013-09-27 10:57 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-10-01 16:21 - 2013-10-01 16:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-10-01 16:20 - 2013-09-12 10:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-10-01 16:20 - 2013-09-12 10:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-10-01 16:20 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-10-01 16:20 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-10-01 15:58 - 2013-10-01 16:01 - 00000000 ____D C:\Users\Felix\Documents\Battlefield 4
2013-09-29 19:24 - 2013-09-29 19:24 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-29 14:21 - 2013-09-29 14:21 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2013-09-27 02:37 - 2013-09-27 02:37 - 00587040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-24 19:49 - 2013-10-20 21:14 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Guild Wars 2
==================== One Month Modified Files and Folders =======
2013-10-23 05:20 - 2013-10-23 05:20 - 01954682 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2013-10-23 05:13 - 2013-10-23 05:13 - 00000916 _____ C:\Users\Felix\Desktop\ESET.TXT
2013-10-23 04:49 - 2013-07-19 20:33 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-23 04:28 - 2012-04-02 14:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-22 23:07 - 2009-07-14 06:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-22 23:07 - 2009-07-14 06:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-22 23:04 - 2011-04-12 09:43 - 00707462 _____ C:\Windows\system32\perfh007.dat
2013-10-22 23:04 - 2011-04-12 09:43 - 00153054 _____ C:\Windows\system32\perfc007.dat
2013-10-22 23:04 - 2009-07-14 07:13 - 01642812 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-22 23:02 - 2012-01-30 11:31 - 01618158 _____ C:\Windows\WindowsUpdate.log
2013-10-22 23:00 - 2013-07-19 20:33 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-22 23:00 - 2012-02-10 20:50 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Skype
2013-10-22 22:59 - 2013-10-01 17:03 - 00006525 _____ C:\Windows\setupact.log
2013-10-22 22:59 - 2012-05-28 16:43 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-22 22:59 - 2012-01-31 04:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-22 22:59 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-22 15:20 - 2013-10-22 15:20 - 00891167 _____ C:\Users\Felix\Desktop\SecurityCheck.exe
2013-10-21 17:58 - 2012-08-31 23:01 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Audacity
2013-10-21 17:52 - 2012-03-26 21:23 - 00000000 ____D C:\Users\Felix\AppData\Local\PMB Files
2013-10-21 17:52 - 2012-03-26 21:23 - 00000000 ____D C:\ProgramData\PMB Files
2013-10-21 16:01 - 2013-10-21 16:01 - 00000876 _____ C:\Users\Felix\Desktop\JRT.txt
2013-10-21 15:52 - 2013-10-21 15:52 - 00004376 _____ C:\Users\Felix\Desktop\AdwCleaner[S0].txt
2013-10-21 15:50 - 2013-10-21 15:48 - 00000000 ____D C:\AdwCleaner
2013-10-21 15:35 - 2013-10-21 15:37 - 01060070 _____ C:\Users\Felix\Desktop\adwcleaner.exe
2013-10-21 15:35 - 2013-10-21 15:37 - 01033335 _____ (Thisisu) C:\Users\Felix\Desktop\JRT.exe
2013-10-20 21:14 - 2013-09-24 19:49 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Guild Wars 2
2013-10-20 21:14 - 2013-07-19 11:00 - 00000000 ____D C:\Users\Felix\Documents\Nexus Mod Manager
2013-10-20 21:14 - 2013-04-25 17:52 - 00000000 ____D C:\Users\Felix\AppData\Local\Skyrim
2013-10-20 20:30 - 2013-10-02 14:08 - 00002022 _____ C:\Windows\PFRO.log
2013-10-20 20:29 - 2013-10-20 20:03 - 00000000 ____D C:\Qoobox
2013-10-20 20:28 - 2013-10-20 20:28 - 00032440 _____ C:\ComboFix.txt
2013-10-20 20:28 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-10-20 20:24 - 2013-10-20 20:03 - 00000000 ____D C:\Windows\erdnt
2013-10-20 20:15 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-10-20 20:00 - 2013-10-20 20:03 - 05135479 ____R (Swearware) C:\Users\Felix\Desktop\ComboFix.exe
2013-10-20 10:22 - 2013-10-20 10:22 - 00031730 _____ C:\Users\Felix\Desktop\Addition.txt
2013-10-20 10:21 - 2013-10-20 10:21 - 00000000 ____D C:\FRST
2013-10-19 15:04 - 2012-11-23 18:41 - 00000000 ____D C:\Users\Felix\AppData\Local\CrashDumps
2013-10-18 22:43 - 2013-10-18 20:20 - 00000000 ____D C:\Users\Felix\Documents\Endless Space
2013-10-18 19:49 - 2013-10-18 19:48 - 00018473 _____ C:\Windows\DirectX.log
2013-10-17 20:44 - 2013-07-19 20:33 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-17 20:44 - 2013-07-19 20:33 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 17:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-12 08:35 - 2012-02-10 20:50 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-12 08:35 - 2012-02-10 20:50 - 00000000 ____D C:\ProgramData\Skype
2013-10-11 19:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-11 19:41 - 2013-03-19 20:56 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn Hamachi
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\Users\Felix\AppData\Local\LogMeIn
2013-10-11 00:01 - 2013-10-11 00:01 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-10 16:28 - 2012-04-02 14:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 16:28 - 2012-04-02 14:48 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-10 16:28 - 2012-02-10 20:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 17:01 - 2013-06-09 11:24 - 04939648 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 17:00 - 2012-05-09 21:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-09 16:47 - 2012-02-12 16:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-09 16:45 - 2012-05-09 21:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 16:44 - 2012-12-16 23:22 - 01619770 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-09 16:41 - 2013-07-10 13:52 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 16:40 - 2012-02-11 11:39 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-07 14:54 - 2012-02-10 23:59 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-01 17:05 - 2013-01-31 15:01 - 00000000 ____D C:\Users\Felix\AppData\Local\NVIDIA
