Habe seit einigen Wochen das Problem das beim Starten von Windows 1. Er ewigkeiten benötigt um überhaupt erst hochzufahren und dort nach dem Ich es mehrmals probiert habe Malwarebytes zu starten es sich sofort wieder schließt auch wenn ich nach Antivirenprogrammen google um sie zu Downloaden schließt sich der Browser plötzlich habe schon im abgesicherten Modus einen Scan durchgeführt habe leider den Log nicht mehr. Aber nun kann ich Avira runterladen und starten als er den Scan abbrach und mehrere Fünde hatte unter anderem Dropper.gen aber nun wenn ich versuchen z.b League of Legends zu starten oder irgendein anderes Spiel reagiert mein Laptop plötzlich nicht mehr und nichts geschieht mehr. Habe nun es über Avira Rescue probiert aber wenn ich dort einen Scan durchführe auf der Festplatte C:/ ist er sofort fertig und bei dursuchten Dateien steht:Berechne. Bitte um schnelle Hilfe
M.f.G
Braiinzz
Hier die Logfiles(sorry wusste nicht wie Spoiler zu Aktivieren sind)OTL Logfile:

OTL logfile created on: 21.11.2013 23:44:14 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Dávid\Downloads
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,33 Gb Total Physical Memory | 1,38 Gb Available Physical Memory | 59,22% Memory free
4,66 Gb Paging File | 3,31 Gb Available in Paging File | 70,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,66 Gb Total Space | 73,37 Gb Free Space | 15,76% Space Free | Partition Type: NTFS
 
Computer Name: LALA | User Name: Dávid | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.11.21 23:42:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dávid\Downloads\OTL.exe
PRC - [2013.11.16 02:33:30 | 001,168,896 | ---- | M] (Spotify Ltd) -- C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2013.11.11 15:37:46 | 001,616,208 | ---- | M] (LogMeIn Inc.) -- C:\Programme\LogMeIn Hamachi\hamachi-2.exe
PRC - [2013.10.31 19:32:00 | 000,972,872 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avmailc7.exe
PRC - [2013.10.31 19:25:40 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2013.10.31 19:25:19 | 001,164,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avwebg7.exe
PRC - [2013.10.31 19:25:19 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2013.10.31 19:25:19 | 000,431,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2013.10.31 19:25:18 | 000,683,576 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2013.10.23 20:52:09 | 000,166,352 | ---- | M] (APN LLC.) -- C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe
PRC - [2013.10.23 20:52:01 | 001,673,680 | ---- | M] (APN) -- C:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
PRC - [2013.10.11 11:51:12 | 000,375,056 | ---- | M] (LogMeIn, Inc.) -- C:\Programme\LogMeIn Hamachi\LMIGuardianSvc.exe
PRC - [2013.10.11 03:02:19 | 000,237,960 | ---- | M] (Google Inc.) -- C:\Programme\Google\Update\1.3.21.165\GoogleCrashHandler.exe
PRC - [2013.09.05 15:04:00 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013.08.30 18:45:24 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2013.08.30 18:00:35 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Programme\Java\jre7\bin\javaw.exe
PRC - [2013.08.29 19:14:20 | 000,010,752 | ---- | M] (Microsoft) -- C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe
PRC - [2013.08.29 17:59:23 | 006,471,168 | ---- | M] (Broadcom Corporation) -- C:\Programme\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
PRC - [2013.08.29 17:59:23 | 000,040,960 | ---- | M] (Broadcom Corporation) -- C:\Programme\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
PRC - [2013.08.29 17:59:22 | 005,179,392 | ---- | M] (Broadcom Corporation) -- C:\Programme\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE
PRC - [2013.05.16 15:44:05 | 001,012,000 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013.05.16 15:38:39 | 001,826,592 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013.05.12 20:58:09 | 001,821,984 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvtray.exe
PRC - [2013.05.12 20:58:09 | 000,875,296 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2013.04.04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.04.24 13:37:56 | 000,169,752 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
PRC - [2012.02.01 15:29:58 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2012.02.01 15:29:56 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2009.07.14 02:14:47 | 001,121,280 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2009.07.14 02:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.07.14 02:14:15 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.08.30 18:37:02 | 000,489,472 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\fb404501f5f8f00036856f22001e0555\IAStorUtil.ni.dll
MOD - [2013.08.30 18:37:02 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\4efb7849701c36eae62ef0c44f5d8642\IAStorCommon.ni.dll
MOD - [2013.08.29 18:00:53 | 000,064,000 | ---- | M] () -- C:\Windows\assembly\GAC_32\bcmwlrmt\5.100.82.0__6d6a20262490fcdc\bcmwlrmt.dll
MOD - [2013.08.08 21:35:04 | 000,094,208 | ---- | M] () -- C:\Windows\System32\IccLibDll.dll
MOD - [2013.05.12 22:37:58 | 000,004,096 | ---- | M] () -- C:\Programme\NVIDIA Corporation\coprocmanager\detoured.dll
MOD - [2009.07.14 09:47:12 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009.07.14 09:47:11 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2009.07.14 05:43:36 | 011,804,160 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\3871fc2b96345aa6f3be81d9e3c97160\System.Web.ni.dll
MOD - [2009.07.14 05:43:30 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\4bdeb88758dccd625f4703ed77aaf348\System.Runtime.Remoting.ni.dll
MOD - [2009.07.14 05:43:04 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\fedf1ba58dced4f0b3f8c457648ceed9\System.Windows.Forms.ni.dll
MOD - [2009.07.14 05:42:57 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ead6be8b410d56b5576b10e56af2c180\System.Drawing.ni.dll
MOD - [2009.07.14 05:42:45 | 003,313,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\c2f9dd7db911053edcaaadf5fefc500a\WindowsBase.ni.dll
MOD - [2009.07.14 05:42:40 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5dd9f783008543df3e642ff1e99de4e8\System.Xml.ni.dll
MOD - [2009.07.14 05:42:37 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\4b1350e31ff09cc583b34854816d8036\System.Configuration.ni.dll
MOD - [2009.07.14 05:42:36 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5ba3bf5367fc012300c6566f20cb7f54\System.ni.dll
MOD - [2009.07.14 05:42:30 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2013.11.16 02:59:11 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.11.11 15:37:46 | 001,616,208 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Programme\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013.10.31 19:32:00 | 000,972,872 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avmailc7.exe -- (AntiVirMailService)
SRV - [2013.10.31 19:25:40 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2013.10.31 19:25:19 | 001,164,360 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avwebg7.exe -- (AntiVirWebService)
SRV - [2013.10.31 19:25:19 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2013.10.30 20:25:56 | 000,566,696 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.10.23 20:52:09 | 000,166,352 | ---- | M] (APN LLC.) [Auto | Running] -- C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
SRV - [2013.10.18 04:09:49 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.10.11 11:51:12 | 000,375,056 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Programme\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2013.09.05 15:04:00 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013.09.05 09:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.08.30 18:45:24 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2013.08.29 19:14:20 | 000,010,752 | ---- | M] (Microsoft) [Auto | Running] -- C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe -- (Time)
SRV - [2013.08.29 17:59:23 | 000,040,960 | ---- | M] (Broadcom Corporation) [Auto | Running] -- C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE -- (wltrysvc)
SRV - [2013.08.12 01:50:28 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IntelCpHeciSvc.exe -- (cphs)
SRV - [2013.05.16 15:38:39 | 001,826,592 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013.04.04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012.04.24 13:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
SRV - [2012.02.01 15:29:58 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.07.14 02:14:47 | 001,121,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\vmnetadapter.sys -- (VMnetAdapter)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmci.sys -- (vmci)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\VBoxNetFlt.sys -- (VBoxNetFlt)
DRV - [2013.11.17 21:47:07 | 000,031,560 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamchameleon.sys -- (mbamchameleon)
DRV - [2013.11.01 17:09:10 | 000,114,960 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2013.11.01 17:09:10 | 000,094,480 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VBoxUSB.sys -- (VBoxUSB)
DRV - [2013.10.31 19:25:40 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2013.10.31 19:25:19 | 000,137,208 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2013.10.31 19:25:19 | 000,090,400 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2013.10.31 19:25:19 | 000,067,680 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\avnetflt.sys -- (avnetflt)
DRV - [2013.10.31 19:25:19 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2013.08.30 18:45:13 | 000,046,080 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (MEI)
DRV - [2013.08.29 17:59:22 | 000,017,728 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcmvwl32.sys -- (BcmVWL)
DRV - [2013.08.29 17:59:21 | 000,018,496 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bcm42rly.sys -- (BCM42RLY)
DRV - [2013.08.08 21:52:46 | 000,369,656 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcDAud.sys -- (IntcDAud)
DRV - [2013.05.12 22:37:58 | 009,053,984 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2013.05.12 22:37:58 | 000,025,376 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvpciflt.sys -- (nvpciflt)
DRV - [2013.04.10 15:00:52 | 000,062,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bScsiSDx.sys -- (bScsiSDx)
DRV - [2013.04.04 13:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012.08.13 09:59:38 | 000,064,088 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\b57xdbd.sys -- (b57xdbd)
DRV - [2012.08.13 09:59:38 | 000,018,520 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\b57xdmp.sys -- (b57xdmp)
DRV - [2012.06.18 15:20:48 | 000,046,168 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bScsiMSx.sys -- (bScsiMSx)
DRV - [2012.01.18 23:30:34 | 000,370,728 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x)
DRV - [2010.09.16 18:33:40 | 001,559,552 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athur.sys -- (athur)
DRV - [2009.07.14 02:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2009.07.14 02:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2009.07.14 02:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2009.07.14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009.07.14 00:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2009.03.18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-40972975-1608239604-2264794492-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-21-40972975-1608239604-2264794492-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-40972975-1608239604-2264794492-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-40972975-1608239604-2264794492-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = DF 03 F1 F8 AE CB CE 01  [binary data]
IE - HKU\S-1-5-21-40972975-1608239604-2264794492-1000\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
IE - HKU\S-1-5-21-40972975-1608239604-2264794492-1000\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = hxxp://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP49EF6E6E-0344-442B-B359-4DB414E8EEE7&q={searchTerms}&SSPV=
IE - HKU\S-1-5-21-40972975-1608239604-2264794492-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-40972975-1608239604-2264794492-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP49EF6E6E-0344-442B-B359-4DB414E8EEE7&SSPV="
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21
FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.12
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0.1
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\downloader@freeyoutubetomp3converter.org: C:\Program Files\FreeYouTubeToMP3TURBOConverter\Firefox [2013.10.03 14:34:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2013.09.30 08:30:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dávid\AppData\Roaming\mozilla\Extensions
[2013.11.18 20:56:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dávid\AppData\Roaming\mozilla\Firefox\Profiles\zo6r8odu.default\extensions
[2013.09.30 08:31:29 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Dávid\AppData\Roaming\mozilla\Firefox\Profiles\zo6r8odu.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013.10.23 20:52:51 | 001,048,572 | ---- | M] () (No name found) -- C:\Users\Dávid\AppData\Roaming\mozilla\firefox\profiles\zo6r8odu.default\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
[2013.10.10 00:44:39 | 000,915,554 | ---- | M] () (No name found) -- C:\Users\Dávid\AppData\Roaming\mozilla\firefox\profiles\zo6r8odu.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.10.18 05:54:56 | 000,282,570 | ---- | M] () (No name found) -- C:\Users\Dávid\AppData\Roaming\mozilla\firefox\profiles\zo6r8odu.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013.11.07 21:17:53 | 000,000,975 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\mozilla\firefox\profiles\zo6r8odu.default\searchplugins\conduit-search.xml
[2013.11.16 02:59:05 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
[2013.11.16 02:59:12 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\USERS\DáVID\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZO6R8ODU.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}
File not found (No name found) -- C:\USERS\DáVID\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZO6R8ODU.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781}.XPI
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: hxxp://www.google.com/
CHR - plugin: Erster Nutzer (Disabled) = C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Error reading preferences file
CHR - Extension: Google Docs = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google-Suche = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: AdBlock = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.13_0\
CHR - Extension: AdBlock = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.14_0\
CHR - Extension: AdBlock = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.6_0\
CHR - Extension: AdBlock = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.8_0\
CHR - Extension: AdBlock = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.8_1\
CHR - Extension: League of Legends(LoL) For New Tab = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\hagfodkdlfpceodghmlnbjafkcdjnifd\1.1.0_0\
CHR - Extension: Google Wallet = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0\
CHR - Extension: Google Wallet = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\
CHR - Extension: Google Wallet = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1\
CHR - Extension: Google Wallet = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\
CHR - Extension: Google Mail = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O4 - HKLM..\Run: [ApnTBMon] C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Programme\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE (Broadcom Corporation)
O4 - HKLM..\Run: [ETDCtrl] C:\Programme\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
O4 - HKLM..\Run: [InstallerLauncher] "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe" File not found
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Nvtmru] C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4 - HKU\S-1-5-21-40972975-1608239604-2264794492-1000..\Run: [Internal Configuration Serving State] C:\Users\Dávid\AppData\Roaming\udspu\\debuja.exe File not found
O4 - HKU\S-1-5-21-40972975-1608239604-2264794492-1000..\Run: [Spotify] C:\Users\Dávid\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-40972975-1608239604-2264794492-1000..\Run: [Spotify Web Helper] C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-40972975-1608239604-2264794492-1000..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-40972975-1608239604-2264794492-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Download Video - {B30C9F17-BF16-481e-BAEA-44A86128E1B4} - C:\Programme\FreeYouTubeToMP3TURBOConverter\ytmRunner.html ()
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1F161484-9BD0-44B3-9407-E340A93BE63D}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{33B365E0-2033-4D75-8068-73CEFAC621C7}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{50547C0E-BDCA-45F6-A967-386524E5C6FD}: NameServer = 192.168.178.30,192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5474695F-9400-4F02-9BCB-45EBB2E83CB8}: NameServer = 192.168.0.100,192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FEEBD60C-C4BC-4936-B2A6-C4461777F6C0}: DhcpNameServer = 192.168.42.129
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\Windows\system32\nvinit.dll) - C:\Windows\System32\nvinit.dll (NVIDIA Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.11.21 22:53:34 | 005,192,704 | ---- | C] (Geza Kovacs) -- C:\Users\Dávid\Documents\unetbootin-windows-585.exe
[2013.11.21 22:21:50 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013.11.21 22:19:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2013.11.19 20:49:45 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2013.11.19 20:35:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Steam
[2013.11.19 20:35:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2013.11.19 20:35:42 | 000,000,000 | ---D | C] -- C:\Program Files\Steam
[2013.11.19 00:34:41 | 000,000,000 | ---D | C] -- C:\Output
[2013.11.19 00:34:30 | 000,000,000 | ---D | C] -- C:\MP4ToMP3Converter
[2013.11.19 00:34:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP4 To MP3 Converter
[2013.11.18 22:03:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013.11.18 20:58:04 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Avira
[2013.11.18 20:56:45 | 000,000,000 | ---D | C] -- C:\ProgramData\AskPartnerNetwork
[2013.11.18 20:56:45 | 000,000,000 | ---D | C] -- C:\Program Files\AskPartnerNetwork
[2013.11.18 20:55:25 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
[2013.11.18 20:51:59 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2013.11.18 20:51:58 | 000,137,208 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avipbb.sys
[2013.11.18 20:51:58 | 000,090,400 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avgntflt.sys
[2013.11.18 20:51:58 | 000,067,680 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avnetflt.sys
[2013.11.18 20:51:58 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avkmgr.sys
[2013.11.18 20:51:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2013.11.18 20:51:57 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2013.11.17 22:19:48 | 000,000,000 | ---D | C] -- C:\ProgramData\webcam 7
[2013.11.17 21:46:37 | 000,000,000 | ---D | C] -- C:\Quarantine
[2013.11.17 21:42:44 | 000,000,000 | ---D | C] -- C:\Program Files\stinger
[2013.11.17 21:40:58 | 000,000,000 | ---D | C] -- C:\Program Files\Bitdefender
[2013.11.17 21:40:31 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\QuickScan
[2013.11.17 21:40:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Bitdefender
[2013.11.16 02:59:05 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.11.14 15:22:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2013.11.14 15:22:04 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2013.11.11 17:34:54 | 000,000,000 | ---D | C] -- C:\Users\Dávid\Documents\Virtual Machines
[2013.11.11 17:34:05 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\VMware
[2013.11.11 17:34:04 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\VMware
[2013.11.11 17:32:04 | 000,000,000 | ---D | C] -- C:\ProgramData\VMware
[2013.11.09 14:30:59 | 000,000,000 | ---D | C] -- C:\Users\Dávid\Backtrack
[2013.11.07 20:37:10 | 000,000,000 | ---D | C] -- C:\Users\Dávid\VirtualBox VMs
[2013.11.07 20:29:50 | 000,000,000 | ---D | C] -- C:\Users\Dávid\.VirtualBox
[2013.11.07 20:29:32 | 000,203,024 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\drivers\VBoxDrv.sys
[2013.11.07 20:29:20 | 000,103,696 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\drivers\VBoxUSBMon.sys
[2013.11.07 20:29:20 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2013.11.07 20:23:00 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\uTorrent
[2013.11.07 16:17:38 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2013.11.06 18:56:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ActivePerl 5.16.3 Build 1603
[2013.11.06 18:55:32 | 000,000,000 | ---D | C] -- C:\Perl
[2013.11.05 18:34:30 | 000,000,000 | ---D | C] -- C:\Riot Games
[2013.11.05 18:04:52 | 000,000,000 | ---D | C] -- C:\Users\Dávid\Documents\LOLReplay
[2013.11.05 18:04:34 | 000,000,000 | ---D | C] -- C:\Program Files\LOLReplay
[2013.11.05 15:21:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2013.11.05 15:21:56 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2013.11.05 15:21:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2013.11.01 17:09:10 | 000,114,960 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\drivers\VBoxNetAdp.sys
[2013.11.01 17:09:10 | 000,094,480 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\drivers\VBoxUSB.sys
[2013.10.27 16:30:49 | 000,000,000 | ---D | C] -- C:\Program Files\LoLOracle
[2013.10.27 16:30:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LoLOracle
[2013.10.23 05:25:27 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\udspu
[2013.10.23 05:24:39 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\buasep
 
========== Files - Modified Within 30 Days ==========
 
[2013.11.21 23:36:23 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.11.21 23:35:55 | 000,265,640 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.11.21 23:35:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.11.21 23:35:39 | 1878,278,144 | -HS- | M] () -- C:\hiberfil.sys
[2013.11.21 22:24:48 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.11.21 22:22:25 | 000,696,370 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.11.21 22:22:25 | 000,651,648 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.11.21 22:22:25 | 000,147,634 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.11.21 22:22:25 | 000,120,580 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.11.21 22:19:05 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.11.21 22:07:41 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.11.21 22:02:20 | 000,009,776 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.11.21 22:02:20 | 000,009,776 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.11.21 12:40:51 | 621,948,928 | ---- | M] () -- C:\Users\Dávid\Documents\rescue-system.iso
[2013.11.21 12:23:33 | 005,192,704 | ---- | M] (Geza Kovacs) -- C:\Users\Dávid\Documents\unetbootin-windows-585.exe
[2013.11.19 20:49:45 | 000,000,213 | ---- | M] () -- C:\Users\Dávid\Desktop\Counter-Strike Source.url
[2013.11.19 20:35:46 | 000,000,875 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2013.11.19 00:34:31 | 000,000,627 | ---- | M] () -- C:\Users\Public\Desktop\MP4 To MP3 Converter.lnk
[2013.11.18 22:03:24 | 000,002,012 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2013.11.18 20:56:37 | 000,099,263 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\cached-microdescs.new
[2013.11.18 20:56:35 | 000,985,751 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\cached-microdesc-consensus
[2013.11.18 20:56:27 | 000,005,061 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\state
[2013.11.18 20:55:49 | 002,586,358 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\cached-microdescs
[2013.11.18 20:55:41 | 000,000,000 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\lock
[2013.11.18 20:55:33 | 000,907,792 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62494732
[2013.11.18 20:55:33 | 000,907,792 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62492906
[2013.11.18 20:55:33 | 000,907,792 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62422105
[2013.11.18 20:55:33 | 000,907,792 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62414411
[2013.11.18 20:55:33 | 000,268,816 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E87193
[2013.11.18 20:55:33 | 000,268,816 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E83679
[2013.11.18 20:55:33 | 000,268,816 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E71720
[2013.11.18 20:55:33 | 000,268,816 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E54417
[2013.11.18 20:44:34 | 126,764,512 | ---- | M] () -- C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe
[2013.11.18 15:30:46 | 000,019,220 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\cached-certs
[2013.11.17 21:47:07 | 000,031,560 | ---- | M] () -- C:\Windows\System32\drivers\mbamchameleon.sys
[2013.11.17 21:40:59 | 000,258,301 | ---- | M] () -- C:\ProgramData\1384720831.bdinstall.bin
[2013.11.14 22:13:07 | 000,002,121 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013.11.10 12:07:12 | 000,321,536 | ---- | M] () -- C:\Windows\System32\LiveWrapRTSP.dll
[2013.11.07 21:14:48 | 000,337,424 | RHS- | M] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D7B57E5F440948
[2013.11.06 19:02:03 | 000,013,339 | ---- | M] () -- C:\Users\Dávid\Desktop\cmd - Verknüpfung.lnk
[2013.11.05 18:04:34 | 000,001,939 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
[2013.11.05 18:04:34 | 000,001,847 | ---- | M] () -- C:\Users\Public\Desktop\LOL Recorder.lnk
[2013.11.05 15:22:14 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2013.11.01 17:10:22 | 000,203,024 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\drivers\VBoxDrv.sys
[2013.11.01 17:09:10 | 000,114,960 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\drivers\VBoxNetAdp.sys
[2013.11.01 17:09:10 | 000,103,696 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\drivers\VBoxUSBMon.sys
[2013.11.01 17:09:10 | 000,094,480 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\drivers\VBoxUSB.sys
[2013.10.31 19:25:40 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2013.10.31 19:25:19 | 000,137,208 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avipbb.sys
[2013.10.31 19:25:19 | 000,090,400 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avgntflt.sys
[2013.10.31 19:25:19 | 000,067,680 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avnetflt.sys
[2013.10.31 19:25:19 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avkmgr.sys
[2013.10.27 16:30:49 | 000,000,942 | ---- | M] () -- C:\Users\Public\Desktop\LoLOracle.lnk
 