2013-10-01 17:04 - 2013-10-01 17:04 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-10-01 17:04 - 2013-10-01 17:04 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-10-01 17:04 - 2012-01-31 04:03 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-10-01 17:04 - 2012-01-31 04:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-10-01 17:04 - 2012-01-31 04:00 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-10-01 17:03 - 2013-10-01 17:03 - 00000000 _____ C:\Windows\setuperr.log
2013-10-01 16:52 - 2012-11-23 18:10 - 00000000 ____D C:\Windows\Minidump
2013-10-01 16:52 - 2012-01-30 11:23 - 00000000 ____D C:\Windows\Panther
2013-10-01 16:49 - 2013-10-01 16:49 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-01 16:49 - 2013-10-01 16:49 - 00000000 ____D C:\Program Files\CCleaner
2013-10-01 16:21 - 2013-10-01 16:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-10-01 16:01 - 2013-10-01 15:58 - 00000000 ____D C:\Users\Felix\Documents\Battlefield 4
2013-09-29 19:24 - 2013-09-29 19:24 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-29 19:24 - 2012-02-11 01:25 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-09-29 19:24 - 2012-02-11 01:12 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-09-29 19:24 - 2012-02-11 01:12 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-09-29 19:24 - 2012-02-11 01:12 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-09-29 14:21 - 2013-09-29 14:21 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2013-09-29 14:21 - 2012-08-22 18:07 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-09-27 10:57 - 2013-10-01 16:25 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 22925088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 18229224 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 15832920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 12528416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-27 10:57 - 2013-10-01 16:25 - 11345168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 11292144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 09480840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 09436544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 03130144 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 03121952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02945312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02745632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 02682816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433140.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433140.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 01239304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00654624 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00559904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-27 10:57 - 2013-10-01 16:25 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-27 10:57 - 2012-08-21 21:16 - 30334752 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-27 10:57 - 2012-02-24 20:53 - 01432408 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 18259624 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 03052616 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-27 10:57 - 2012-01-31 04:01 - 00023307 _____ C:\Windows\system32\nvinfo.pb
2013-09-27 09:45 - 2012-01-31 04:02 - 06641440 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-27 09:45 - 2012-01-31 04:02 - 03483424 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-27 09:44 - 2012-01-31 04:02 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-27 09:44 - 2012-01-31 04:02 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-27 02:37 - 2013-09-27 02:37 - 00587040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-26 15:32 - 2012-02-24 20:55 - 03386608 _____ C:\Windows\system32\nvcoproc.bin
2013-09-24 19:49 - 2012-08-21 15:45 - 00000000 ____D C:\Users\Felix\Documents\Guild Wars 2
Some content of TEMP:
====================
C:\Users\Felix\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-13 17:04
==================== End Of Log ============================
Ansonsten bin ich mir noch nicht sicher... Vor der Anwendung von ESET blieb er wieder hängen. |
|
23.10.2013, 14:31
| #10 |
| /// the machine /// TB-Ausbilder | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Wann bleibt er denn immer hängen? Was machst Du davor?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.10.2013, 14:40
| #11 |
| | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Hauptsächlich, wenn ich im Internet-Browser unterwegs bin. Dies passiert dann oft, wenn ich etwas anklicke. Ich kann einfach nicht nachvollziehen, was dort schief läuft :/ |
|
24.10.2013, 06:44
| #12 |
| /// the machine /// TB-Ausbilder | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) nur in einem Browser oder in allen? Was klickst Du? Einfach ne neue Seite oder Flash-Inhalte?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.10.2013, 14:20
| #13 |
| | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Also angefangen hatte es mit dem Umsteigen auf Firefox, jedoch habe ich dazwischen auch mit Opera und Chrome (aktueller Browser) hantiert. Dies leider mit denselben Freezes. Genau weiß ich jetzt gar nicht was ich immer anklicke .... Aber ich entsinne mich daran, dass es ein paar mal beim Öffnen eines neuen Tabs oder beim 'Zurückgehen' geschah. Zu den Flash-Inhalten weiß ich jetzt leider nichts mehr... |
|
25.10.2013, 08:45
| #14 |
| /// the machine /// TB-Ausbilder | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Deaktiviere und/oder deinstalliere dein AV Programm, teste die Browser nochmal.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
28.10.2013, 15:08
| #15 |
| | PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) Also, bei meinem aktuellen Browser ist nichts mehr passiert, seitdem ich mein Antivirenprogramm deaktiviert habe. Es scheint wohl auch daran zu liegen, da ein Bekannter das gleiche Problem hat und ebenfalls NIS nutzt. |
|
| Themen zu PC friert öfters ein - Neustart erforderlich (manchmal nur über Reset-Knopf) |
| amd, bild, bluescreens, cpu-auslastung, diverse, einfrieren, erneut, friert, funktioniert, geräusche, länger, lösung, neustart, neustarten, nichts, nutzen, platte, probleme, professional, skype, system, verändert, win, windows, windows 7 |
Linear-Darstellung