========== Files Created - No Company Name ==========
 
[2013.11.21 23:35:42 | 000,265,640 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.11.21 22:52:58 | 621,948,928 | ---- | C] () -- C:\Users\Dávid\Documents\rescue-system.iso
[2013.11.19 20:49:45 | 000,000,213 | ---- | C] () -- C:\Users\Dávid\Desktop\Counter-Strike Source.url
[2013.11.19 20:35:46 | 000,000,875 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2013.11.19 00:34:31 | 000,000,627 | ---- | C] () -- C:\Users\Public\Desktop\MP4 To MP3 Converter.lnk
[2013.11.18 20:55:33 | 000,907,792 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62494732
[2013.11.18 20:55:33 | 000,907,792 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62492906
[2013.11.18 20:55:33 | 000,907,792 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62422105
[2013.11.18 20:55:33 | 000,907,792 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62414411
[2013.11.18 20:55:33 | 000,268,816 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E87193
[2013.11.18 20:55:33 | 000,268,816 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E83679
[2013.11.18 20:55:33 | 000,268,816 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E71720
[2013.11.18 20:55:33 | 000,268,816 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E54417
[2013.11.18 20:52:16 | 000,002,012 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2013.11.18 20:46:06 | 126,764,512 | ---- | C] () -- C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe
[2013.11.17 21:40:59 | 000,258,301 | ---- | C] () -- C:\ProgramData\1384720831.bdinstall.bin
[2013.11.14 23:17:50 | 000,031,560 | ---- | C] () -- C:\Windows\System32\drivers\mbamchameleon.sys
[2013.11.10 18:30:27 | 000,001,939 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
[2013.11.10 12:07:12 | 000,321,536 | ---- | C] () -- C:\Windows\System32\LiveWrapRTSP.dll
[2013.11.07 21:14:48 | 000,337,424 | RHS- | C] () -- C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D7B57E5F440948
[2013.11.07 16:50:34 | 002,586,358 | ---- | C] () -- C:\Users\Dávid\AppData\Roaming\cached-microdescs
[2013.11.07 16:20:38 | 000,099,263 | ---- | C] () -- C:\Users\Dávid\AppData\Roaming\cached-microdescs.new
[2013.11.07 16:20:35 | 000,985,751 | ---- | C] () -- C:\Users\Dávid\AppData\Roaming\cached-microdesc-consensus
[2013.11.07 16:20:35 | 000,019,220 | ---- | C] () -- C:\Users\Dávid\AppData\Roaming\cached-certs
[2013.11.07 16:20:31 | 000,005,061 | ---- | C] () -- C:\Users\Dávid\AppData\Roaming\state
[2013.11.07 16:20:31 | 000,000,000 | ---- | C] () -- C:\Users\Dávid\AppData\Roaming\lock
[2013.11.06 19:02:03 | 000,013,339 | ---- | C] () -- C:\Users\Dávid\Desktop\cmd - Verknüpfung.lnk
[2013.11.05 18:04:34 | 000,001,859 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
[2013.11.05 18:04:34 | 000,001,847 | ---- | C] () -- C:\Users\Public\Desktop\LOL Recorder.lnk
[2013.11.05 15:22:14 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2013.11.05 15:22:14 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2013.10.27 16:30:49 | 000,000,942 | ---- | C] () -- C:\Users\Public\Desktop\LoLOracle.lnk
[2013.10.12 02:08:58 | 000,000,325 | ---- | C] () -- C:\Users\Dávid\servers.dat
[2013.10.08 00:14:01 | 000,007,611 | ---- | C] () -- C:\Users\Dávid\AppData\Local\Resmon.ResmonCfg
[2013.08.30 20:08:02 | 003,165,737 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin
[2013.08.30 19:49:51 | 005,448,460 | ---- | C] () -- C:\Windows\System32\drivers\rtvienna.dat
[2013.08.30 19:49:50 | 000,618,913 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2013.08.30 19:49:49 | 000,188,696 | ---- | C] () -- C:\Windows\System32\AcpiServiceVnA.dll
[2013.08.29 17:59:45 | 000,006,656 | ---- | C] () -- C:\Windows\System32\bcmwlrc.dll
[2013.08.27 13:15:36 | 000,012,288 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2013.08.27 13:15:35 | 019,587,072 | ---- | C] () -- C:\Windows\System32\igdfcl32.dll
[2013.08.27 13:15:35 | 000,241,152 | ---- | C] () -- C:\Windows\System32\igdde32.dll
[2013.08.27 13:15:35 | 000,109,056 | ---- | C] () -- C:\Windows\System32\igdail32.dll
[2013.08.27 13:15:34 | 002,585,088 | ---- | C] () -- C:\Windows\System32\GfxRes.dll
[2013.08.27 13:15:34 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2013.08.27 13:15:31 | 000,530,416 | ---- | C] () -- C:\Windows\System32\DPTopologyApp.exe
[2013.08.27 13:15:30 | 000,001,806 | ---- | C] () -- C:\Windows\System32\GfxUIEx.exe.config
[2013.08.27 13:15:30 | 000,000,935 | ---- | C] () -- C:\Windows\System32\DPTopologyApp.exe.config
[2013.08.27 13:15:30 | 000,000,935 | ---- | C] () -- C:\Windows\System32\CustomModeApp.exe.config
[2013.08.27 13:15:30 | 000,000,264 | ---- | C] () -- C:\Windows\System32\GfxUIHotKeyMenu.exe.config
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2009.07.14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013.10.12 01:54:49 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\.minecraft
[2013.11.14 21:58:46 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\abjawe
[2013.11.18 20:54:22 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\asepel
[2013.11.18 20:55:16 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\buasep
[2013.10.03 14:41:38 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\DVDVideoSoft
[2013.10.03 14:34:55 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\FreeYoutubeToMP3TURBOConverter
[2013.10.06 00:18:09 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\ftblauncher
[2013.09.01 09:54:06 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\LolClient
[2013.09.30 14:37:13 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\Modinstaller
[2013.11.17 21:40:31 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\QuickScan
[2013.10.13 19:18:51 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\RIFT
[2013.11.21 23:43:26 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\Spotify
[2013.11.20 21:35:54 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\TS3Client
[2013.11.18 20:55:19 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\udspu
[2013.11.19 00:21:27 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\UseNeXT
[2013.11.21 22:13:35 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\uTorrent
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:AD022376

< End of report >
         

--- --- ---

Die extras:OTL Logfile:

OTL Extras logfile created on: 21.11.2013 23:44:14 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Dávid\Downloads
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,33 Gb Total Physical Memory | 1,38 Gb Available Physical Memory | 59,22% Memory free
4,66 Gb Paging File | 3,31 Gb Available in Paging File | 70,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,66 Gb Total Space | 73,37 Gb Free Space | 15,76% Space Free | Partition Type: NTFS
 
Computer Name: LALA | User Name: Dávid | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-40972975-1608239604-2264794492-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{176EBFDD-CA26-491A-82D1-C65DE14C4F70}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{2A141620-3297-4F49-95F5-7B3C9BFAB92C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{54AB2C7A-AA43-4A59-A4C9-D1CC29263959}" = lport=137 | protocol=17 | dir=in | app=system | 
"{58CC5AAF-CC33-4FE7-ABA5-AB53D404603E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{5B999FAA-D5F2-4F7C-9622-AFEED44AC1BA}" = lport=139 | protocol=6 | dir=in | app=system | 
"{6FC61D28-9670-4C26-9B97-928688CD078B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{70071BC9-0597-427F-9BF8-CE1FA9EADCF2}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{7F560294-D895-4F51-962F-84D17DE562E4}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{83CD1638-D16F-4D79-B4E3-EC8621762F13}" = rport=445 | protocol=6 | dir=out | app=system | 
"{860E2D79-6193-4F62-ACBB-48757F2769FE}" = lport=445 | protocol=6 | dir=in | app=system | 
"{8DBF6BB5-F3D8-4F7D-9EE8-F3AE068A6E32}" = rport=137 | protocol=17 | dir=out | app=system | 
"{8FED13A0-A19A-484F-BA6C-780BE059A9E3}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{96FDA186-AC25-4A1F-BC94-B4C8B0BD6848}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{A1F7FC91-F922-4441-9C02-2D4D98D61E85}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{A8E745E9-75BA-4A18-A7BC-1DD895BF656B}" = lport=138 | protocol=17 | dir=in | app=system | 
"{AFE186E6-4BFA-433B-9A9D-5580FAE6B73D}" = rport=138 | protocol=17 | dir=out | app=system | 
"{C71E6B64-3EF1-4EDC-8EFC-CB77E8FD2EA1}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{D7DEC8D9-85ED-4C73-8C51-B940D85A0214}" = rport=139 | protocol=6 | dir=out | app=system | 
"{DC3FDB8E-BE55-4500-B0AB-9212E95FFEF7}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{FF55B77A-63E4-48DA-AB40-3A5C0CACE950}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{FF6DAB93-9457-4CB6-B480-3B6A91A9A6A1}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06B7F845-2579-448A-829B-79E96BB49B1E}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\counter-strike source\hl2.exe | 
"{06F70713-9666-42CA-A021-AB01775A1B69}" = protocol=6 | dir=in | app=c:\users\dávid\appdata\roaming\utorrent\utorrent.exe | 
"{14412B3A-F02B-462B-AC8F-1EEFF0D6B07E}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 
"{1C6287E4-3C7F-4F9B-9605-31DE3FECB273}" = protocol=6 | dir=out | app=system | 
"{210144E1-8A01-4DB4-A3BF-786E6A399B9F}" = protocol=17 | dir=in | app=c:\program files\webcam 7\wlite.exe | 
"{2B87FB66-0143-4604-B0AE-341F3D845F77}" = protocol=6 | dir=in | app=c:\program files\webcam 7\wservice.exe | 
"{3017AB9F-6570-4A5D-8D17-16F09E0D8647}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{3295D49A-6266-4996-8F0E-195C15982A9D}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 
"{6519DD2F-DABE-4221-9EB6-CA3F0DD5AD7E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{6562F43B-9FBB-4216-8CB0-50B051FF7BBF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{68363C75-674D-4DEE-9600-9769FA2C785F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{6EA48C9B-27BD-4D6B-8CB7-03C6D42A9AD2}" = protocol=6 | dir=in | app=c:\program files\webcam 7\wlite.exe | 
"{740C3525-8930-460D-A0BE-DB06F3563E88}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{8F4625CC-C757-46FF-883F-BB9F85E741FE}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{9562EB72-ACDC-4FD4-8CBB-3B7E01182576}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{A39E98C2-755B-4D20-BAFF-F310F3344128}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{A46FC37E-90A2-4242-9A1F-281CFA91DBB9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{ACA41A75-3A03-4F67-A111-30F9887EC900}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B4D0B137-7102-4506-BEDB-F0799E9B253C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B64C5899-4CCD-4587-BAF1-17E81FF3A36C}" = protocol=17 | dir=in | app=c:\users\dávid\appdata\roaming\utorrent\utorrent.exe | 
"{C078FC6B-4F88-487A-843B-DCE43A4AF49C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C45CC985-DD06-4F14-94C7-38BFA1F9B9F5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{CC12B345-40B4-47A0-A4E3-498A16872168}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\counter-strike source\hl2.exe | 
"{DB879220-B59F-4FCE-BBD7-B9C7576720F0}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{E744063B-D68E-45B1-92AB-D1BB18A9C444}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{EED8C3DB-8735-4BFA-A4D5-4F1D841E7B0E}" = protocol=17 | dir=in | app=c:\program files\webcam 7\wservice.exe | 
"{FCAF1F28-14FB-433E-9664-3F4948B476F2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"TCP Query User{28DA4793-2700-46B4-8B96-6A97C4A41AD8}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{3747F69F-C227-439B-8499-06AF2B847549}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | 
"TCP Query User{4AA0A250-312C-4061-9DC8-0B63645C4A7B}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | 
"TCP Query User{5134278F-66F3-496A-9418-D76AB45B5236}C:\users\dávid\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\dávid\appdata\roaming\spotify\spotify.exe | 
"TCP Query User{76528A5C-EBCB-4DB9-A83E-A8746D90F799}C:\users\dávid\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\dávid\appdata\roaming\spotify\spotify.exe | 
"TCP Query User{7F6A3440-09B8-4FE3-B517-900C6C7F644D}C:\program files\lolreplay\lolreplay.exe" = protocol=6 | dir=in | app=c:\program files\lolreplay\lolreplay.exe | 
"TCP Query User{8E5D97C2-BE17-43F2-942A-AF6D05EA3248}C:\java\jre1.6.0\bin\tnameserv.exe" = protocol=6 | dir=in | app=c:\java\jre1.6.0\bin\tnameserv.exe | 
"TCP Query User{A3C5C9BE-DCFC-408A-8A74-32CCB4213789}C:\program files\saints row iv\saintsrowiv.exe" = protocol=6 | dir=in | app=c:\program files\saints row iv\saintsrowiv.exe | 
"TCP Query User{B62E3BEB-2441-472F-8CBB-8AA6CFB0B9EC}C:\program files\saints row iv\saintsrowiv.exe" = protocol=6 | dir=in | app=c:\program files\saints row iv\saintsrowiv.exe | 
"TCP Query User{F7D1A386-530A-4814-BAE0-B20C9D21B94C}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{1C44BECA-570B-4AF8-A538-2A075402DE6E}C:\program files\saints row iv\saintsrowiv.exe" = protocol=17 | dir=in | app=c:\program files\saints row iv\saintsrowiv.exe | 
"UDP Query User{235D7485-EE8A-4329-A37A-15F920306E37}C:\program files\lolreplay\lolreplay.exe" = protocol=17 | dir=in | app=c:\program files\lolreplay\lolreplay.exe | 
"UDP Query User{33CB1359-3870-40CB-B4A3-828047F84BF0}C:\users\dávid\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\dávid\appdata\roaming\spotify\spotify.exe | 
"UDP Query User{3A864FE6-7212-44D3-9DEE-B589D612EB0F}C:\program files\saints row iv\saintsrowiv.exe" = protocol=17 | dir=in | app=c:\program files\saints row iv\saintsrowiv.exe | 
"UDP Query User{652DA40B-82D4-4C4A-BFD4-C8637A54A9A6}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{CAC2D939-9B3F-46AC-B92D-AA1889EE6B42}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | 
"UDP Query User{DBEA8018-B42D-4808-B53A-F824230F4B10}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{EB810ED0-BFA3-471D-92D3-76D34295F678}C:\java\jre1.6.0\bin\tnameserv.exe" = protocol=17 | dir=in | app=c:\java\jre1.6.0\bin\tnameserv.exe | 
"UDP Query User{F952A167-0298-4988-86F1-D5CC92135F99}C:\users\dávid\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\dávid\appdata\roaming\spotify\spotify.exe | 
"UDP Query User{FC743BEC-5A3C-4E76-A652-CCB3A49D2F99}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{18589E54-7FE9-4A3E-AC52-432256219D95}" = LoLOracle
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WiFi Driver Installation
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{41564952-412D-5637-00A7-A758B70C0600}" = Avira SearchFree Toolbar
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.10
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{53C63F43-B827-42D9-8886-4698D91EA33B}" = System Requirements Lab for Intel
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{67AA948F-8D83-4566-B84A-7CAABCF64E3F}" = Broadcom Card Reader Driver Installer
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}" = Google Earth
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) - Deutsch
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 320.18
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 320.18
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 4.11.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 4.11.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B7EB794A-5A36-4CB0-90D9-BD0E786972D4}" = LogMeIn Hamachi
"{B9A431FF-FDB1-40E5-B5F3-215290FD62DE}" = TP-LINK Drahtlos Tool
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C91DCB72-F5BB-410D-A91A-314F5D1B4284}" = Broadcom NetLink Controller
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F13F89CB-448B-49B0-BC63-4746499167C6}" = ActivePerl 5.16.3 Build 1603
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"4795C4A805590BF1276BCED3EB2478E5BF545E83" = Windows-Treiberpaket - Intel (NETwNs32) net  (01/22/2012 14.3.2.1)
"695CFD288064D5B9D072C610E63BDD3D3E4DE666" = Windows-Treiberpaket - Intel (NETwLv32) net  (10/07/2010 13.4.0.139)
"ADD23BB4846CE97156B46B74EA84848F347B09FE" = Windows-Treiberpaket - Intel (NETwNs32) net  (02/20/2012 15.1.0.18)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira Internet Security Suite
"Broadcom Wireless Utility" = Broadcom Wireless Utility
"CCleaner" = CCleaner
"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition
"Elantech" = ETDWare PS/2-X86 11.6.4.001_WHQL
"Free YouTube Download_is1" = Free YouTube Download version 3.2.13.925
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.12.13.925
"FreeYoutubeToMP3TURBOConverter_is1" = Free YouTube to MP3 TURBO Converter 2011
"Google Chrome" = Google Chrome
"LogMeIn Hamachi" = LogMeIn Hamachi
"LoLOracle 1.0.0" = LoLOracle
"LOLReplay" = LOLReplay
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"MinecraftAlpha" = MinecraftAlpha
"Mozilla Firefox 25.0.1 (x86 de)" = Mozilla Firefox 25.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP4 To MP3 Converter_is1" = MP4 To MP3 Converter V3.0.4
"Steam App 240" = Counter-Strike: Source
"U2FpbnRzUm93SVY=_is1" = Saints Row IV
"UseNeXT by Tangysoft_is1" = UseNeXT by Tangysoft
"VLC media player" = VLC media player 2.1.0
"WinRAR archiver" = WinRAR 5.00 (32-Bit)
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-40972975-1608239604-2264794492-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Spotify" = Spotify
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 19.11.2013 05:00:31 | Computer Name = Lala | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 19.11.2013 05:00:33 | Computer Name = Lala | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 19.11.2013 05:00:33 | Computer Name = Lala | Source = Windows Search Service | ID = 3028
Description = 
 
Error - 19.11.2013 05:00:33 | Computer Name = Lala | Source = Windows Search Service | ID = 3058
Description = 
 
Error - 19.11.2013 05:00:33 | Computer Name = Lala | Source = Windows Search Service | ID = 7010
Description = 
 
Error - 19.11.2013 10:46:49 | Computer Name = Lala | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: firefox.exe, Version: 25.0.1.5064,
 Zeitstempel: 0x5282f204  Name des fehlerhaften Moduls: xul.dll, Version: 25.0.1.5064,
 Zeitstempel: 0x5282f10e  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00118f87  ID des fehlerhaften
 Prozesses: 0x13d4  Startzeit der fehlerhaften Anwendung: 0x01cee5107675eb59  Pfad der
 fehlerhaften Anwendung: C:\Program Files\Mozilla Firefox\firefox.exe  Pfad des fehlerhaften
 Moduls: C:\Program Files\Mozilla Firefox\xul.dll  Berichtskennung: 6b1836f7-5129-11e3-8eb0-321277797d08
 
Error - 19.11.2013 15:56:29 | Computer Name = Lala | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Skype.exe, Version: 6.9.0.106, Zeitstempel:
 0x524bef36  Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bdaae  Ausnahmecode: 0xe0fafafa  Fehleroffset: 0x00009617  ID des fehlerhaften
 Prozesses: 0x1b40  Startzeit der fehlerhaften Anwendung: 0x01cee56136cda901  Pfad der
 fehlerhaften Anwendung: C:\Program Files\Skype\Phone\Skype.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\system32\KERNELBASE.dll  Berichtskennung: ad89933d-5154-11e3-8eb0-321277797d08
 
Error - 19.11.2013 16:02:33 | Computer Name = Lala | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Skype.exe, Version: 6.9.0.106, Zeitstempel:
 0x524bef36  Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bdaae  Ausnahmecode: 0xe0fafafa  Fehleroffset: 0x00009617  ID des fehlerhaften
 Prozesses: 0x1b28  Startzeit der fehlerhaften Anwendung: 0x01cee561765fefdc  Pfad der
 fehlerhaften Anwendung: C:\Program Files\Skype\Phone\Skype.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\system32\KERNELBASE.dll  Berichtskennung: 86a3b488-5155-11e3-8eb0-321277797d08
 
Error - 19.11.2013 16:06:40 | Computer Name = Lala | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Skype.exe, Version: 6.10.0.104, Zeitstempel:
 0x5265383f  Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bdaae  Ausnahmecode: 0xe0fafafa  Fehleroffset: 0x00009617  ID des fehlerhaften
 Prozesses: 0x1fec  Startzeit der fehlerhaften Anwendung: 0x01cee5626959fb25  Pfad der
 fehlerhaften Anwendung: C:\Program Files\Skype\Phone\Skype.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\system32\KERNELBASE.dll  Berichtskennung: 19ac686f-5156-11e3-8eb0-321277797d08
 
Error - 20.11.2013 08:23:05 | Computer Name = Lala | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, 
Zeitstempel: 0x515663e0  Name des fehlerhaften Moduls: Adobe AIR.dll, Version: 3.7.0.1530,
 Zeitstempel: 0x5156646c  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0006dd76  ID des fehlerhaften
 Prozesses: 0x318  Startzeit der fehlerhaften Anwendung: 0x01cee5eacc2f1c7b  Pfad der
 fehlerhaften Anwendung: C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.57\deploy\LolClient.exe
Pfad
 des fehlerhaften Moduls: C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.57\deploy\Adobe
 AIR\Versions\1.0\Adobe AIR.dll  Berichtskennung: 8121fe3c-51de-11e3-aca5-321277797d08
 
[ System Events ]
Error - 21.11.2013 05:36:26 | Computer Name = Lala | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?21.?11.?2013 um 10:35:24 unerwartet heruntergefahren.
 
Error - 21.11.2013 05:38:34 | Computer Name = Lala | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Time" wurde nicht richtig gestartet.
 
Error - 21.11.2013 05:47:58 | Computer Name = Lala | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?21.?11.?2013 um 10:47:16 unerwartet heruntergefahren.
 
Error - 21.11.2013 05:49:58 | Computer Name = Lala | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Time" wurde nicht richtig gestartet.
 
Error - 21.11.2013 07:25:06 | Computer Name = Lala | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
 von Dienst Hamachi2Svc erreicht.
 
Error - 21.11.2013 07:28:05 | Computer Name = Lala | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?21.?11.?2013 um 12:27:02 unerwartet heruntergefahren.
 
Error - 21.11.2013 07:30:03 | Computer Name = Lala | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Time" wurde nicht richtig gestartet.
 
Error - 21.11.2013 17:02:16 | Computer Name = Lala | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
 von Dienst AntiVirSchedulerService erreicht.
 
Error - 21.11.2013 17:02:20 | Computer Name = Lala | Source = DCOM | ID = 10010
Description = 
 
Error - 21.11.2013 18:35:59 | Computer Name = Lala | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?21.?11.?2013 um 23:04:55 unerwartet heruntergefahren.
 
 
< End of report >
         

--- --- ---

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Da sind sie Danke für die schnelle Rückmeldung



FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-11-2013
Ran by Dávid (administrator) on LALA on 22-11-2013 14:28:10
Running from C:\Users\Dávid\Desktop
Microsoft Windows 7 Ultimate  (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft) C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Spotify Ltd) C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Dávid\AppData\Roaming\Spotify\spotify.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(LOL Replay) C:\Program Files\LOLReplay\LOLRecorder.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - "C:\Windows\system32\hkcmd.exe"
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2236304 2012-08-10] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE [6471168 2013-08-29] (Broadcom Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2349392 2013-11-11] (LogMeIn Inc.)
HKLM\...\Run: [InstallerLauncher] - "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe"
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [683576 2013-10-31] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-16] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\Dávid\AppData\Roaming\Spotify\spotify.exe [5955072 2013-11-16] (Spotify Ltd)
HKCU\...\Run: [Internal Configuration Serving State] - C:\Users\Dávid\AppData\Roaming\udspu\\debuja.exe
HKCU\...\Run: [Steam] - C:\Program Files\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
AppInit_DLLs: C:\Windows\System32\nvinit.dll [ 2013-05-12] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDF03F1F8AECBCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP49EF6E6E-0344-442B-B359-4DB414E8EEE7&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP49EF6E6E-0344-442B-B359-4DB414E8EEE7&q={searchTerms}&SSPV=
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{50547C0E-BDCA-45F6-A967-386524E5C6FD}: [NameServer]192.168.178.30,192.168.178.1
Tcpip\..\Interfaces\{5474695F-9400-4F02-9BCB-45EBB2E83CB8}: [NameServer]192.168.0.100,192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default
FF Homepage: hxxp://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP49EF6E6E-0344-442B-B359-4DB414E8EEE7&SSPV=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: toolbar_AVIRA-V7 - C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF Extension: Adblock Plus - C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: greasemonkey - C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF HKLM\...\Firefox\Extensions: [downloader@freeyoutubetomp3converter.org] - C:\Program Files\FreeYouTubeToMP3TURBOConverter\Firefox
FF Extension: FreeYouTubeToMP3TURBOConverter plugin for Mozilla Firefox - C:\Program Files\FreeYouTubeToMP3TURBOConverter\Firefox

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup:         "urls_to_restore_on_startup": [
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Extension: (Google Docs) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.13_0
CHR Extension: (League of Legends(LoL) For New Tab) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hagfodkdlfpceodghmlnbjafkcdjnifd\1.1.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx

========================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [972872 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279024 2013-08-12] (Intel Corporation)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1616208 2013-11-11] (LogMeIn Inc.)
R3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752 2012-04-24] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2013-10-11] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Time; C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe [10752 2013-08-29] (Microsoft)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [5179392 2013-08-29] (Broadcom Corporation)

==================== Drivers (Whitelisted) ====================

S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1559552 2010-09-16] (Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-10-31] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-31] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [67680 2013-10-31] (Avira Operations GmbH & Co. KG)
R3 b57xdbd; C:\Windows\System32\DRIVERS\b57xdbd.sys [64088 2012-08-13] (Broadcom Corporation)
R3 b57xdmp; C:\Windows\System32\DRIVERS\b57xdmp.sys [18520 2012-08-13] (Broadcom Corporation)
R3 BCM42RLY; C:\Windows\System32\drivers\BCM42RLY.sys [18496 2013-08-29] (Broadcom Corporation)
S3 BcmVWL; C:\Windows\System32\DRIVERS\bcmvwl32.sys [17728 2013-08-29] (Broadcom Corporation)
R3 bScsiMSx; C:\Windows\System32\DRIVERS\bScsiMSx.sys [46168 2012-06-18] (Broadcom Corporation)
R3 bScsiSDx; C:\Windows\System32\DRIVERS\bScsiSDx.sys [62160 2013-04-10] (Broadcom Corporation)
R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [273296 2012-08-10] (ELAN Microelectronics Corp.)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [31560 2013-11-17] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2013-11-22] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [46080 2013-08-30] (Intel Corporation)
R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [25376 2013-05-12] (NVIDIA Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-31] (Avira GmbH)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]
U4 vsserv; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-22 14:28 - 2013-11-22 14:28 - 00015449 _____ C:\Users\Dávid\Desktop\FRST.txt
2013-11-22 14:28 - 2013-11-22 14:28 - 00000000 ____D C:\FRST
2013-11-22 14:27 - 2013-11-22 14:26 - 01090881 ____N (Farbar) C:\Users\Dávid\Desktop\FRST.exe
2013-11-22 02:09 - 2013-11-22 02:09 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-11-21 23:49 - 2013-11-21 23:49 - 00101014 _____ C:\Users\Dávid\Downloads\OTL.Txt
2013-11-21 23:49 - 2013-11-21 23:49 - 00050368 _____ C:\Users\Dávid\Downloads\Extras.Txt
2013-11-21 23:42 - 2013-11-21 23:42 - 00602112 _____ (OldTimer Tools) C:\Users\Dávid\Downloads\OTL.exe
2013-11-21 23:39 - 2013-11-21 23:39 - 00057560 _____ C:\Users\Dávid\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-21 23:35 - 2013-11-22 14:14 - 00000112 _____ C:\Windows\setupact.log
2013-11-21 23:35 - 2013-11-21 23:35 - 00265640 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-21 23:35 - 2013-11-21 23:35 - 00000510 _____ C:\Windows\PFRO.log
2013-11-21 23:35 - 2013-11-21 23:35 - 00000000 _____ C:\Windows\setuperr.log
2013-11-21 22:53 - 2013-11-21 12:23 - 05192704 ____N (Geza Kovacs) C:\Users\Dávid\Documents\unetbootin-windows-585.exe
2013-11-21 22:52 - 2013-11-21 12:40 - 621948928 ____N C:\Users\Dávid\Documents\rescue-system.iso
2013-11-21 22:24 - 2013-11-21 22:24 - 04379048 _____ (Piriform Ltd) C:\Users\Dávid\Downloads\ccsetup407.exe
2013-11-21 22:19 - 2013-11-21 22:19 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-21 00:50 - 2013-11-21 00:52 - 00000716 _____ C:\Users\Dávid\Downloads\ffs_98_full.wmv
2013-11-19 23:53 - 2013-11-19 23:53 - 00164352 _____ (NeSuckS) C:\Users\Dávid\Downloads\Universal Aimbot 2.4.exe
2013-11-19 21:00 - 2013-11-19 21:00 - 01550496 _____ (Skype Technologies S.A.) C:\Users\Dávid\Downloads\SkypeSetup.exe
2013-11-19 20:49 - 2013-11-19 20:49 - 00000213 _____ C:\Users\Dávid\Desktop\Counter-Strike Source.url
2013-11-19 20:49 - 2013-11-19 20:49 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-19 20:35 - 2013-11-22 14:18 - 00000000 ____D C:\Program Files\Steam
2013-11-19 20:35 - 2013-11-19 23:32 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-11-19 20:35 - 2013-11-19 20:35 - 00000875 _____ C:\Users\Public\Desktop\Steam.lnk
2013-11-19 20:32 - 2013-11-19 20:33 - 08531968 _____ C:\Users\Dávid\Downloads\SteamInstall_German.msi
2013-11-19 00:34 - 2013-11-19 00:35 - 00000000 ____D C:\Output
2013-11-19 00:34 - 2013-11-19 00:34 - 00000627 _____ C:\Users\Public\Desktop\MP4 To MP3 Converter.lnk
2013-11-19 00:34 - 2013-11-19 00:34 - 00000000 ____D C:\MP4ToMP3Converter
2013-11-19 00:33 - 2013-11-19 00:33 - 03624560 _____ (hxxp://www.MP4ToMP3Converter.net                            ) C:\Users\Dávid\Downloads\mp4tomp3-304.exe
2013-11-18 21:43 - 2013-11-18 21:54 - 136016745 _____ C:\Users\Dávid\Downloads\avira_internet_security_suite_de.exe
2013-11-18 21:15 - 2013-11-18 21:25 - 135277678 _____ C:\Users\Dávid\Downloads\avira_ultimate_protection_suite_de.exe
2013-11-18 20:58 - 2013-11-18 20:58 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Avira
2013-11-18 20:56 - 2013-11-18 20:56 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-11-18 20:56 - 2013-11-18 20:56 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-11-18 20:55 - 2013-11-18 20:55 - 00907792 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62494732
2013-11-18 20:55 - 2013-11-18 20:55 - 00907792 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62492906
2013-11-18 20:55 - 2013-11-18 20:55 - 00907792 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62422105
2013-11-18 20:55 - 2013-11-18 20:55 - 00907792 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62414411
2013-11-18 20:55 - 2013-11-18 20:55 - 00268816 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E87193
2013-11-18 20:55 - 2013-11-18 20:55 - 00268816 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E83679
2013-11-18 20:55 - 2013-11-18 20:55 - 00268816 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E71720
2013-11-18 20:55 - 2013-11-18 20:55 - 00268816 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E54417
2013-11-18 20:55 - 2013-11-18 20:55 - 00000000 ____D C:\ProgramData\APN
2013-11-18 20:52 - 2013-11-22 14:19 - 00042979 _____ C:\Windows\WindowsUpdate.log
2013-11-18 20:52 - 2013-11-18 22:03 - 00002012 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-11-18 20:51 - 2013-11-18 20:51 - 00000000 ____D C:\ProgramData\Avira
2013-11-18 20:51 - 2013-11-18 20:51 - 00000000 ____D C:\Program Files\Avira
2013-11-18 20:51 - 2013-10-31 19:25 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-18 20:51 - 2013-10-31 19:25 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-11-18 20:51 - 2013-10-31 19:25 - 00067680 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-18 20:51 - 2013-10-31 19:25 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-18 20:51 - 2013-10-31 19:25 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-11-18 20:46 - 2013-11-18 20:44 - 126764512 ____N C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe
2013-11-18 20:36 - 2013-11-18 20:34 - 126764512 _____ C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe.txt
2013-11-17 22:19 - 2013-11-17 22:21 - 00000000 ____D C:\ProgramData\webcam 7
2013-11-17 21:46 - 2013-11-17 21:46 - 00000000 ____D C:\Quarantine
2013-11-17 21:43 - 2013-11-17 21:46 - 00000594 _____ C:\Users\Dávid\Downloads\Stinger_17112013_214331.html
2013-11-17 21:43 - 2013-11-17 21:43 - 10197536 _____ (McAfee Inc) C:\Users\Dávid\Downloads\stinger32.exe
2013-11-17 21:42 - 2013-11-17 21:46 - 00000114 ___RH C:\Users\Dávid\Downloads\stinger.opt
2013-11-17 21:42 - 2013-11-17 21:46 - 00000000 ____D C:\Program Files\stinger
2013-11-17 21:42 - 2013-11-17 21:42 - 09448512 _____ (McAfee Inc.) C:\Users\Dávid\Downloads\stinger.exe
2013-11-17 21:40 - 2013-11-17 21:40 - 00258301 _____ C:\ProgramData\1384720831.bdinstall.bin
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\QuickScan
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Program Files\Bitdefender
2013-11-17 21:39 - 2013-11-17 21:39 - 07173128 _____ C:\Users\Dávid\Downloads\bitdefender_antivirus.exe
2013-11-17 21:33 - 2013-11-17 21:34 - 00206184 _____ C:\Users\Dávid\Downloads\Opera_17.0.1241.53_Setup.exe
2013-11-16 02:59 - 2013-11-16 02:59 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-14 23:17 - 2013-11-17 21:47 - 00031560 _____ C:\Windows\system32\Drivers\mbamchameleon.sys
2013-11-14 23:17 - 2013-11-14 23:17 - 00000000 ____D C:\Users\Dávid\Downloads\mbam-chameleon-1.62.1.1000
2013-11-14 23:02 - 2013-11-14 23:02 - 01440846 _____ C:\Users\Dávid\Downloads\mbam-chameleon-1.62.1.1000.zip
2013-11-14 15:22 - 2013-11-14 15:22 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2013-11-12 23:40 - 2013-11-12 23:41 - 07271424 _____ C:\Users\Dávid\Downloads\LoLOracle_1_0_1.msi
2013-11-11 23:31 - 2013-11-12 22:55 - 00000081 _____ C:\Users\Dávid\Desktop\Neues Textdokument.txt
2013-11-11 17:34 - 2013-11-21 22:20 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\VMware
2013-11-11 17:34 - 2013-11-12 22:53 - 00000000 ____D C:\Users\Dávid\AppData\Local\VMware
2013-11-11 17:34 - 2013-11-11 17:34 - 00000000 ____D C:\Users\Dávid\Documents\Virtual Machines
2013-11-11 17:32 - 2013-11-21 22:22 - 00000000 ____D C:\ProgramData\VMware
2013-11-11 17:22 - 2013-11-11 17:23 - 98508144 _____ (VMware, Inc.) C:\Users\Dávid\Downloads\VMware-player-6.0.1-1379776.exe
2013-11-11 17:22 - 2013-11-11 17:22 - 04090738 _____ C:\Users\Dávid\Downloads\VMware-Player-6.0.1-1379776.i386.bundle.part
2013-11-10 12:07 - 2013-11-10 12:07 - 00321536 _____ C:\Windows\system32\LiveWrapRTSP.dll
2013-11-09 14:30 - 2013-11-09 14:31 - 00000000 ____D C:\Users\Dávid\Backtrack
2013-11-09 14:30 - 2013-11-09 14:30 - 00000000 ____D C:\Users\Dávid\Downloads\TL-WN821N_V3_101101_German
2013-11-07 21:15 - 2013-11-07 22:13 - 00000000 ____D C:\Users\Dávid\Downloads\BT5R3-GNOME-32
2013-11-07 21:14 - 2013-11-07 21:14 - 00337424 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D7B57E5F440948
2013-11-07 20:37 - 2013-11-07 20:56 - 00000000 ____D C:\Users\Dávid\VirtualBox VMs
2013-11-07 20:29 - 2013-11-11 16:36 - 00000000 ____D C:\Users\Dávid\.VirtualBox
2013-11-07 20:29 - 2013-11-01 17:10 - 00203024 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2013-11-07 20:29 - 2013-11-01 17:09 - 00103696 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2013-11-07 20:24 - 2013-11-07 20:24 - 00000000 ____D C:\Users\Dávid\Downloads\BT5R3-GNOME-32-VM
2013-11-07 20:23 - 2013-11-21 22:13 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\uTorrent
2013-11-07 20:22 - 2013-11-07 20:22 - 01141328 _____ (BitTorrent Inc.) C:\Users\Dávid\Downloads\utorrent3.3.2n30260.exe
2013-11-07 20:22 - 2013-11-07 20:22 - 00196735 _____ C:\Users\Dávid\Downloads\BT5R3-GNOME-32-VM.torrent
2013-11-07 20:21 - 2013-11-07 20:23 - 106230544 _____ (Oracle Corporation) C:\Users\Dávid\Downloads\VirtualBox-4.3.2-90405-Win(1).exe
2013-11-07 19:18 - 2013-11-07 19:21 - 106230544 _____ (Oracle Corporation) C:\Users\Dávid\Downloads\VirtualBox-4.3.2-90405-Win.exe
2013-11-07 17:49 - 2013-11-07 17:51 - 00011816 _____ C:\Users\Dávid\Downloads\peek.zip
2013-11-07 17:43 - 2013-11-07 17:49 - 70772220 _____ C:\Users\Dávid\Downloads\chaox-2009.7.iso.part
2013-11-07 16:50 - 2013-11-18 20:55 - 02586358 _____ C:\Users\Dávid\AppData\Roaming\cached-microdescs
2013-11-07 16:20 - 2013-11-18 20:56 - 00985751 _____ C:\Users\Dávid\AppData\Roaming\cached-microdesc-consensus
2013-11-07 16:20 - 2013-11-18 20:56 - 00099263 _____ C:\Users\Dávid\AppData\Roaming\cached-microdescs.new
2013-11-07 16:20 - 2013-11-18 20:56 - 00005061 _____ C:\Users\Dávid\AppData\Roaming\state
2013-11-07 16:20 - 2013-11-18 20:55 - 00000000 _____ C:\Users\Dávid\AppData\Roaming\lock
2013-11-07 16:20 - 2013-11-18 15:30 - 00019220 _____ C:\Users\Dávid\AppData\Roaming\cached-certs
2013-11-07 16:19 - 2013-11-07 16:21 - 16089372 _____ C:\Users\Dávid\Downloads\BT5R3-GNOME-VM-32.7z.part
2013-11-07 16:17 - 2013-11-10 18:30 - 00000000 ____D C:\Windows\pss
2013-11-06 19:07 - 2013-11-06 19:07 - 00087489 _____ C:\Users\Dávid\Downloads\gerix-wifi-cracker-master.rar
2013-11-06 19:07 - 2013-11-06 19:07 - 00000000 ____D C:\Users\Dávid\Downloads\gerix-wifi-cracker-master
2013-11-06 19:02 - 2013-11-06 19:02 - 00013339 _____ C:\Users\Dávid\Desktop\cmd - Verknüpfung.lnk
2013-11-06 18:55 - 2013-11-06 18:58 - 00000000 ____D C:\Perl
2013-11-06 18:48 - 2013-11-06 18:54 - 26968140 _____ C:\Users\Dávid\Downloads\ActivePerl-5.16.3.1603-MSWin32-x86-296746.msi
2013-11-06 18:40 - 2013-11-06 18:40 - 00006277 _____ C:\Users\Dávid\Downloads\WEPCrack-0.1.0(1).tar.gz
2013-11-06 18:38 - 2013-11-06 18:38 - 00006277 _____ C:\Users\Dávid\Downloads\WEPCrack-0.1.0.tar.gz
2013-11-06 18:38 - 2013-11-06 18:38 - 00000000 ____D C:\Users\Dávid\Downloads\WEPCrack-0.1.0
2013-11-06 18:15 - 2013-11-06 18:15 - 00000000 ____D C:\Users\Dávid\Downloads\aircrack-ng-1.2-beta1-win
2013-11-06 17:46 - 2013-11-06 18:06 - 08287320 _____ C:\Users\Dávid\Downloads\aircrack-ng-1.2-beta1-win.zip
2013-11-06 11:14 - 2013-11-06 11:14 - 00130186 _____ C:\Users\Dávid\Downloads\459588_569534699745100_912065965_o.jpg.part
2013-11-06 11:14 - 2013-11-06 11:14 - 00114310 _____ C:\Users\Dávid\Downloads\1381744_643030019062234_1225283321_n.jpg.part
2013-11-06 09:51 - 2013-11-06 09:51 - 00053171 _____ C:\Users\Dávid\Downloads\306929_2250084468368_321038990_n.jpg.part
2013-11-05 18:34 - 2013-11-05 18:34 - 00000000 ____D C:\Riot Games
2013-11-05 18:04 - 2013-11-06 09:53 - 00000000 ____D C:\Users\Dávid\Documents\LOLReplay
2013-11-05 18:04 - 2013-11-05 18:04 - 00001847 _____ C:\Users\Public\Desktop\LOL Recorder.lnk
2013-11-05 18:04 - 2013-11-05 18:04 - 00000000 ____D C:\Program Files\LOLReplay
2013-11-05 17:56 - 2013-11-05 18:00 - 01471311 _____ C:\Users\Dávid\Downloads\LOLReplay-0.8.5.0.exe
2013-11-05 15:22 - 2013-11-05 15:22 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-05 15:21 - 2013-11-05 15:25 - 00000000 ____D C:\ProgramData\Adobe
2013-11-05 15:21 - 2013-11-05 15:22 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-11-05 15:21 - 2013-11-05 15:21 - 00000000 ____D C:\Program Files\Adobe
2013-11-05 14:59 - 2013-11-05 14:59 - 04207928 _____ (Smart Projects                                              ) C:\Users\Dávid\Downloads\isobuster_all_lang_3.2.exe
2013-11-01 17:09 - 2013-11-01 17:09 - 00114960 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp.sys
2013-11-01 17:09 - 2013-11-01 17:09 - 00094480 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSB.sys
2013-10-27 16:30 - 2013-10-27 16:30 - 00000942 _____ C:\Users\Public\Desktop\LoLOracle.lnk
2013-10-27 16:30 - 2013-10-27 16:30 - 00000000 ____D C:\Program Files\LoLOracle
2013-10-27 16:29 - 2013-10-27 16:29 - 07270912 _____ C:\Users\Dávid\Downloads\setup.msi
2013-10-23 05:25 - 2013-11-18 20:55 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\udspu
2013-10-23 05:24 - 2013-11-18 20:55 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\buasep

==================== One Month Modified Files and Folders =======

2013-11-22 14:28 - 2013-11-22 14:28 - 00015449 _____ C:\Users\Dávid\Desktop\FRST.txt
2013-11-22 14:28 - 2013-11-22 14:28 - 00000000 ____D C:\FRST
2013-11-22 14:26 - 2013-11-22 14:27 - 01090881 ____N (Farbar) C:\Users\Dávid\Desktop\FRST.exe
2013-11-22 14:22 - 2013-08-30 19:22 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Spotify
2013-11-22 14:19 - 2013-11-18 20:52 - 00042979 _____ C:\Windows\WindowsUpdate.log
2013-11-22 14:19 - 2013-09-30 08:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-22 14:18 - 2013-11-19 20:35 - 00000000 ____D C:\Program Files\Steam
2013-11-22 14:17 - 2013-10-03 16:00 - 00000000 ____D C:\Users\Dávid\AppData\Local\LogMeIn Hamachi
2013-11-22 14:15 - 2013-08-30 17:56 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-22 14:14 - 2013-11-21 23:35 - 00000112 _____ C:\Windows\setupact.log
2013-11-22 14:14 - 2013-08-30 17:56 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-22 14:14 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-22 10:03 - 2009-07-14 05:34 - 00009776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-22 10:03 - 2009-07-14 05:34 - 00009776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-22 02:44 - 2013-10-13 19:28 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\asepel
2013-11-22 02:09 - 2013-11-22 02:09 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-11-21 23:49 - 2013-11-21 23:49 - 00101014 _____ C:\Users\Dávid\Downloads\OTL.Txt
2013-11-21 23:49 - 2013-11-21 23:49 - 00050368 _____ C:\Users\Dávid\Downloads\Extras.Txt
2013-11-21 23:42 - 2013-11-21 23:42 - 00602112 _____ (OldTimer Tools) C:\Users\Dávid\Downloads\OTL.exe
2013-11-21 23:41 - 2013-08-30 19:22 - 00000000 ____D C:\Users\Dávid\AppData\Local\Spotify
2013-11-21 23:39 - 2013-11-21 23:39 - 00057560 _____ C:\Users\Dávid\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-21 23:35 - 2013-11-21 23:35 - 00265640 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-21 23:35 - 2013-11-21 23:35 - 00000510 _____ C:\Windows\PFRO.log
2013-11-21 23:35 - 2013-11-21 23:35 - 00000000 _____ C:\Windows\setuperr.log
2013-11-21 22:24 - 2013-11-21 22:24 - 04379048 _____ (Piriform Ltd) C:\Users\Dávid\Downloads\ccsetup407.exe
2013-11-21 22:24 - 2013-08-30 19:00 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-21 22:24 - 2013-08-30 19:00 - 00000000 ____D C:\Program Files\CCleaner
2013-11-21 22:22 - 2013-11-11 17:32 - 00000000 ____D C:\ProgramData\VMware
2013-11-21 22:20 - 2013-11-11 17:34 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\VMware
2013-11-21 22:19 - 2013-11-21 22:19 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-21 22:14 - 2013-10-03 14:27 - 00000000 ____D C:\Program Files\JDownloader
2013-11-21 22:13 - 2013-11-07 20:23 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\uTorrent
2013-11-21 12:40 - 2013-11-21 22:52 - 621948928 ____N C:\Users\Dávid\Documents\rescue-system.iso
2013-11-21 12:23 - 2013-11-21 22:53 - 05192704 ____N (Geza Kovacs) C:\Users\Dávid\Documents\unetbootin-windows-585.exe
2013-11-21 00:52 - 2013-11-21 00:50 - 00000716 _____ C:\Users\Dávid\Downloads\ffs_98_full.wmv
2013-11-20 21:35 - 2013-10-09 13:49 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\TS3Client
2013-11-19 23:53 - 2013-11-19 23:53 - 00164352 _____ (NeSuckS) C:\Users\Dávid\Downloads\Universal Aimbot 2.4.exe
2013-11-19 23:32 - 2013-11-19 20:35 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-11-19 21:05 - 2013-10-09 23:37 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Skype
2013-11-19 21:03 - 2013-10-09 23:36 - 00000000 ___RD C:\Program Files\Skype
2013-11-19 21:03 - 2013-10-09 23:36 - 00000000 ____D C:\ProgramData\Skype
2013-11-19 21:00 - 2013-11-19 21:00 - 01550496 _____ (Skype Technologies S.A.) C:\Users\Dávid\Downloads\SkypeSetup.exe
2013-11-19 20:49 - 2013-11-19 20:49 - 00000213 _____ C:\Users\Dávid\Desktop\Counter-Strike Source.url
2013-11-19 20:49 - 2013-11-19 20:49 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-19 20:35 - 2013-11-19 20:35 - 00000875 _____ C:\Users\Public\Desktop\Steam.lnk
2013-11-19 20:35 - 2013-08-29 16:13 - 00000000 ____D C:\Users\Dávid
2013-11-19 20:33 - 2013-11-19 20:32 - 08531968 _____ C:\Users\Dávid\Downloads\SteamInstall_German.msi
2013-11-19 10:02 - 2013-08-29 16:17 - 01619278 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-19 00:35 - 2013-11-19 00:34 - 00000000 ____D C:\Output
2013-11-19 00:34 - 2013-11-19 00:34 - 00000627 _____ C:\Users\Public\Desktop\MP4 To MP3 Converter.lnk
2013-11-19 00:34 - 2013-11-19 00:34 - 00000000 ____D C:\MP4ToMP3Converter
2013-11-19 00:33 - 2013-11-19 00:33 - 03624560 _____ (hxxp://www.MP4ToMP3Converter.net                            ) C:\Users\Dávid\Downloads\mp4tomp3-304.exe
2013-11-19 00:21 - 2013-09-28 17:58 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\UseNeXT
2013-11-19 00:11 - 2013-09-28 17:58 - 00000000 ____D C:\Users\Dávid\Documents\UseNeXT
2013-11-18 22:03 - 2013-11-18 20:52 - 00002012 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-11-18 21:54 - 2013-11-18 21:43 - 136016745 _____ C:\Users\Dávid\Downloads\avira_internet_security_suite_de.exe
2013-11-18 21:28 - 2013-09-30 08:32 - 00000000 ____D C:\Users\Dávid\dwhelper
2013-11-18 21:25 - 2013-11-18 21:15 - 135277678 _____ C:\Users\Dávid\Downloads\avira_ultimate_protection_suite_de.exe
2013-11-18 20:58 - 2013-11-18 20:58 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Avira
2013-11-18 20:56 - 2013-11-18 20:56 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-11-18 20:56 - 2013-11-18 20:56 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-11-18 20:56 - 2013-11-07 16:20 - 00985751 _____ C:\Users\Dávid\AppData\Roaming\cached-microdesc-consensus
2013-11-18 20:56 - 2013-11-07 16:20 - 00099263 _____ C:\Users\Dávid\AppData\Roaming\cached-microdescs.new
2013-11-18 20:56 - 2013-11-07 16:20 - 00005061 _____ C:\Users\Dávid\AppData\Roaming\state
2013-11-18 20:55 - 2013-11-18 20:55 - 00907792 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62494732
2013-11-18 20:55 - 2013-11-18 20:55 - 00907792 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62492906
2013-11-18 20:55 - 2013-11-18 20:55 - 00907792 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62422105
2013-11-18 20:55 - 2013-11-18 20:55 - 00907792 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D3A04C62414411
2013-11-18 20:55 - 2013-11-18 20:55 - 00268816 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E87193
2013-11-18 20:55 - 2013-11-18 20:55 - 00268816 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E83679
2013-11-18 20:55 - 2013-11-18 20:55 - 00268816 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E71720
2013-11-18 20:55 - 2013-11-18 20:55 - 00268816 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879DE160AC0E54417
2013-11-18 20:55 - 2013-11-18 20:55 - 00000000 ____D C:\ProgramData\APN
2013-11-18 20:55 - 2013-11-07 16:50 - 02586358 _____ C:\Users\Dávid\AppData\Roaming\cached-microdescs
2013-11-18 20:55 - 2013-11-07 16:20 - 00000000 _____ C:\Users\Dávid\AppData\Roaming\lock
2013-11-18 20:55 - 2013-10-23 05:25 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\udspu
2013-11-18 20:55 - 2013-10-23 05:24 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\buasep
2013-11-18 20:51 - 2013-11-18 20:51 - 00000000 ____D C:\ProgramData\Avira
2013-11-18 20:51 - 2013-11-18 20:51 - 00000000 ____D C:\Program Files\Avira
2013-11-18 20:44 - 2013-11-18 20:46 - 126764512 ____N C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe
2013-11-18 20:34 - 2013-11-18 20:36 - 126764512 _____ C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe.txt
2013-11-18 20:24 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-11-18 19:52 - 2013-08-29 16:16 - 00000000 ____D C:\Saints Row IV
2013-11-18 15:30 - 2013-11-07 16:20 - 00019220 _____ C:\Users\Dávid\AppData\Roaming\cached-certs
2013-11-17 22:21 - 2013-11-17 22:19 - 00000000 ____D C:\ProgramData\webcam 7
2013-11-17 21:53 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\security
2013-11-17 21:47 - 2013-11-14 23:17 - 00031560 _____ C:\Windows\system32\Drivers\mbamchameleon.sys
2013-11-17 21:46 - 2013-11-17 21:46 - 00000000 ____D C:\Quarantine
2013-11-17 21:46 - 2013-11-17 21:43 - 00000594 _____ C:\Users\Dávid\Downloads\Stinger_17112013_214331.html
2013-11-17 21:46 - 2013-11-17 21:42 - 00000114 ___RH C:\Users\Dávid\Downloads\stinger.opt
2013-11-17 21:46 - 2013-11-17 21:42 - 00000000 ____D C:\Program Files\stinger
2013-11-17 21:43 - 2013-11-17 21:43 - 10197536 _____ (McAfee Inc) C:\Users\Dávid\Downloads\stinger32.exe
2013-11-17 21:42 - 2013-11-17 21:42 - 09448512 _____ (McAfee Inc.) C:\Users\Dávid\Downloads\stinger.exe
2013-11-17 21:40 - 2013-11-17 21:40 - 00258301 _____ C:\ProgramData\1384720831.bdinstall.bin
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\QuickScan
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Program Files\Bitdefender
2013-11-17 21:39 - 2013-11-17 21:39 - 07173128 _____ C:\Users\Dávid\Downloads\bitdefender_antivirus.exe
2013-11-17 21:34 - 2013-11-17 21:33 - 00206184 _____ C:\Users\Dávid\Downloads\Opera_17.0.1241.53_Setup.exe
2013-11-17 03:54 - 2013-09-30 07:39 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-16 02:59 - 2013-11-16 02:59 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-14 23:17 - 2013-11-14 23:17 - 00000000 ____D C:\Users\Dávid\Downloads\mbam-chameleon-1.62.1.1000
2013-11-14 23:14 - 2013-08-30 18:37 - 00000000 ____D C:\Windows\Downloaded Installations
2013-11-14 23:02 - 2013-11-14 23:02 - 01440846 _____ C:\Users\Dávid\Downloads\mbam-chameleon-1.62.1.1000.zip
2013-11-14 22:13 - 2013-08-30 17:56 - 00002121 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-14 21:58 - 2013-10-13 19:27 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\abjawe
2013-11-14 15:22 - 2013-11-14 15:22 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2013-11-14 00:44 - 2013-10-04 09:44 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\vlc
2013-11-12 23:41 - 2013-11-12 23:40 - 07271424 _____ C:\Users\Dávid\Downloads\LoLOracle_1_0_1.msi
2013-11-12 22:55 - 2013-11-11 23:31 - 00000081 _____ C:\Users\Dávid\Desktop\Neues Textdokument.txt
2013-11-12 22:53 - 2013-11-11 17:34 - 00000000 ____D C:\Users\Dávid\AppData\Local\VMware
2013-11-11 17:34 - 2013-11-11 17:34 - 00000000 ____D C:\Users\Dávid\Documents\Virtual Machines
2013-11-11 17:23 - 2013-11-11 17:22 - 98508144 _____ (VMware, Inc.) C:\Users\Dávid\Downloads\VMware-player-6.0.1-1379776.exe
2013-11-11 17:22 - 2013-11-11 17:22 - 04090738 _____ C:\Users\Dávid\Downloads\VMware-Player-6.0.1-1379776.i386.bundle.part
2013-11-11 16:36 - 2013-11-07 20:29 - 00000000 ____D C:\Users\Dávid\.VirtualBox
2013-11-10 18:30 - 2013-11-07 16:17 - 00000000 ____D C:\Windows\pss
2013-11-10 12:07 - 2013-11-10 12:07 - 00321536 _____ C:\Windows\system32\LiveWrapRTSP.dll
2013-11-09 14:33 - 2013-08-29 16:13 - 00000000 ____D C:\Users\Dávid\AppData\Local\VirtualStore
2013-11-09 14:31 - 2013-11-09 14:30 - 00000000 ____D C:\Users\Dávid\Backtrack
2013-11-09 14:30 - 2013-11-09 14:30 - 00000000 ____D C:\Users\Dávid\Downloads\TL-WN821N_V3_101101_German
2013-11-07 22:13 - 2013-11-07 21:15 - 00000000 ____D C:\Users\Dávid\Downloads\BT5R3-GNOME-32
2013-11-07 21:14 - 2013-11-07 21:14 - 00337424 __RSH C:\Users\Dávid\AppData\Roaming\C69DFD2ABFAA879D7B57E5F440948
2013-11-07 20:56 - 2013-11-07 20:37 - 00000000 ____D C:\Users\Dávid\VirtualBox VMs
2013-11-07 20:24 - 2013-11-07 20:24 - 00000000 ____D C:\Users\Dávid\Downloads\BT5R3-GNOME-32-VM
2013-11-07 20:23 - 2013-11-07 20:21 - 106230544 _____ (Oracle Corporation) C:\Users\Dávid\Downloads\VirtualBox-4.3.2-90405-Win(1).exe
2013-11-07 20:22 - 2013-11-07 20:22 - 01141328 _____ (BitTorrent Inc.) C:\Users\Dávid\Downloads\utorrent3.3.2n30260.exe
2013-11-07 20:22 - 2013-11-07 20:22 - 00196735 _____ C:\Users\Dávid\Downloads\BT5R3-GNOME-32-VM.torrent
2013-11-07 19:21 - 2013-11-07 19:18 - 106230544 _____ (Oracle Corporation) C:\Users\Dávid\Downloads\VirtualBox-4.3.2-90405-Win.exe
2013-11-07 17:51 - 2013-11-07 17:49 - 00011816 _____ C:\Users\Dávid\Downloads\peek.zip
2013-11-07 17:49 - 2013-11-07 17:43 - 70772220 _____ C:\Users\Dávid\Downloads\chaox-2009.7.iso.part
2013-11-07 16:21 - 2013-11-07 16:19 - 16089372 _____ C:\Users\Dávid\Downloads\BT5R3-GNOME-VM-32.7z.part
2013-11-06 19:07 - 2013-11-06 19:07 - 00087489 _____ C:\Users\Dávid\Downloads\gerix-wifi-cracker-master.rar
2013-11-06 19:07 - 2013-11-06 19:07 - 00000000 ____D C:\Users\Dávid\Downloads\gerix-wifi-cracker-master
2013-11-06 19:02 - 2013-11-06 19:02 - 00013339 _____ C:\Users\Dávid\Desktop\cmd - Verknüpfung.lnk
2013-11-06 18:58 - 2013-11-06 18:55 - 00000000 ____D C:\Perl
2013-11-06 18:54 - 2013-11-06 18:48 - 26968140 _____ C:\Users\Dávid\Downloads\ActivePerl-5.16.3.1603-MSWin32-x86-296746.msi
2013-11-06 18:40 - 2013-11-06 18:40 - 00006277 _____ C:\Users\Dávid\Downloads\WEPCrack-0.1.0(1).tar.gz
2013-11-06 18:38 - 2013-11-06 18:38 - 00006277 _____ C:\Users\Dávid\Downloads\WEPCrack-0.1.0.tar.gz
2013-11-06 18:38 - 2013-11-06 18:38 - 00000000 ____D C:\Users\Dávid\Downloads\WEPCrack-0.1.0
2013-11-06 18:15 - 2013-11-06 18:15 - 00000000 ____D C:\Users\Dávid\Downloads\aircrack-ng-1.2-beta1-win
2013-11-06 18:06 - 2013-11-06 17:46 - 08287320 _____ C:\Users\Dávid\Downloads\aircrack-ng-1.2-beta1-win.zip
2013-11-06 11:14 - 2013-11-06 11:14 - 00130186 _____ C:\Users\Dávid\Downloads\459588_569534699745100_912065965_o.jpg.part
2013-11-06 11:14 - 2013-11-06 11:14 - 00114310 _____ C:\Users\Dávid\Downloads\1381744_643030019062234_1225283321_n.jpg.part
2013-11-06 10:29 - 2013-10-20 06:14 - 00000000 ____D C:\Windows\Minidump
2013-11-06 10:23 - 2013-09-30 07:39 - 00000000 ____D C:\Users\Dávid\AppData\Local\Mozilla
2013-11-06 09:53 - 2013-11-05 18:04 - 00000000 ____D C:\Users\Dávid\Documents\LOLReplay
2013-11-06 09:51 - 2013-11-06 09:51 - 00053171 _____ C:\Users\Dávid\Downloads\306929_2250084468368_321038990_n.jpg.part
2013-11-05 18:34 - 2013-11-05 18:34 - 00000000 ____D C:\Riot Games
2013-11-05 18:04 - 2013-11-05 18:04 - 00001847 _____ C:\Users\Public\Desktop\LOL Recorder.lnk
2013-11-05 18:04 - 2013-11-05 18:04 - 00000000 ____D C:\Program Files\LOLReplay
2013-11-05 18:00 - 2013-11-05 17:56 - 01471311 _____ C:\Users\Dávid\Downloads\LOLReplay-0.8.5.0.exe
2013-11-05 15:25 - 2013-11-05 15:21 - 00000000 ____D C:\ProgramData\Adobe
2013-11-05 15:25 - 2013-10-18 04:08 - 00000000 ____D C:\Users\Dávid\AppData\Local\Adobe
2013-11-05 15:25 - 2013-09-01 09:54 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Adobe
2013-11-05 15:22 - 2013-11-05 15:22 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-05 15:22 - 2013-11-05 15:21 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-11-05 15:21 - 2013-11-05 15:21 - 00000000 ____D C:\Program Files\Adobe
2013-11-05 14:59 - 2013-11-05 14:59 - 04207928 _____ (Smart Projects                                              ) C:\Users\Dávid\Downloads\isobuster_all_lang_3.2.exe
2013-11-01 17:10 - 2013-11-07 20:29 - 00203024 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2013-11-01 17:09 - 2013-11-07 20:29 - 00103696 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2013-11-01 17:09 - 2013-11-01 17:09 - 00114960 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp.sys
2013-11-01 17:09 - 2013-11-01 17:09 - 00094480 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSB.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00067680 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-10-27 16:30 - 2013-10-27 16:30 - 00000942 _____ C:\Users\Public\Desktop\LoLOracle.lnk
2013-10-27 16:30 - 2013-10-27 16:30 - 00000000 ____D C:\Program Files\LoLOracle
2013-10-27 16:29 - 2013-10-27 16:29 - 07270912 _____ C:\Users\Dávid\Downloads\setup.msi
2013-10-23 11:53 - 2013-08-30 19:39 - 00000000 ____D C:\Users\Public\Documents\DriverGenius

Files to move or delete:
====================
C:\Users\Dávid\servers.dat
C:\Users\Public\MCL1.6.2.exe
C:\Users\Public\Minecraft-Modder_v2.8_de.exe


Some content of TEMP:
====================
C:\Users\Dávid\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-21 13:38

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-11-2013
Ran by Dávid at 2013-11-22 14:29:08
Running from C:\Users\Dávid\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ActivePerl 5.16.3 Build 1603 (Version: 5.16.1603)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
Avira Internet Security Suite (Version: 14.0.1.719)
Avira SearchFree Toolbar (Version: 12.6.0.1900)
Broadcom Card Reader Driver Installer (Version: 16.0.2.3)
Broadcom NetLink Controller (Version: 15.0.7.1)
Broadcom Wireless Utility (Version: 5.100.82.120)
CCleaner (Version: 4.07)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Counter-Strike: Source
Driver Genius Professional Edition (Version: 11.0)
ETDWare PS/2-X86 11.6.4.001_WHQL (Version: 11.6.4.001)
Free YouTube Download version 3.2.13.925 (Version: 3.2.13.925)
Free YouTube to MP3 Converter version 3.12.13.925 (Version: 3.12.13.925)
Free YouTube to MP3 TURBO Converter 2011
Google Chrome (Version: 31.0.1650.57)
Google Earth (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.165)
Intel(R) Control Center (Version: 1.2.1.1007)
Intel(R) Management Engine Components (Version: 8.0.2.1410)
Intel(R) Processor Graphics (Version: 9.18.10.3272)
Intel(R) Rapid Storage Technology (Version: 11.1.0.1006)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (Version: 3.0.0.66956)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
LogMeIn Hamachi (Version: 2.2.0.105)
LoLOracle (Version: 1.0.0)
LOLReplay (Version: 0.8.5.0)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
MinecraftAlpha
Mozilla Firefox 25.0.1 (x86 de) (Version: 25.0.1)
Mozilla Maintenance Service (Version: 25.0.1)
MP4 To MP3 Converter V3.0.4
NVIDIA GeForce Experience 1.5 (Version: 1.5)
NVIDIA Grafiktreiber 320.18 (Version: 320.18)
NVIDIA Install Application (Version: 2.1002.124.810)
NVIDIA Optimus 4.11.9 (Version: 4.11.9)
NVIDIA PhysX (Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Systemsteuerung 320.18 (Version: 320.18)
NVIDIA Update 4.11.9 (Version: 4.11.9)
NVIDIA Update Components (Version: 4.11.9)
Qualcomm Atheros WiFi Driver Installation (Version: 3.0)
Realtek High Definition Audio Driver (Version: 6.0.1.6971)
Saints Row IV (Version: 1)
Skype™ 6.10 (Version: 6.10.104)
Spotify (HKCU Version: 0.9.6.72.ge389c074)
Steam (Version: 1.0.0.0)
System Requirements Lab for Intel (Version: 4.5.15.0)
TeamSpeak 3 Client (HKCU Version: 3.0.13)
TP-LINK Drahtlos Tool (Version: 7.0)
UseNeXT by Tangysoft
VLC media player 2.1.0 (Version: 2.1.0)
Windows-Treiberpaket - Intel (NETwLv32) net  (10/07/2010 13.4.0.139) (Version: 10/07/2010 13.4.0.139)
Windows-Treiberpaket - Intel (NETwNs32) net  (01/22/2012 14.3.2.1) (Version: 01/22/2012 14.3.2.1)
Windows-Treiberpaket - Intel (NETwNs32) net  (02/20/2012 15.1.0.18) (Version: 02/20/2012 15.1.0.18)
WinRAR 5.00 (32-Bit) (Version: 5.00.0)

==================== Restore Points  =========================

19-11-2013 19:35:12 Steam wird installiert
21-11-2013 21:17:38 Removed Oracle VM VirtualBox 4.3.2

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {37CF0F72-66BC-46C5-B90C-77C6AEA47C21} - System32\Tasks\{528E19F3-9A65-4318-9AE3-13265C74AAA5} => Firefox.exe hxxp://ui.skype.com/ui/0/6.10.0.104/de/abandoninstall?source=lightinstaller&page=tsPlugin
Task: {4F72F2A3-247D-421B-A106-62AF1269D888} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-30] (Google Inc.)
Task: {8469FF8F-D633-4F69-B7A7-CE3EF365EC06} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-30] (Google Inc.)
Task: {ABA7C026-C750-449F-8A20-6B5D3E23B5C5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-18] (Adobe Systems Incorporated)
Task: {B3F4B985-3E55-4D8E-81A4-2434E85C04AE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-08-27 13:15 - 2013-08-08 21:35 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2013-08-30 19:22 - 2013-11-16 02:33 - 36967424 _____ () C:\Users\Dávid\AppData\Roaming\Spotify\Data\libcef.dll
2013-10-24 09:45 - 2013-10-24 18:45 - 00691200 _____ () C:\Program Files\Steam\SDL2.dll
2013-10-30 11:25 - 2013-10-30 20:25 - 01123240 _____ () C:\Program Files\Steam\bin\chromehtml.DLL
2013-10-23 12:07 - 2013-10-23 21:07 - 20625832 _____ () C:\Program Files\Steam\bin\libcef.dll
2013-06-14 15:49 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files\Steam\bin\avcodec-53.dll
2013-06-14 15:49 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files\Steam\bin\avutil-51.dll
2013-06-14 15:49 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files\Steam\bin\avformat-53.dll
2013-11-05 09:04 - 2013-11-05 09:04 - 00377856 _____ () C:\Program Files\LOLReplay\LOLUtils.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:AD022376

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Broadcom Virtual Wireless Adapter
Description: Broadcom Virtual Wireless Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Broadcom
Service: BcmVWL
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/22/2013 03:28:56 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1190
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1
Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2
Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3

Error: (11/22/2013 01:44:35 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{c8ed93f0-10bc-11e3-992c-806e6f6e6963} - 00000060,0x0053c010,00CC63D8,0,00CC53D0,4096,[0]).


Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (11/22/2013 01:43:28 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen einer Routine auf einem Volumeschattenkopieanbieter "{b5946137-7b9f-4925-af80-51abd60b20d5}" ist ein Fehler aufgetreten. Routinedetails PostCommitSnapshots({e0c457ed-3aa7-41b6-9bd5-cb8e93c8c46b}, 1) [hr = 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
].


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (11/22/2013 01:43:28 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "bad state 6" ist ein unerwarteter Fehler aufgetreten. hr = 0x8000ffff, Schwerwiegender Fehler
.


Vorgang:
   PostCommitSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (11/22/2013 01:43:28 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{c8ed93f0-10bc-11e3-992c-806e6f6e6963} - 00000130,0x0053c010,00CC63D8,0,00CC53D0,4096,[0]).


Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (11/22/2013 01:42:42 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{c8ed93f0-10bc-11e3-992c-806e6f6e6963} - 00000060,0x0053c010,00CC63D8,0,00CC53D0,4096,[0]).


Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (11/20/2013 01:23:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0
Name des fehlerhaften Moduls: Adobe AIR.dll, Version: 3.7.0.1530, Zeitstempel: 0x5156646c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0006dd76
ID des fehlerhaften Prozesses: 0x318
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (11/19/2013 09:06:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Skype.exe, Version: 6.10.0.104, Zeitstempel: 0x5265383f
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdaae
Ausnahmecode: 0xe0fafafa
Fehleroffset: 0x00009617
ID des fehlerhaften Prozesses: 0x1fec
Startzeit der fehlerhaften Anwendung: 0xSkype.exe0
Pfad der fehlerhaften Anwendung: Skype.exe1
Pfad des fehlerhaften Moduls: Skype.exe2
Berichtskennung: Skype.exe3

Error: (11/19/2013 09:02:33 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Skype.exe, Version: 6.9.0.106, Zeitstempel: 0x524bef36
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdaae
Ausnahmecode: 0xe0fafafa
Fehleroffset: 0x00009617
ID des fehlerhaften Prozesses: 0x1b28
Startzeit der fehlerhaften Anwendung: 0xSkype.exe0
Pfad der fehlerhaften Anwendung: Skype.exe1
Pfad des fehlerhaften Moduls: Skype.exe2
Berichtskennung: Skype.exe3

Error: (11/19/2013 08:56:29 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Skype.exe, Version: 6.9.0.106, Zeitstempel: 0x524bef36
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdaae
Ausnahmecode: 0xe0fafafa
Fehleroffset: 0x00009617
ID des fehlerhaften Prozesses: 0x1b40
Startzeit der fehlerhaften Anwendung: 0xSkype.exe0
Pfad der fehlerhaften Anwendung: Skype.exe1
Pfad des fehlerhaften Moduls: Skype.exe2
Berichtskennung: Skype.exe3


System errors:
=============
Error: (11/22/2013 02:16:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Time" wurde nicht richtig gestartet.

Error: (11/22/2013 02:14:38 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎22.‎11.‎2013 um 06:20:50 unerwartet heruntergefahren.

Error: (11/22/2013 06:20:25 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (11/22/2013 06:19:51 AM) (Source: DCOM) (User: )
Description: {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}

Error: (11/22/2013 06:19:48 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst eventlog erreicht.

Error: (11/22/2013 01:44:45 AM) (Source: volsnap) (User: )
Description: Das Zeitlimit für den Lösch- und Speicherschreibvorgang für Volume "C:" wurde beim Warten auf eine Schreibvorgangfreigabe überschritten.

Error: (11/21/2013 11:38:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Time" wurde nicht richtig gestartet.

Error: (11/21/2013 11:35:59 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎21.‎11.‎2013 um 23:04:55 unerwartet heruntergefahren.

Error: (11/21/2013 10:02:20 PM) (Source: DCOM) (User: )
Description: {AD1B0A76-DBB2-45C2-8403-45B8DD7FD503}

Error: (11/21/2013 10:02:16 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirSchedulerService erreicht.


Microsoft Office Sessions:
=========================
Error: (11/22/2013 03:28:56 AM) (Source: Application Error)(User: )
Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c000000500000000119001cee70cd35e8dd1C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknownd44d7aa7-531d-11e3-bed2-321277797d08

Error: (11/22/2013 01:44:35 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{c8ed93f0-10bc-11e3-992c-806e6f6e6963} - 00000060,0x0053c010,00CC63D8,0,00CC53D0,4096,[0])

Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (11/22/2013 01:43:28 AM) (Source: VSS)(User: )
Description: {b5946137-7b9f-4925-af80-51abd60b20d5}PostCommitSnapshots({e0c457ed-3aa7-41b6-9bd5-cb8e93c8c46b}, 1)0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (11/22/2013 01:43:28 AM) (Source: VSS)(User: )
Description: bad state 60x8000ffff, Schwerwiegender Fehler


Vorgang:
   PostCommitSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (11/22/2013 01:43:28 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{c8ed93f0-10bc-11e3-992c-806e6f6e6963} - 00000130,0x0053c010,00CC63D8,0,00CC53D0,4096,[0])

Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (11/22/2013 01:42:42 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{c8ed93f0-10bc-11e3-992c-806e6f6e6963} - 00000060,0x0053c010,00CC63D8,0,00CC53D0,4096,[0])

Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (11/20/2013 01:23:05 PM) (Source: Application Error)(User: )
Description: LolClient.exe0.0.0.0515663e0Adobe AIR.dll3.7.0.15305156646cc00000050006dd7631801cee5eacc2f1c7bC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.57\deploy\LolClient.exeC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.57\deploy\Adobe AIR\Versions\1.0\Adobe AIR.dll8121fe3c-51de-11e3-aca5-321277797d08

Error: (11/19/2013 09:06:40 PM) (Source: Application Error)(User: )
Description: Skype.exe6.10.0.1045265383fKERNELBASE.dll6.1.7600.163854a5bdaaee0fafafa000096171fec01cee5626959fb25C:\Program Files\Skype\Phone\Skype.exeC:\Windows\system32\KERNELBASE.dll19ac686f-5156-11e3-8eb0-321277797d08

Error: (11/19/2013 09:02:33 PM) (Source: Application Error)(User: )
Description: Skype.exe6.9.0.106524bef36KERNELBASE.dll6.1.7600.163854a5bdaaee0fafafa000096171b2801cee561765fefdcC:\Program Files\Skype\Phone\Skype.exeC:\Windows\system32\KERNELBASE.dll86a3b488-5155-11e3-8eb0-321277797d08

Error: (11/19/2013 08:56:29 PM) (Source: Application Error)(User: )
Description: Skype.exe6.9.0.106524bef36KERNELBASE.dll6.1.7600.163854a5bdaaee0fafafa000096171b4001cee56136cda901C:\Program Files\Skype\Phone\Skype.exeC:\Windows\system32\KERNELBASE.dllad89933d-5154-11e3-8eb0-321277797d08


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 2388.36 MB
Available physical RAM: 1413.48 MB
Total Pagefile: 4774.99 MB
Available Pagefile: 3111.23 MB
Total Virtual: 2047.88 MB
Available Virtual: 1883.64 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:71.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0BCDEE5D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix 13-11-23.02 - Dávid 24.11.2013  16:35:59.1.4 - x86
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.49.1031.18.2388.1359 [GMT 1:00]
ausgeführt von:: c:\users\Dßvid\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\programdata\1384720831.bdinstall.bin
c:\users\Public\MCL1.6.2.exe
c:\users\Public\Minecraft-Modder_v2.8_de.exe
c:\windows\system32\drivers\npf.sys
c:\windows\system32\FlashPlayerApp.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-10-24 bis 2013-11-24  ))))))))))))))))))))))))))))))
.
.
2013-11-22 13:28 . 2013-11-22 13:28	--------	d-----w-	C:\FRST
2013-11-19 19:35 . 2013-11-19 22:32	--------	d-----w-	c:\program files\Common Files\Steam
2013-11-19 19:35 . 2013-11-24 15:37	--------	d-----w-	c:\program files\Steam
2013-11-18 23:34 . 2013-11-18 23:35	--------	d-----w-	C:\Output
2013-11-18 23:34 . 2013-11-18 23:34	--------	d-----w-	C:\MP4ToMP3Converter
2013-11-18 19:58 . 2013-11-18 19:58	--------	d-----w-	c:\users\Dávid\AppData\Roaming\Avira
2013-11-18 19:56 . 2013-11-18 19:56	--------	d-----w-	c:\programdata\AskPartnerNetwork
2013-11-18 19:56 . 2013-11-18 19:56	--------	d-----w-	c:\program files\AskPartnerNetwork
2013-11-18 19:55 . 2013-11-18 19:55	--------	d-----w-	c:\programdata\APN
2013-11-18 19:51 . 2013-10-31 18:25	90400	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2013-11-18 19:51 . 2013-10-31 18:25	67680	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2013-11-18 19:51 . 2013-10-31 18:25	37352	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2013-11-18 19:51 . 2013-10-31 18:25	137208	----a-w-	c:\windows\system32\drivers\avipbb.sys
2013-11-18 19:51 . 2013-11-18 19:51	--------	d-----w-	c:\programdata\Avira
2013-11-18 19:51 . 2013-11-18 19:51	--------	d-----w-	c:\program files\Avira
2013-11-17 21:19 . 2013-11-17 21:21	--------	d-----w-	c:\programdata\webcam 7
2013-11-17 20:46 . 2013-11-17 20:46	--------	d-----w-	C:\Quarantine
2013-11-17 20:42 . 2013-11-17 20:46	--------	d-----w-	c:\program files\stinger
2013-11-17 20:40 . 2013-11-17 20:40	--------	d-----w-	c:\program files\Bitdefender
2013-11-17 20:40 . 2013-11-17 20:40	--------	d-----w-	c:\users\Dávid\AppData\Roaming\QuickScan
2013-11-17 20:40 . 2013-11-17 20:40	--------	d-----w-	c:\program files\Common Files\Bitdefender
2013-11-14 22:17 . 2013-11-17 20:47	31560	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2013-11-14 14:22 . 2013-11-14 14:22	--------	d-----w-	c:\program files\LogMeIn Hamachi
2013-11-11 16:34 . 2013-11-12 21:53	--------	d-----w-	c:\users\Dávid\AppData\Local\VMware
2013-11-11 16:34 . 2013-11-21 21:20	--------	d-----w-	c:\users\Dávid\AppData\Roaming\VMware
2013-11-11 16:32 . 2013-11-21 21:22	--------	d-----w-	c:\programdata\VMware
2013-11-10 11:07 . 2013-11-10 11:07	321536	----a-w-	c:\windows\system32\LiveWrapRTSP.dll
2013-11-09 13:30 . 2013-11-09 13:31	--------	d-----w-	c:\users\Dávid\Backtrack
2013-11-07 19:37 . 2013-11-07 19:56	--------	d-----w-	c:\users\Dávid\VirtualBox VMs
2013-11-07 19:29 . 2013-11-11 15:36	--------	d-----w-	c:\users\Dávid\.VirtualBox
2013-11-07 19:29 . 2013-11-01 16:10	203024	----a-w-	c:\windows\system32\drivers\VBoxDrv.sys
2013-11-07 19:29 . 2013-11-21 21:19	--------	dc----w-	c:\windows\system32\DRVSTORE
2013-11-07 19:29 . 2013-11-01 16:09	103696	----a-w-	c:\windows\system32\drivers\VBoxUSBMon.sys
2013-11-07 19:23 . 2013-11-21 21:13	--------	d-----w-	c:\users\Dávid\AppData\Roaming\uTorrent
2013-11-06 17:55 . 2013-11-06 17:58	--------	d-----w-	C:\Perl
2013-11-05 17:34 . 2013-11-05 17:34	--------	d-----w-	C:\Riot Games
2013-11-05 17:04 . 2013-11-05 17:04	--------	d-----w-	c:\program files\LOLReplay
2013-11-05 14:21 . 2013-11-05 14:22	--------	d-----w-	c:\program files\Common Files\Adobe
2013-11-01 16:09 . 2013-11-01 16:09	94480	----a-w-	c:\windows\system32\drivers\VBoxUSB.sys
2013-11-01 16:09 . 2013-11-01 16:09	114960	----a-w-	c:\windows\system32\drivers\VBoxNetAdp.sys
2013-10-27 15:30 . 2013-10-27 15:30	--------	d-----w-	c:\program files\LoLOracle
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-11 04:10 . 2013-10-17 16:03	60872	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{A6F10FA5-E9B0-48CA-8D73-D1056F29909C}\offreg.dll
2013-10-18 03:09 . 2013-09-30 07:32	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2013-09-29 12:56 . 2013-09-29 12:55	689489	----a-w-	C:\MCL1.6.2.exe
2013-08-30 17:45 . 2011-11-10 14:52	46080	----a-w-	c:\windows\system32\drivers\HECI.sys
2013-08-30 17:00 . 2013-08-30 17:00	94632	----a-w-	c:\windows\system32\WindowsAccessBridge.dll
2013-08-30 17:00 . 2013-08-30 17:00	867240	----a-w-	c:\windows\system32\npDeployJava1.dll
2013-08-30 17:00 . 2013-08-30 17:00	789416	----a-w-	c:\windows\system32\deployJava1.dll
2013-08-29 18:14 . 2013-08-29 18:14	49664	----a-w-	c:\programdata\Microsoft\Windows\Time\w9xpopen.exe
2013-08-29 18:14 . 2013-08-29 18:14	24064	----a-w-	c:\programdata\Microsoft\Windows\Time\TimeServer.exe
2013-08-29 18:14 . 2013-08-29 18:14	2303488	----a-w-	c:\programdata\Microsoft\Windows\Time\python27.dll
2013-08-29 18:14 . 2013-08-29 18:14	10752	----a-w-	c:\programdata\Microsoft\Windows\Time\Time-svc.exe
2013-08-29 18:14 . 2013-08-29 18:14	569680	----a-w-	c:\programdata\Microsoft\Windows\Time\msvcp90.dll
2013-08-29 18:14 . 2013-08-29 18:14	219648	----a-w-	c:\programdata\Microsoft\Windows\Time\boost_python-vc90-mt-1_48.dll
2013-08-29 16:59 . 2013-08-29 16:59	52224	----a-w-	c:\windows\system32\wltrynt.dll
2013-08-29 16:59 . 2013-08-29 16:59	6656	----a-w-	c:\windows\system32\bcmwlrc.dll
2013-08-29 16:59 . 2013-08-29 16:59	445	----a-w-	c:\windows\system32\vcredist_x86.bat
2013-08-29 16:59 . 2013-08-29 16:59	4358144	----a-w-	c:\windows\system32\bcmttls.dll
2013-08-29 16:59 . 2013-08-29 16:59	2682880	----a-w-	c:\windows\system32\vcredist_x86.exe
2013-08-29 16:59 . 2013-08-29 16:59	91448	----a-w-	c:\windows\system32\bcmwlcoi.dll
2013-08-29 16:59 . 2013-08-29 16:59	4268096	----a-w-	c:\windows\system32\drivers\BCMWL6.SYS
2013-08-29 16:59 . 2013-08-29 16:59	3928064	----a-w-	c:\windows\system32\bcmihvsrv.dll
2013-08-29 16:59 . 2013-08-29 16:59	3616768	----a-w-	c:\windows\system32\bcmihvui.dll
2013-08-29 16:59 . 2013-08-29 16:59	17728	----a-w-	c:\windows\system32\drivers\bcmvwl32.sys
2013-08-29 16:59 . 2013-08-29 16:59	989184	----a-w-	c:\windows\system32\BCMLogon.dll
2013-08-29 16:59 . 2013-08-29 16:59	18496	----a-w-	c:\windows\system32\drivers\bcm42rly.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}]
2013-10-23 19:52	12240	----a-w-	c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" [2013-10-23 12240]
.
[HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-00a7-7a786e7484d7}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-11-16 1168896]
"Spotify"="c:\users\Dávid\AppData\Roaming\Spotify\Spotify.exe" [2013-11-16 5955072]
"Steam"="c:\program files\Steam\Steam.exe" [2013-10-30 1820584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-08-12 196080]
"Nvtmru"="c:\program files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-05-16 1012000]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-08-12 140784]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-02-29 56088]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-08-12 186864]
"ETDCtrl"="c:\program files\Elantech\ETDCtrl.exe" [2012-08-10 2236304]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe" [2013-08-29 6471168]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-09-05 958576]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-11-11 2349392]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-10-31 683576]
"ApnTBMon"="c:\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-10-23 1673680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
LOLRecorder.lnk - c:\program files\LOLReplay\LOLRecorder.exe -minimize [2013-11-5 526848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2013-11-11 14:37	2349392	----a-w-	c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-09-05 171680]
R2 Time;Time;c:\programdata\Microsoft\Windows\Time\Time-svc.exe [2013-08-29 10752]
R3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athur.sys [2010-09-16 1559552]
R3 BcmVWL;Broadcom Virtual Wireless;c:\windows\system32\DRIVERS\bcmvwl32.sys [2013-08-29 17728]
R3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [2013-11-17 31560]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2013-11-01 114960]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys [2013-11-01 94480]
R3 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2013-05-12 25376]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-10-31 37352]
S2 AntiVirMailService;Avira Email-Schutz;c:\program files\Avira\AntiVir Desktop\avmailc7.exe [2013-10-31 972872]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2013-10-31 440376]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2013-10-31 1164360]
S2 APNMCP;Ask Aktualisierungsdienst;c:\program files\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-10-23 166352]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys [2013-10-31 67680]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2013-11-11 1616208]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-02-01 13592]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [2013-10-11 375056]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\DRIVERS\b57xdbd.sys [2012-08-13 64088]
S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\DRIVERS\b57xdmp.sys [2012-08-13 18520]
S3 bScsiMSx;bScsiMSx;c:\windows\system32\DRIVERS\bScsiMSx.sys [2012-06-18 46168]
S3 bScsiSDx;bScsiSDx;c:\windows\system32\DRIVERS\bScsiSDx.sys [2013-04-10 62160]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2012-08-10 273296]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2013-08-08 369656]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2012-01-18 370728]
S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [2013-08-30 46080]
S4 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - MBAMSwissArmy
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-14 21:09	1210320	----a-w-	c:\program files\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-11-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-30 03:09]
.
2013-11-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-08-30 16:56]
.
2013-11-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-08-30 16:56]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
TCP: DhcpNameServer = 192.168.42.129
TCP: Interfaces\{50547C0E-BDCA-45F6-A967-386524E5C6FD}: NameServer = 192.168.178.30,192.168.178.1
TCP: Interfaces\{5474695F-9400-4F02-9BCB-45EBB2E83CB8}: NameServer = 192.168.0.100,192.168.0.1
FF - ProfilePath - c:\users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\
FF - prefs.js: browser.startup.homepage - hxxp://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP49EF6E6E-0344-442B-B359-4DB414E8EEE7&SSPV=
FF - ExtSQL: 2013-09-30 09:31; {b9db16a4-6edc-47ec-a1f4-b86292ed211d}; c:\users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - ExtSQL: 2013-10-03 15:34; downloader@freeyoutubetomp3converter.org; c:\program files\FreeYouTubeToMP3TURBOConverter\Firefox
FF - ExtSQL: 2013-10-09 15:11; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: 2013-10-18 06:54; {e4a8a97b-f2ed-450b-b12d-ee082ba24781}; c:\users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF - ExtSQL: 2013-10-23 21:52; toolbar_AVIRA-V7@apn.ask.com; c:\users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-InstallerLauncher - c:\program files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe
MSConfigStartUp-PC Speed Maximizer - c:\program files\PC Speed Maximizer\SPMLauncher.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'lsass.exe'(596)
c:\windows\System32\BCMLogon.dll
.
Zeit der Fertigstellung: 2013-11-24  16:43:50
ComboFix-quarantined-files.txt  2013-11-24 15:43
.
Vor Suchlauf: 25 Verzeichnis(se), 76.853.440.512 Bytes frei
Nach Suchlauf: 29 Verzeichnis(se), 77.269.458.944 Bytes frei
.
- - End Of File - - 9C11F79490E256877B6AC7632551BD66
A36C5E4F47E84449FF07ED3517B43A31
         

Da sind sie

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

# AdwCleaner v3.013 - Bericht erstellt am 25/11/2013 um 12:32:08
# Updated 24/11/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate  (32 bits)
# Benutzername : Dávid - LALA
# Gestartet von : C:\Users\Dávid\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files\driver-soft
Ordner Gelöscht : C:\Users\Dávid\Documents\PC Speed Maximizer
Datei Gelöscht : C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\searchplugins\conduit-search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\TENCENT

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16520


-\\ Mozilla Firefox v25.0.1 (de)

[ Datei : C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\prefs.js ]

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP49EF6E6E-0344-442B-B359-4DB414E8EEE7&SSPV=");

-\\ Google Chrome v31.0.1650.57

[ Datei : C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1788 octets] - [25/11/2013 12:30:37]
AdwCleaner[S0].txt - [1713 octets] - [25/11/2013 12:32:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1773 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Ultimate x86
Ran by D*vid on 25.11.2013 at 12:37:48,25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"



~~~ FireFox

Successfully deleted: [File] C:\Users\D*vid\AppData\Roaming\mozilla\firefox\profiles\zo6r8odu.default\extensions\toolbar_avira-v7@apn.ask.com.xpi
Emptied folder: C:\Users\D*vid\AppData\Roaming\mozilla\firefox\profiles\zo6r8odu.default\minidumps [69 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.11.2013 at 12:40:17,58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.24.11

Windows 7 x86 NTFS
Internet Explorer 9.0.8112.16421
Dávid :: LALA [Administrator]

25.11.2013 13:06:05
mbam-log-2013-11-25 (13-06-05).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 393871
Laufzeit: 3 Stunde(n), 23 Minute(n), 30 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-11-2013
Ran by Dávid (administrator) on LALA on 25-11-2013 16:30:58
Running from C:\Users\Dávid\Desktop
Microsoft Windows 7 Ultimate  (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Spotify Ltd) C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(LOL Replay) C:\Program Files\LOLReplay\LOLRecorder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Microsoft) C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\update.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\updrgui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\update.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - "C:\Windows\system32\hkcmd.exe"
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2236304 2012-08-10] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE [6471168 2013-08-29] (Broadcom Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2349392 2013-11-11] (LogMeIn Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [683576 2013-10-31] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-16] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\Dávid\AppData\Roaming\Spotify\spotify.exe [5955072 2013-11-16] (Spotify Ltd)
HKCU\...\Run: [Steam] - C:\Program Files\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
AppInit_DLLs: C:\Windows\System32\nvinit.dll [ 2013-05-12] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDF03F1F8AECBCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{50547C0E-BDCA-45F6-A967-386524E5C6FD}: [NameServer]192.168.178.30,192.168.178.1
Tcpip\..\Interfaces\{5474695F-9400-4F02-9BCB-45EBB2E83CB8}: [NameServer]192.168.0.100,192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Adblock Plus - C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: greasemonkey - C:\Users\Dávid\AppData\Roaming\Mozilla\Firefox\Profiles\zo6r8odu.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF HKLM\...\Firefox\Extensions: [downloader@freeyoutubetomp3converter.org] - C:\Program Files\FreeYouTubeToMP3TURBOConverter\Firefox
FF Extension: FreeYouTubeToMP3TURBOConverter plugin for Mozilla Firefox - C:\Program Files\FreeYouTubeToMP3TURBOConverter\Firefox

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup:         "urls_to_restore_on_startup": [
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Extension: (Google Docs) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.13_0
CHR Extension: (League of Legends(LoL) For New Tab) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hagfodkdlfpceodghmlnbjafkcdjnifd\1.1.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\DVID~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

========================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [972872 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279024 2013-08-12] (Intel Corporation)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1616208 2013-11-11] (LogMeIn Inc.)
R3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752 2012-04-24] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2013-10-11] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 Time; C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe [10752 2013-08-29] (Microsoft)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [5179392 2013-08-29] (Broadcom Corporation)

==================== Drivers (Whitelisted) ====================

S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1559552 2010-09-16] (Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-10-31] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-31] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [67680 2013-10-31] (Avira Operations GmbH & Co. KG)
R3 b57xdbd; C:\Windows\System32\DRIVERS\b57xdbd.sys [64088 2012-08-13] (Broadcom Corporation)
R3 b57xdmp; C:\Windows\System32\DRIVERS\b57xdmp.sys [18520 2012-08-13] (Broadcom Corporation)
R3 BCM42RLY; C:\Windows\System32\drivers\BCM42RLY.sys [18496 2013-08-29] (Broadcom Corporation)
S3 BcmVWL; C:\Windows\System32\DRIVERS\bcmvwl32.sys [17728 2013-08-29] (Broadcom Corporation)
R3 bScsiMSx; C:\Windows\System32\DRIVERS\bScsiMSx.sys [46168 2012-06-18] (Broadcom Corporation)
R3 bScsiSDx; C:\Windows\System32\DRIVERS\bScsiSDx.sys [62160 2013-04-10] (Broadcom Corporation)
R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [273296 2012-08-10] (ELAN Microelectronics Corp.)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [31560 2013-11-17] ()
R3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2013-11-25] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [46080 2013-08-30] (Intel Corporation)
R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [25376 2013-05-12] (NVIDIA Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-31] (Avira GmbH)
S3 catchme; \??\C:\Users\DVID~1\AppData\Local\Temp\catchme.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]
U4 vsserv; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-25 12:40 - 2013-11-25 12:40 - 00001272 _____ C:\Users\Dávid\Desktop\JRT.txt
2013-11-25 12:36 - 2013-11-25 12:36 - 00000000 ____D C:\Windows\ERUNT
2013-11-25 12:30 - 2013-11-25 12:32 - 00000000 ____D C:\AdwCleaner
2013-11-25 12:29 - 2013-11-25 12:30 - 01034531 _____ (Thisisu) C:\Users\Dávid\Desktop\JRT.exe
2013-11-25 12:29 - 2013-11-25 12:29 - 01091882 _____ C:\Users\Dávid\Desktop\adwcleaner.exe
2013-11-25 12:28 - 2013-11-25 13:05 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-11-25 05:06 - 2013-11-25 05:06 - 00003288 ____N C:\bootsqm.dat
2013-11-25 03:52 - 2013-11-25 03:52 - 00000000 ____D C:\Users\Dávid\Downloads\Notfall-CD-2.2
2013-11-25 03:33 - 2013-11-25 03:51 - 548011982 _____ C:\Users\Dávid\Downloads\Notfall-CD-2.2.zip
2013-11-25 03:09 - 2013-11-25 03:20 - 00006360 _____ C:\Windows\DPINST.LOG
2013-11-25 03:09 - 2013-11-25 03:09 - 00000000 ____D C:\ProgramData\Oracle
2013-11-25 03:08 - 2013-11-25 03:08 - 00000000 ____D C:\Program Files\Common Files\Java
2013-11-25 03:08 - 2013-10-08 07:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-11-25 03:08 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-25 03:08 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-25 03:08 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-25 03:04 - 2013-11-25 03:08 - 00004943 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log
2013-11-25 02:14 - 2013-11-25 02:14 - 00013507 _____ C:\Users\Dávid\Downloads\MemTest4.zip
2013-11-25 02:14 - 2013-11-25 02:14 - 00000000 ____D C:\Users\Dávid\Downloads\MemTest4
2013-11-25 01:26 - 2012-07-26 04:39 - 00526952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-11-25 01:26 - 2012-07-26 04:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-11-25 01:26 - 2012-07-26 03:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-11-25 01:26 - 2012-06-02 15:34 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-11-25 01:24 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-11-25 01:24 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-11-25 01:24 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-11-25 01:24 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-11-25 01:24 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-11-25 01:24 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-11-25 01:24 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-11-25 01:24 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-11-25 01:23 - 2012-03-01 06:53 - 00019312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-11-25 01:23 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-11-25 01:23 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-11-25 01:23 - 2010-02-11 08:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-11-25 01:20 - 2013-02-12 16:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-25 01:20 - 2013-02-12 16:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-11-25 01:20 - 2013-02-12 14:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-25 01:20 - 2012-06-06 06:09 - 01236992 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-11-25 01:20 - 2012-06-02 05:51 - 00134000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-25 01:20 - 2012-06-02 05:51 - 00067440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-25 01:20 - 2012-06-02 05:50 - 00369336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-25 01:20 - 2012-06-02 05:48 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-25 01:20 - 2010-12-23 06:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-11-25 01:20 - 2010-12-23 06:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2013-11-25 01:20 - 2010-12-23 06:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-11-25 01:20 - 2010-10-16 05:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2013-11-25 01:19 - 2009-09-03 08:04 - 01320960 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2013-11-25 01:19 - 2009-08-19 08:20 - 00507568 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-11-25 01:19 - 2009-08-19 08:20 - 00442920 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-11-25 01:18 - 2012-12-07 06:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-11-25 01:18 - 2012-12-07 05:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-11-25 01:18 - 2012-12-07 04:21 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-11-25 01:18 - 2012-12-07 04:21 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-11-25 01:17 - 2012-11-30 00:21 - 00420032 _____ C:\Windows\system32\locale.nls
2013-11-25 01:17 - 2011-05-04 05:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-11-25 01:17 - 2011-05-04 05:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-11-25 01:17 - 2011-05-04 05:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-11-25 01:17 - 2011-05-04 05:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-11-25 01:17 - 2011-05-04 05:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-11-25 01:17 - 2011-05-04 05:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-11-25 01:17 - 2011-05-04 05:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-11-25 01:17 - 2011-05-04 05:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-11-25 01:17 - 2011-05-04 05:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-11-25 01:16 - 2012-11-02 05:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-11-25 01:16 - 2011-11-17 06:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-11-25 01:16 - 2011-11-17 06:39 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-25 01:16 - 2011-11-17 06:39 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-25 01:16 - 2011-11-17 06:39 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-25 01:16 - 2011-11-17 06:38 - 01037312 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-25 01:16 - 2011-11-17 06:36 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-25 01:16 - 2011-10-15 06:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-11-25 01:16 - 2011-07-09 03:26 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-11-25 01:16 - 2011-05-04 03:43 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-11-25 01:16 - 2011-05-04 03:43 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-11-25 01:16 - 2010-09-01 05:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-11-25 01:16 - 2010-08-31 05:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2013-11-25 01:16 - 2010-08-31 05:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2013-11-25 01:16 - 2010-06-19 07:23 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2013-11-25 01:16 - 2009-12-19 10:02 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2013-11-25 01:16 - 2009-12-19 10:02 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2013-11-25 01:16 - 2009-12-19 10:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2013-11-25 01:16 - 2009-12-19 10:02 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2013-11-25 01:16 - 2009-12-19 10:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2013-11-25 01:16 - 2009-12-19 10:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2013-11-25 01:16 - 2009-12-19 10:02 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2013-11-25 01:16 - 2009-12-08 12:32 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2013-11-25 01:15 - 2013-01-04 05:55 - 01287528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-11-25 01:15 - 2013-01-04 05:55 - 00187240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-11-25 01:15 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-11-25 01:15 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-11-25 01:15 - 2012-07-04 22:23 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-11-25 01:15 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-11-25 01:15 - 2012-05-05 08:44 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-11-25 01:15 - 2012-04-07 12:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-11-25 01:15 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-11-25 01:15 - 2011-10-26 05:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-11-25 01:15 - 2011-10-26 05:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-11-25 01:15 - 2011-06-15 10:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2013-11-25 01:15 - 2011-06-15 10:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-11-25 01:15 - 2011-06-15 10:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-11-25 01:15 - 2011-06-15 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-11-25 01:15 - 2011-06-15 10:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-11-25 01:15 - 2011-05-03 05:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-11-25 01:15 - 2011-03-12 12:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-11-25 01:15 - 2011-02-19 06:33 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-11-25 01:15 - 2010-09-01 05:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-11-25 01:14 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-25 01:14 - 2012-08-02 18:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-11-25 01:14 - 2012-01-03 06:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-11-25 01:14 - 2011-04-27 03:33 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2013-11-25 01:14 - 2011-02-24 06:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-11-25 01:14 - 2011-02-12 06:30 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2013-11-25 01:14 - 2010-12-18 06:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-25 01:14 - 2010-08-21 06:33 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-11-25 01:14 - 2010-03-05 08:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2013-11-25 00:13 - 2012-12-16 15:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-11-25 00:13 - 2012-12-16 15:25 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-11-25 00:13 - 2009-10-19 15:10 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-24 23:45 - 2013-11-24 23:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-24 23:45 - 2013-11-24 23:45 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-24 23:45 - 2013-11-24 23:45 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-24 23:45 - 2013-11-24 23:45 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-24 23:45 - 2013-11-24 23:45 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-24 23:44 - 2013-11-24 23:46 - 00004597 _____ C:\Windows\IE9_main.log
2013-11-24 23:36 - 2010-03-04 05:04 - 00146304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-11-24 23:36 - 2010-03-04 04:57 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2013-11-24 23:34 - 2013-11-11 05:50 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-24 23:28 - 2010-09-14 07:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2013-11-24 23:25 - 2013-11-24 23:27 - 00000000 ____D C:\Windows\system32\MRT
2013-11-24 23:24 - 2013-11-07 15:50 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-24 23:23 - 2011-08-27 05:43 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-11-24 23:23 - 2011-08-27 05:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-11-24 23:23 - 2011-04-25 03:35 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-24 23:23 - 2011-02-18 06:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-11-24 23:23 - 2010-08-04 07:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2013-11-24 23:22 - 2013-03-01 04:11 - 02345984 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-11-24 23:22 - 2012-11-22 10:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-11-24 23:22 - 2012-06-02 05:45 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-24 23:22 - 2012-06-02 05:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-11-24 23:22 - 2012-06-02 05:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-11-24 23:22 - 2011-04-29 03:57 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-11-24 23:22 - 2011-04-29 03:57 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-11-24 23:22 - 2010-11-02 05:41 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2013-11-24 23:22 - 2010-11-02 05:40 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2013-11-24 23:22 - 2010-11-02 05:40 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2013-11-24 23:22 - 2010-11-02 05:39 - 00749056 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2013-11-24 23:22 - 2010-11-02 05:34 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2013-11-24 23:22 - 2010-11-02 05:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2013-11-24 23:22 - 2010-08-26 05:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2013-11-24 23:22 - 2010-08-21 06:32 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-11-24 23:22 - 2010-07-29 07:30 - 00197632 _____ (Intel(R) Corporation) C:\Windows\system32\ir32_32.dll
2013-11-24 23:22 - 2010-07-29 07:30 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2013-11-24 23:21 - 2013-04-12 14:58 - 01210728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-11-24 23:21 - 2013-03-19 06:06 - 03958120 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-11-24 23:21 - 2013-03-19 06:06 - 03902312 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-11-24 23:21 - 2013-03-19 05:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-11-24 23:21 - 2013-03-19 03:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-11-24 23:21 - 2013-02-12 14:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023x.sys
2013-11-24 23:21 - 2013-02-12 14:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-11-24 23:21 - 2013-01-24 05:51 - 00195816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-11-24 23:21 - 2012-11-09 05:49 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-11-24 23:21 - 2012-11-02 05:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-11-24 23:21 - 2012-08-24 18:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-11-24 23:21 - 2012-04-28 04:19 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-11-24 23:21 - 2011-11-17 06:41 - 01288984 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-11-24 23:21 - 2011-08-17 05:26 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-11-24 23:21 - 2011-08-17 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2013-11-24 23:21 - 2011-08-17 05:22 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-11-24 23:21 - 2011-08-17 05:22 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2013-11-24 23:21 - 2011-08-17 05:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2013-11-24 23:21 - 2011-06-16 05:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-11-24 23:21 - 2011-05-24 11:35 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2013-11-24 23:21 - 2011-04-29 03:57 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-11-24 23:21 - 2011-03-03 06:29 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2013-11-24 23:21 - 2011-03-03 06:29 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2013-11-24 23:21 - 2011-03-03 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2013-11-24 23:21 - 2010-06-29 06:02 - 01413632 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2013-11-24 23:21 - 2009-10-31 06:45 - 02614272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-11-24 23:21 - 2009-10-28 07:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2013-11-24 22:57 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-11-24 22:57 - 2012-05-02 05:52 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-11-24 22:57 - 2012-04-26 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-11-24 22:57 - 2012-04-26 05:48 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-11-24 22:57 - 2012-04-26 05:43 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-11-24 22:57 - 2012-03-17 08:20 - 00056688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-11-24 22:57 - 2011-12-16 08:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-11-24 22:57 - 2010-11-02 05:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2013-11-24 22:57 - 2010-10-16 05:41 - 00101760 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-11-24 22:57 - 2010-08-27 06:46 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2013-11-24 22:57 - 2010-06-26 06:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2013-11-24 22:57 - 2010-05-23 11:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-11-24 22:57 - 2010-05-23 11:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2013-11-24 22:57 - 2010-05-23 11:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2013-11-24 22:56 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-11-24 22:56 - 2011-03-11 06:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-11-24 22:56 - 2011-03-11 06:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-11-24 22:55 - 2012-01-04 10:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-11-24 22:55 - 2010-12-21 06:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-11-24 22:55 - 2010-12-21 06:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-11-24 22:55 - 2010-12-21 06:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2013-11-24 22:55 - 2010-12-21 06:38 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2013-11-24 22:55 - 2010-12-21 06:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2013-11-24 22:55 - 2010-12-21 06:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2013-11-24 22:55 - 2010-12-21 06:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-11-24 22:54 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-11-24 22:54 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-11-24 22:54 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-11-24 22:54 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-11-24 22:54 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-11-24 22:53 - 2012-09-06 17:48 - 00245616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2013-11-24 22:53 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-11-24 22:53 - 2011-04-22 20:36 - 00026496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-11-24 22:53 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-11-24 22:53 - 2011-02-23 06:05 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-11-24 22:53 - 2010-08-21 06:36 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2013-11-24 22:53 - 2010-01-19 00:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2013-11-24 22:53 - 2010-01-19 00:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2013-11-24 22:53 - 2010-01-19 00:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2013-11-24 22:53 - 2010-01-19 00:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2013-11-24 22:53 - 2010-01-19 00:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2013-11-24 22:53 - 2010-01-19 00:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2013-11-24 22:53 - 2010-01-19 00:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2013-11-24 22:53 - 2010-01-19 00:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2013-11-24 22:52 - 2013-01-04 05:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-11-24 22:52 - 2013-01-04 05:46 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-11-24 22:52 - 2013-01-04 05:46 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 03:59 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-11-24 22:52 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-11-24 22:52 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-11-24 22:52 - 2012-05-14 05:37 - 00768512 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-11-24 22:52 - 2010-05-05 07:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2013-11-24 22:48 - 2011-02-03 06:45 - 00219008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-11-24 22:48 - 2010-11-02 05:46 - 00728448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-11-24 22:48 - 2010-11-02 05:23 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-11-24 22:47 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-11-24 22:47 - 2012-02-15 05:22 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-11-24 22:47 - 2010-01-09 07:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2013-11-24 22:45 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-11-24 22:45 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-11-24 22:45 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-11-24 22:45 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-11-24 22:45 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-11-24 22:45 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-11-24 22:45 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-11-24 22:45 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-11-24 22:45 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-11-24 22:31 - 2013-11-24 22:31 - 00000000 ____D C:\Users\Dávid\Downloads\Windows+7+Loader+v2.1.1+by+Daz+(x86+&+x64)
2013-11-24 22:30 - 2013-11-24 22:30 - 01642139 _____ C:\Users\Dávid\Downloads\Windows+7+Loader+v2.1.1+by+Daz+(x86+&+x64).zip
2013-11-24 16:43 - 2013-11-24 16:43 - 00016046 _____ C:\ComboFix.txt
2013-11-24 16:32 - 2013-11-24 16:43 - 00000000 ____D C:\Windows\erdnt
2013-11-24 16:32 - 2013-11-24 16:43 - 00000000 ____D C:\Qoobox
2013-11-24 16:32 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-24 16:32 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-24 16:32 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-24 16:32 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-24 16:32 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-24 16:32 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-24 16:32 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-24 16:32 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-24 16:30 - 2013-11-24 16:29 - 05149261 ____R (Swearware) C:\Users\Dávid\Desktop\ComboFix.exe
2013-11-22 14:29 - 2013-11-22 14:29 - 00018534 _____ C:\Users\Dávid\Desktop\Addition.txt
2013-11-22 14:28 - 2013-11-25 16:30 - 00013826 _____ C:\Users\Dávid\Desktop\FRST.txt
2013-11-22 14:28 - 2013-11-22 14:28 - 00000000 ____D C:\FRST
2013-11-22 14:27 - 2013-11-22 14:26 - 01090881 ____N (Farbar) C:\Users\Dávid\Desktop\FRST.exe
2013-11-21 23:49 - 2013-11-21 23:49 - 00101014 _____ C:\Users\Dávid\Downloads\OTL.Txt
2013-11-21 23:49 - 2013-11-21 23:49 - 00050368 _____ C:\Users\Dávid\Downloads\Extras.Txt
2013-11-21 23:42 - 2013-11-21 23:42 - 00602112 _____ (OldTimer Tools) C:\Users\Dávid\Downloads\OTL.exe
2013-11-21 23:39 - 2013-11-25 01:53 - 00058016 _____ C:\Users\Dávid\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-21 23:35 - 2013-11-25 12:34 - 00000560 _____ C:\Windows\setupact.log
2013-11-21 23:35 - 2013-11-25 01:48 - 00268272 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-21 23:35 - 2013-11-24 18:01 - 00001062 _____ C:\Windows\PFRO.log
2013-11-21 23:35 - 2013-11-21 23:35 - 00000000 _____ C:\Windows\setuperr.log
2013-11-21 22:53 - 2013-11-21 12:23 - 05192704 ____N (Geza Kovacs) C:\Users\Dávid\Documents\unetbootin-windows-585.exe
2013-11-21 22:52 - 2013-11-21 12:40 - 621948928 ____N C:\Users\Dávid\Documents\rescue-system.iso
2013-11-21 22:24 - 2013-11-21 22:24 - 04379048 _____ (Piriform Ltd) C:\Users\Dávid\Downloads\ccsetup407.exe
2013-11-21 22:19 - 2013-11-21 22:19 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-21 00:50 - 2013-11-21 00:52 - 00000716 _____ C:\Users\Dávid\Downloads\ffs_98_full.wmv
2013-11-19 23:53 - 2013-11-19 23:53 - 00164352 _____ (NeSuckS) C:\Users\Dávid\Downloads\Universal Aimbot 2.4.exe
2013-11-19 21:00 - 2013-11-19 21:00 - 01550496 _____ (Skype Technologies S.A.) C:\Users\Dávid\Downloads\SkypeSetup.exe
2013-11-19 20:49 - 2013-11-19 20:49 - 00000213 _____ C:\Users\Dávid\Desktop\Counter-Strike Source.url
2013-11-19 20:49 - 2013-11-19 20:49 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-19 20:35 - 2013-11-25 12:34 - 00000000 ____D C:\Program Files\Steam
2013-11-19 20:35 - 2013-11-19 23:32 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-11-19 20:35 - 2013-11-19 20:35 - 00000875 _____ C:\Users\Public\Desktop\Steam.lnk
2013-11-19 20:32 - 2013-11-19 20:33 - 08531968 _____ C:\Users\Dávid\Downloads\SteamInstall_German.msi
2013-11-19 00:34 - 2013-11-19 00:35 - 00000000 ____D C:\Output
2013-11-19 00:34 - 2013-11-19 00:34 - 00000627 _____ C:\Users\Public\Desktop\MP4 To MP3 Converter.lnk
2013-11-19 00:34 - 2013-11-19 00:34 - 00000000 ____D C:\MP4ToMP3Converter
2013-11-19 00:33 - 2013-11-19 00:33 - 03624560 _____ (hxxp://www.MP4ToMP3Converter.net                            ) C:\Users\Dávid\Downloads\mp4tomp3-304.exe
2013-11-18 21:43 - 2013-11-18 21:54 - 136016745 _____ C:\Users\Dávid\Downloads\avira_internet_security_suite_de.exe
2013-11-18 21:15 - 2013-11-18 21:25 - 135277678 _____ C:\Users\Dávid\Downloads\avira_ultimate_protection_suite_de.exe
2013-11-18 20:58 - 2013-11-18 20:58 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Avira
2013-11-18 20:56 - 2013-11-18 20:56 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-11-18 20:56 - 2013-11-18 20:56 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-11-18 20:52 - 2013-11-25 16:27 - 01860381 _____ C:\Windows\WindowsUpdate.log
2013-11-18 20:52 - 2013-11-18 22:03 - 00002012 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-11-18 20:51 - 2013-11-18 20:51 - 00000000 ____D C:\ProgramData\Avira
2013-11-18 20:51 - 2013-11-18 20:51 - 00000000 ____D C:\Program Files\Avira
2013-11-18 20:51 - 2013-10-31 19:25 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-18 20:51 - 2013-10-31 19:25 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-11-18 20:51 - 2013-10-31 19:25 - 00067680 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-18 20:51 - 2013-10-31 19:25 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-18 20:51 - 2013-10-31 19:25 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-11-18 20:46 - 2013-11-18 20:44 - 126764512 ____N C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe
2013-11-18 20:36 - 2013-11-18 20:34 - 126764512 _____ C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe.txt
2013-11-17 22:19 - 2013-11-17 22:21 - 00000000 ____D C:\ProgramData\webcam 7
2013-11-17 21:46 - 2013-11-17 21:46 - 00000000 ____D C:\Quarantine
2013-11-17 21:43 - 2013-11-17 21:46 - 00000594 _____ C:\Users\Dávid\Downloads\Stinger_17112013_214331.html
2013-11-17 21:43 - 2013-11-17 21:43 - 10197536 _____ (McAfee Inc) C:\Users\Dávid\Downloads\stinger32.exe
2013-11-17 21:42 - 2013-11-17 21:46 - 00000114 ___RH C:\Users\Dávid\Downloads\stinger.opt
2013-11-17 21:42 - 2013-11-17 21:46 - 00000000 ____D C:\Program Files\stinger
2013-11-17 21:42 - 2013-11-17 21:42 - 09448512 _____ (McAfee Inc.) C:\Users\Dávid\Downloads\stinger.exe
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Program Files\Bitdefender
2013-11-17 21:39 - 2013-11-17 21:39 - 07173128 _____ C:\Users\Dávid\Downloads\bitdefender_antivirus.exe
2013-11-17 21:33 - 2013-11-17 21:34 - 00206184 _____ C:\Users\Dávid\Downloads\Opera_17.0.1241.53_Setup.exe
2013-11-16 02:59 - 2013-11-16 02:59 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-14 23:17 - 2013-11-17 21:47 - 00031560 _____ C:\Windows\system32\Drivers\mbamchameleon.sys
2013-11-14 23:17 - 2013-11-14 23:17 - 00000000 ____D C:\Users\Dávid\Downloads\mbam-chameleon-1.62.1.1000
2013-11-14 23:02 - 2013-11-14 23:02 - 01440846 _____ C:\Users\Dávid\Downloads\mbam-chameleon-1.62.1.1000.zip
2013-11-14 15:22 - 2013-11-14 15:22 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2013-11-12 23:40 - 2013-11-12 23:41 - 07271424 _____ C:\Users\Dávid\Downloads\LoLOracle_1_0_1.msi
2013-11-11 23:31 - 2013-11-12 22:55 - 00000081 _____ C:\Users\Dávid\Desktop\Neues Textdokument.txt
2013-11-11 17:34 - 2013-11-12 22:53 - 00000000 ____D C:\Users\Dávid\AppData\Local\VMware
2013-11-11 17:34 - 2013-11-11 17:34 - 00000000 ____D C:\Users\Dávid\Documents\Virtual Machines
2013-11-11 17:32 - 2013-11-21 22:22 - 00000000 ____D C:\ProgramData\VMware
2013-11-11 17:22 - 2013-11-11 17:23 - 98508144 _____ (VMware, Inc.) C:\Users\Dávid\Downloads\VMware-player-6.0.1-1379776.exe
2013-11-11 17:22 - 2013-11-11 17:22 - 04090738 _____ C:\Users\Dávid\Downloads\VMware-Player-6.0.1-1379776.i386.bundle.part
2013-11-10 12:07 - 2013-11-10 12:07 - 00321536 _____ C:\Windows\system32\LiveWrapRTSP.dll
2013-11-09 14:30 - 2013-11-09 14:31 - 00000000 ____D C:\Users\Dávid\Backtrack
2013-11-09 14:30 - 2013-11-09 14:30 - 00000000 ____D C:\Users\Dávid\Downloads\TL-WN821N_V3_101101_German
2013-11-07 21:15 - 2013-11-07 22:13 - 00000000 ____D C:\Users\Dávid\Downloads\BT5R3-GNOME-32
2013-11-07 20:37 - 2013-11-07 20:56 - 00000000 ____D C:\Users\Dávid\VirtualBox VMs
2013-11-07 20:29 - 2013-11-11 16:36 - 00000000 ____D C:\Users\Dávid\.VirtualBox
2013-11-07 20:29 - 2013-11-01 17:10 - 00203024 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2013-11-07 20:29 - 2013-11-01 17:09 - 00103696 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2013-11-07 20:24 - 2013-11-07 20:24 - 00000000 ____D C:\Users\Dávid\Downloads\BT5R3-GNOME-32-VM
2013-11-07 20:23 - 2013-11-21 22:13 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\uTorrent
2013-11-07 20:22 - 2013-11-07 20:22 - 01141328 _____ (BitTorrent Inc.) C:\Users\Dávid\Downloads\utorrent3.3.2n30260.exe
2013-11-07 20:22 - 2013-11-07 20:22 - 00196735 _____ C:\Users\Dávid\Downloads\BT5R3-GNOME-32-VM.torrent
2013-11-07 20:21 - 2013-11-07 20:23 - 106230544 _____ (Oracle Corporation) C:\Users\Dávid\Downloads\VirtualBox-4.3.2-90405-Win(1).exe
2013-11-07 19:18 - 2013-11-07 19:21 - 106230544 _____ (Oracle Corporation) C:\Users\Dávid\Downloads\VirtualBox-4.3.2-90405-Win.exe
2013-11-07 17:49 - 2013-11-07 17:51 - 00011816 _____ C:\Users\Dávid\Downloads\peek.zip
2013-11-07 17:43 - 2013-11-07 17:49 - 70772220 _____ C:\Users\Dávid\Downloads\chaox-2009.7.iso.part
2013-11-07 16:19 - 2013-11-07 16:21 - 16089372 _____ C:\Users\Dávid\Downloads\BT5R3-GNOME-VM-32.7z.part
2013-11-07 16:17 - 2013-11-10 18:30 - 00000000 ____D C:\Windows\pss
2013-11-06 19:07 - 2013-11-06 19:07 - 00087489 _____ C:\Users\Dávid\Downloads\gerix-wifi-cracker-master.rar
2013-11-06 19:07 - 2013-11-06 19:07 - 00000000 ____D C:\Users\Dávid\Downloads\gerix-wifi-cracker-master
2013-11-06 19:02 - 2013-11-06 19:02 - 00013339 _____ C:\Users\Dávid\Desktop\cmd - Verknüpfung.lnk
2013-11-06 18:55 - 2013-11-06 18:58 - 00000000 ____D C:\Perl
2013-11-06 18:48 - 2013-11-06 18:54 - 26968140 _____ C:\Users\Dávid\Downloads\ActivePerl-5.16.3.1603-MSWin32-x86-296746.msi
2013-11-06 18:40 - 2013-11-06 18:40 - 00006277 _____ C:\Users\Dávid\Downloads\WEPCrack-0.1.0(1).tar.gz
2013-11-06 18:38 - 2013-11-06 18:38 - 00006277 _____ C:\Users\Dávid\Downloads\WEPCrack-0.1.0.tar.gz
2013-11-06 18:38 - 2013-11-06 18:38 - 00000000 ____D C:\Users\Dávid\Downloads\WEPCrack-0.1.0
2013-11-06 18:15 - 2013-11-06 18:15 - 00000000 ____D C:\Users\Dávid\Downloads\aircrack-ng-1.2-beta1-win
2013-11-06 17:46 - 2013-11-06 18:06 - 08287320 _____ C:\Users\Dávid\Downloads\aircrack-ng-1.2-beta1-win.zip
2013-11-06 11:14 - 2013-11-06 11:14 - 00130186 _____ C:\Users\Dávid\Downloads\459588_569534699745100_912065965_o.jpg.part
2013-11-06 11:14 - 2013-11-06 11:14 - 00114310 _____ C:\Users\Dávid\Downloads\1381744_643030019062234_1225283321_n.jpg.part
2013-11-06 09:51 - 2013-11-06 09:51 - 00053171 _____ C:\Users\Dávid\Downloads\306929_2250084468368_321038990_n.jpg.part
2013-11-05 18:34 - 2013-11-05 18:34 - 00000000 ____D C:\Riot Games
2013-11-05 18:04 - 2013-11-06 09:53 - 00000000 ____D C:\Users\Dávid\Documents\LOLReplay
2013-11-05 18:04 - 2013-11-05 18:04 - 00001847 _____ C:\Users\Public\Desktop\LOL Recorder.lnk
2013-11-05 18:04 - 2013-11-05 18:04 - 00000000 ____D C:\Program Files\LOLReplay
2013-11-05 17:56 - 2013-11-05 18:00 - 01471311 _____ C:\Users\Dávid\Downloads\LOLReplay-0.8.5.0.exe
2013-11-05 15:22 - 2013-11-05 15:22 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-05 15:21 - 2013-11-05 15:25 - 00000000 ____D C:\ProgramData\Adobe
2013-11-05 15:21 - 2013-11-05 15:22 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-11-05 15:21 - 2013-11-05 15:21 - 00000000 ____D C:\Program Files\Adobe
2013-11-05 14:59 - 2013-11-05 14:59 - 04207928 _____ (Smart Projects                                              ) C:\Users\Dávid\Downloads\isobuster_all_lang_3.2.exe
2013-11-01 17:09 - 2013-11-01 17:09 - 00114960 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp.sys
2013-11-01 17:09 - 2013-11-01 17:09 - 00094480 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSB.sys
2013-10-27 16:30 - 2013-10-27 16:30 - 00000942 _____ C:\Users\Public\Desktop\LoLOracle.lnk
2013-10-27 16:30 - 2013-10-27 16:30 - 00000000 ____D C:\Program Files\LoLOracle
2013-10-27 16:29 - 2013-10-27 16:29 - 07270912 _____ C:\Users\Dávid\Downloads\setup.msi

==================== One Month Modified Files and Folders =======

2013-11-25 16:31 - 2013-11-22 14:28 - 00013826 _____ C:\Users\Dávid\Desktop\FRST.txt
2013-11-25 16:31 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2013-11-25 16:27 - 2013-11-18 20:52 - 01860381 _____ C:\Windows\WindowsUpdate.log
2013-11-25 16:19 - 2013-09-30 08:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-25 16:07 - 2013-08-30 17:56 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-25 13:05 - 2013-11-25 12:28 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-11-25 12:43 - 2009-07-14 05:34 - 00014192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-25 12:43 - 2009-07-14 05:34 - 00014192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-25 12:40 - 2013-11-25 12:40 - 00001272 _____ C:\Users\Dávid\Desktop\JRT.txt
2013-11-25 12:37 - 2013-10-03 16:00 - 00000000 ____D C:\Users\Dávid\AppData\Local\LogMeIn Hamachi
2013-11-25 12:36 - 2013-11-25 12:36 - 00000000 ____D C:\Windows\ERUNT
2013-11-25 12:35 - 2013-08-30 19:22 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Spotify
2013-11-25 12:34 - 2013-11-21 23:35 - 00000560 _____ C:\Windows\setupact.log
2013-11-25 12:34 - 2013-11-19 20:35 - 00000000 ____D C:\Program Files\Steam
2013-11-25 12:34 - 2013-08-30 17:56 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-25 12:34 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-25 12:32 - 2013-11-25 12:30 - 00000000 ____D C:\AdwCleaner
2013-11-25 12:30 - 2013-11-25 12:29 - 01034531 _____ (Thisisu) C:\Users\Dávid\Desktop\JRT.exe
2013-11-25 12:29 - 2013-11-25 12:29 - 01091882 _____ C:\Users\Dávid\Desktop\adwcleaner.exe
2013-11-25 06:37 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-25 05:06 - 2013-11-25 05:06 - 00003288 ____N C:\bootsqm.dat
2013-11-25 03:52 - 2013-11-25 03:52 - 00000000 ____D C:\Users\Dávid\Downloads\Notfall-CD-2.2
2013-11-25 03:51 - 2013-11-25 03:33 - 548011982 _____ C:\Users\Dávid\Downloads\Notfall-CD-2.2.zip
2013-11-25 03:20 - 2013-11-25 03:09 - 00006360 _____ C:\Windows\DPINST.LOG
2013-11-25 03:09 - 2013-11-25 03:09 - 00000000 ____D C:\ProgramData\Oracle
2013-11-25 03:08 - 2013-11-25 03:08 - 00000000 ____D C:\Program Files\Common Files\Java
2013-11-25 03:08 - 2013-11-25 03:04 - 00004943 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log
2013-11-25 03:08 - 2013-08-29 21:38 - 00000000 ____D C:\Program Files\Java
2013-11-25 02:14 - 2013-11-25 02:14 - 00013507 _____ C:\Users\Dávid\Downloads\MemTest4.zip
2013-11-25 02:14 - 2013-11-25 02:14 - 00000000 ____D C:\Users\Dávid\Downloads\MemTest4
2013-11-25 01:53 - 2013-11-21 23:39 - 00058016 _____ C:\Users\Dávid\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 01:48 - 2013-11-21 23:35 - 00268272 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-25 01:45 - 2009-07-14 09:56 - 00000000 ____D C:\Program Files\Windows Journal
2013-11-25 01:45 - 2009-07-14 09:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-11-25 01:45 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-25 00:33 - 2013-08-29 16:17 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-25 00:27 - 2013-08-29 16:14 - 00001409 _____ C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-25 00:26 - 2013-08-29 17:07 - 00000000 ____D C:\Windows\Panther
2013-11-25 00:21 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-11-25 00:03 - 2013-08-30 19:22 - 00000000 ____D C:\Users\Dávid\AppData\Local\Spotify
2013-11-24 23:46 - 2013-11-24 23:44 - 00004597 _____ C:\Windows\IE9_main.log
2013-11-24 23:45 - 2013-11-24 23:45 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-24 23:45 - 2013-11-24 23:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-24 23:45 - 2013-11-24 23:45 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-24 23:45 - 2013-11-24 23:45 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-24 23:45 - 2013-11-24 23:45 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-24 23:45 - 2013-11-24 23:45 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-24 23:45 - 2013-11-24 23:45 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-24 23:45 - 2013-11-24 23:45 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-24 23:27 - 2013-11-24 23:25 - 00000000 ____D C:\Windows\system32\MRT
2013-11-24 22:31 - 2013-11-24 22:31 - 00000000 ____D C:\Users\Dávid\Downloads\Windows+7+Loader+v2.1.1+by+Daz+(x86+&+x64)
2013-11-24 22:30 - 2013-11-24 22:30 - 01642139 _____ C:\Users\Dávid\Downloads\Windows+7+Loader+v2.1.1+by+Daz+(x86+&+x64).zip
2013-11-24 18:01 - 2013-11-21 23:35 - 00001062 _____ C:\Windows\PFRO.log
2013-11-24 16:43 - 2013-11-24 16:43 - 00016046 _____ C:\ComboFix.txt
2013-11-24 16:43 - 2013-11-24 16:32 - 00000000 ____D C:\Windows\erdnt
2013-11-24 16:43 - 2013-11-24 16:32 - 00000000 ____D C:\Qoobox
2013-11-24 16:43 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2013-11-24 16:42 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2013-11-24 16:29 - 2013-11-24 16:30 - 05149261 ____R (Swearware) C:\Users\Dávid\Desktop\ComboFix.exe
2013-11-22 14:29 - 2013-11-22 14:29 - 00018534 _____ C:\Users\Dávid\Desktop\Addition.txt
2013-11-22 14:28 - 2013-11-22 14:28 - 00000000 ____D C:\FRST
2013-11-22 14:26 - 2013-11-22 14:27 - 01090881 ____N (Farbar) C:\Users\Dávid\Desktop\FRST.exe
2013-11-21 23:49 - 2013-11-21 23:49 - 00101014 _____ C:\Users\Dávid\Downloads\OTL.Txt
2013-11-21 23:49 - 2013-11-21 23:49 - 00050368 _____ C:\Users\Dávid\Downloads\Extras.Txt
2013-11-21 23:42 - 2013-11-21 23:42 - 00602112 _____ (OldTimer Tools) C:\Users\Dávid\Downloads\OTL.exe
2013-11-21 23:35 - 2013-11-21 23:35 - 00000000 _____ C:\Windows\setuperr.log
2013-11-21 22:24 - 2013-11-21 22:24 - 04379048 _____ (Piriform Ltd) C:\Users\Dávid\Downloads\ccsetup407.exe
2013-11-21 22:24 - 2013-08-30 19:00 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-21 22:24 - 2013-08-30 19:00 - 00000000 ____D C:\Program Files\CCleaner
2013-11-21 22:22 - 2013-11-11 17:32 - 00000000 ____D C:\ProgramData\VMware
2013-11-21 22:19 - 2013-11-21 22:19 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-21 22:14 - 2013-10-03 14:27 - 00000000 ____D C:\Program Files\JDownloader
2013-11-21 22:13 - 2013-11-07 20:23 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\uTorrent
2013-11-21 12:40 - 2013-11-21 22:52 - 621948928 ____N C:\Users\Dávid\Documents\rescue-system.iso
2013-11-21 12:23 - 2013-11-21 22:53 - 05192704 ____N (Geza Kovacs) C:\Users\Dávid\Documents\unetbootin-windows-585.exe
2013-11-21 00:52 - 2013-11-21 00:50 - 00000716 _____ C:\Users\Dávid\Downloads\ffs_98_full.wmv
2013-11-20 21:35 - 2013-10-09 13:49 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\TS3Client
2013-11-19 23:53 - 2013-11-19 23:53 - 00164352 _____ (NeSuckS) C:\Users\Dávid\Downloads\Universal Aimbot 2.4.exe
2013-11-19 23:32 - 2013-11-19 20:35 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-11-19 21:05 - 2013-10-09 23:37 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Skype
2013-11-19 21:03 - 2013-10-09 23:36 - 00000000 ___RD C:\Program Files\Skype
2013-11-19 21:03 - 2013-10-09 23:36 - 00000000 ____D C:\ProgramData\Skype
2013-11-19 21:00 - 2013-11-19 21:00 - 01550496 _____ (Skype Technologies S.A.) C:\Users\Dávid\Downloads\SkypeSetup.exe
2013-11-19 20:49 - 2013-11-19 20:49 - 00000213 _____ C:\Users\Dávid\Desktop\Counter-Strike Source.url
2013-11-19 20:49 - 2013-11-19 20:49 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-19 20:35 - 2013-11-19 20:35 - 00000875 _____ C:\Users\Public\Desktop\Steam.lnk
2013-11-19 20:35 - 2013-08-29 16:13 - 00000000 ____D C:\Users\Dávid
2013-11-19 20:33 - 2013-11-19 20:32 - 08531968 _____ C:\Users\Dávid\Downloads\SteamInstall_German.msi
2013-11-19 00:35 - 2013-11-19 00:34 - 00000000 ____D C:\Output
2013-11-19 00:34 - 2013-11-19 00:34 - 00000627 _____ C:\Users\Public\Desktop\MP4 To MP3 Converter.lnk
2013-11-19 00:34 - 2013-11-19 00:34 - 00000000 ____D C:\MP4ToMP3Converter
2013-11-19 00:33 - 2013-11-19 00:33 - 03624560 _____ (hxxp://www.MP4ToMP3Converter.net                            ) C:\Users\Dávid\Downloads\mp4tomp3-304.exe
2013-11-19 00:21 - 2013-09-28 17:58 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\UseNeXT
2013-11-19 00:11 - 2013-09-28 17:58 - 00000000 ____D C:\Users\Dávid\Documents\UseNeXT
2013-11-18 22:03 - 2013-11-18 20:52 - 00002012 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-11-18 21:54 - 2013-11-18 21:43 - 136016745 _____ C:\Users\Dávid\Downloads\avira_internet_security_suite_de.exe
2013-11-18 21:28 - 2013-09-30 08:32 - 00000000 ____D C:\Users\Dávid\dwhelper
2013-11-18 21:25 - 2013-11-18 21:15 - 135277678 _____ C:\Users\Dávid\Downloads\avira_ultimate_protection_suite_de.exe
2013-11-18 20:58 - 2013-11-18 20:58 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Avira
2013-11-18 20:56 - 2013-11-18 20:56 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-11-18 20:56 - 2013-11-18 20:56 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-11-18 20:51 - 2013-11-18 20:51 - 00000000 ____D C:\ProgramData\Avira
2013-11-18 20:51 - 2013-11-18 20:51 - 00000000 ____D C:\Program Files\Avira
2013-11-18 20:44 - 2013-11-18 20:46 - 126764512 ____N C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe
2013-11-18 20:34 - 2013-11-18 20:36 - 126764512 _____ C:\Users\Dávid\Desktop\avira_free_antivirus_de.exe.txt
2013-11-18 20:24 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-11-18 19:52 - 2013-08-29 16:16 - 00000000 ____D C:\Saints Row IV
2013-11-17 22:21 - 2013-11-17 22:19 - 00000000 ____D C:\ProgramData\webcam 7
2013-11-17 21:53 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\security
2013-11-17 21:47 - 2013-11-14 23:17 - 00031560 _____ C:\Windows\system32\Drivers\mbamchameleon.sys
2013-11-17 21:46 - 2013-11-17 21:46 - 00000000 ____D C:\Quarantine
2013-11-17 21:46 - 2013-11-17 21:43 - 00000594 _____ C:\Users\Dávid\Downloads\Stinger_17112013_214331.html
2013-11-17 21:46 - 2013-11-17 21:42 - 00000114 ___RH C:\Users\Dávid\Downloads\stinger.opt
2013-11-17 21:46 - 2013-11-17 21:42 - 00000000 ____D C:\Program Files\stinger
2013-11-17 21:43 - 2013-11-17 21:43 - 10197536 _____ (McAfee Inc) C:\Users\Dávid\Downloads\stinger32.exe
2013-11-17 21:42 - 2013-11-17 21:42 - 09448512 _____ (McAfee Inc.) C:\Users\Dávid\Downloads\stinger.exe
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-11-17 21:40 - 2013-11-17 21:40 - 00000000 ____D C:\Program Files\Bitdefender
2013-11-17 21:39 - 2013-11-17 21:39 - 07173128 _____ C:\Users\Dávid\Downloads\bitdefender_antivirus.exe
2013-11-17 21:34 - 2013-11-17 21:33 - 00206184 _____ C:\Users\Dávid\Downloads\Opera_17.0.1241.53_Setup.exe
2013-11-17 03:54 - 2013-09-30 07:39 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-16 02:59 - 2013-11-16 02:59 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-14 23:17 - 2013-11-14 23:17 - 00000000 ____D C:\Users\Dávid\Downloads\mbam-chameleon-1.62.1.1000
2013-11-14 23:14 - 2013-08-30 18:37 - 00000000 ____D C:\Windows\Downloaded Installations
2013-11-14 23:02 - 2013-11-14 23:02 - 01440846 _____ C:\Users\Dávid\Downloads\mbam-chameleon-1.62.1.1000.zip
2013-11-14 22:13 - 2013-08-30 17:56 - 00002121 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-14 15:22 - 2013-11-14 15:22 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2013-11-14 00:44 - 2013-10-04 09:44 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\vlc
2013-11-12 23:41 - 2013-11-12 23:40 - 07271424 _____ C:\Users\Dávid\Downloads\LoLOracle_1_0_1.msi
2013-11-12 22:55 - 2013-11-11 23:31 - 00000081 _____ C:\Users\Dávid\Desktop\Neues Textdokument.txt
2013-11-12 22:53 - 2013-11-11 17:34 - 00000000 ____D C:\Users\Dávid\AppData\Local\VMware
2013-11-11 17:34 - 2013-11-11 17:34 - 00000000 ____D C:\Users\Dávid\Documents\Virtual Machines
2013-11-11 17:23 - 2013-11-11 17:22 - 98508144 _____ (VMware, Inc.) C:\Users\Dávid\Downloads\VMware-player-6.0.1-1379776.exe
2013-11-11 17:22 - 2013-11-11 17:22 - 04090738 _____ C:\Users\Dávid\Downloads\VMware-Player-6.0.1-1379776.i386.bundle.part
2013-11-11 16:36 - 2013-11-07 20:29 - 00000000 ____D C:\Users\Dávid\.VirtualBox
2013-11-11 05:50 - 2013-11-24 23:34 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 18:30 - 2013-11-07 16:17 - 00000000 ____D C:\Windows\pss
2013-11-10 12:07 - 2013-11-10 12:07 - 00321536 _____ C:\Windows\system32\LiveWrapRTSP.dll
2013-11-09 14:33 - 2013-08-29 16:13 - 00000000 ____D C:\Users\Dávid\AppData\Local\VirtualStore
2013-11-09 14:31 - 2013-11-09 14:30 - 00000000 ____D C:\Users\Dávid\Backtrack
2013-11-09 14:30 - 2013-11-09 14:30 - 00000000 ____D C:\Users\Dávid\Downloads\TL-WN821N_V3_101101_German
2013-11-07 22:13 - 2013-11-07 21:15 - 00000000 ____D C:\Users\Dávid\Downloads\BT5R3-GNOME-32
2013-11-07 20:56 - 2013-11-07 20:37 - 00000000 ____D C:\Users\Dávid\VirtualBox VMs
2013-11-07 20:24 - 2013-11-07 20:24 - 00000000 ____D C:\Users\Dávid\Downloads\BT5R3-GNOME-32-VM
2013-11-07 20:23 - 2013-11-07 20:21 - 106230544 _____ (Oracle Corporation) C:\Users\Dávid\Downloads\VirtualBox-4.3.2-90405-Win(1).exe
2013-11-07 20:22 - 2013-11-07 20:22 - 01141328 _____ (BitTorrent Inc.) C:\Users\Dávid\Downloads\utorrent3.3.2n30260.exe
2013-11-07 20:22 - 2013-11-07 20:22 - 00196735 _____ C:\Users\Dávid\Downloads\BT5R3-GNOME-32-VM.torrent
2013-11-07 19:21 - 2013-11-07 19:18 - 106230544 _____ (Oracle Corporation) C:\Users\Dávid\Downloads\VirtualBox-4.3.2-90405-Win.exe
2013-11-07 17:51 - 2013-11-07 17:49 - 00011816 _____ C:\Users\Dávid\Downloads\peek.zip
2013-11-07 17:49 - 2013-11-07 17:43 - 70772220 _____ C:\Users\Dávid\Downloads\chaox-2009.7.iso.part
2013-11-07 16:21 - 2013-11-07 16:19 - 16089372 _____ C:\Users\Dávid\Downloads\BT5R3-GNOME-VM-32.7z.part
2013-11-07 15:50 - 2013-11-24 23:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-06 19:07 - 2013-11-06 19:07 - 00087489 _____ C:\Users\Dávid\Downloads\gerix-wifi-cracker-master.rar
2013-11-06 19:07 - 2013-11-06 19:07 - 00000000 ____D C:\Users\Dávid\Downloads\gerix-wifi-cracker-master
2013-11-06 19:02 - 2013-11-06 19:02 - 00013339 _____ C:\Users\Dávid\Desktop\cmd - Verknüpfung.lnk
2013-11-06 18:58 - 2013-11-06 18:55 - 00000000 ____D C:\Perl
2013-11-06 18:54 - 2013-11-06 18:48 - 26968140 _____ C:\Users\Dávid\Downloads\ActivePerl-5.16.3.1603-MSWin32-x86-296746.msi
2013-11-06 18:40 - 2013-11-06 18:40 - 00006277 _____ C:\Users\Dávid\Downloads\WEPCrack-0.1.0(1).tar.gz
2013-11-06 18:38 - 2013-11-06 18:38 - 00006277 _____ C:\Users\Dávid\Downloads\WEPCrack-0.1.0.tar.gz
2013-11-06 18:38 - 2013-11-06 18:38 - 00000000 ____D C:\Users\Dávid\Downloads\WEPCrack-0.1.0
2013-11-06 18:15 - 2013-11-06 18:15 - 00000000 ____D C:\Users\Dávid\Downloads\aircrack-ng-1.2-beta1-win
2013-11-06 18:06 - 2013-11-06 17:46 - 08287320 _____ C:\Users\Dávid\Downloads\aircrack-ng-1.2-beta1-win.zip
2013-11-06 11:14 - 2013-11-06 11:14 - 00130186 _____ C:\Users\Dávid\Downloads\459588_569534699745100_912065965_o.jpg.part
2013-11-06 11:14 - 2013-11-06 11:14 - 00114310 _____ C:\Users\Dávid\Downloads\1381744_643030019062234_1225283321_n.jpg.part
2013-11-06 10:29 - 2013-10-20 06:14 - 00000000 ____D C:\Windows\Minidump
2013-11-06 10:23 - 2013-09-30 07:39 - 00000000 ____D C:\Users\Dávid\AppData\Local\Mozilla
2013-11-06 09:53 - 2013-11-05 18:04 - 00000000 ____D C:\Users\Dávid\Documents\LOLReplay
2013-11-06 09:51 - 2013-11-06 09:51 - 00053171 _____ C:\Users\Dávid\Downloads\306929_2250084468368_321038990_n.jpg.part
2013-11-05 18:34 - 2013-11-05 18:34 - 00000000 ____D C:\Riot Games
2013-11-05 18:04 - 2013-11-05 18:04 - 00001847 _____ C:\Users\Public\Desktop\LOL Recorder.lnk
2013-11-05 18:04 - 2013-11-05 18:04 - 00000000 ____D C:\Program Files\LOLReplay
2013-11-05 18:00 - 2013-11-05 17:56 - 01471311 _____ C:\Users\Dávid\Downloads\LOLReplay-0.8.5.0.exe
2013-11-05 15:25 - 2013-11-05 15:21 - 00000000 ____D C:\ProgramData\Adobe
2013-11-05 15:25 - 2013-10-18 04:08 - 00000000 ____D C:\Users\Dávid\AppData\Local\Adobe
2013-11-05 15:25 - 2013-09-01 09:54 - 00000000 ____D C:\Users\Dávid\AppData\Roaming\Adobe
2013-11-05 15:22 - 2013-11-05 15:22 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-05 15:22 - 2013-11-05 15:21 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-11-05 15:21 - 2013-11-05 15:21 - 00000000 ____D C:\Program Files\Adobe
2013-11-05 14:59 - 2013-11-05 14:59 - 04207928 _____ (Smart Projects                                              ) C:\Users\Dávid\Downloads\isobuster_all_lang_3.2.exe
2013-11-01 17:10 - 2013-11-07 20:29 - 00203024 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2013-11-01 17:09 - 2013-11-07 20:29 - 00103696 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2013-11-01 17:09 - 2013-11-01 17:09 - 00114960 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp.sys
2013-11-01 17:09 - 2013-11-01 17:09 - 00094480 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSB.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00067680 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-31 19:25 - 2013-11-18 20:51 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-10-27 16:30 - 2013-10-27 16:30 - 00000942 _____ C:\Users\Public\Desktop\LoLOracle.lnk
2013-10-27 16:30 - 2013-10-27 16:30 - 00000000 ____D C:\Program Files\LoLOracle
2013-10-27 16:29 - 2013-10-27 16:29 - 07270912 _____ C:\Users\Dávid\Downloads\setup.msi

Files to move or delete:
====================
C:\Users\Dávid\servers.dat


Some content of TEMP:
====================
C:\Users\Dávid\AppData\Local\temp\avgnt.exe
C:\Users\Dávid\AppData\Local\temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Dávid\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-21 13:38

==================== End Of Log ============================
         

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?