Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 26.11.2013, 22:28   #1
Mayler
 
Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Icon21

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



Sehr geehrte Damen und Herren,

vor wenigen Tagen versuchte ich,mir eines der Spiele aus der Battlefield-Reihe durch Keygen illegal herunterzuladen.Allerdings funktionierte heruntergeladener Keygen nicht (wie erwartet).
Also warf ich die Datei von meinem Computer.Kurz danach allerdings begann eine starke Leistungsverringerung meines PCs;so war es mir garnicht mehr möglich zu spielen;jegliche anderen Leistungen waren stark verlangsamt.Nun bitte ich sie um Hilfe,da meine Antivirenprogramme nichts finden und ich meine anderen (rechtmäßig) erworbenen Spiele gern spielen würde!
(PS:Anbei die in der Checkliste gewünschten Dateien)

Einmal die FRST.txt - Datei:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-11-2013 01
Ran by User (administrator) on USER-PC on 26-11-2013 22:07:15
Running from C:\Users\User\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(xReva Software) C:\Program Files (x86)\xReva Software\xReva Remote\xReva Remote.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
() C:\Users\User\AppData\Roaming\Microsoft\Windows\Temp\dllhost.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareDesktop.exe
(IObit) C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\DiskDefrag.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Monitor.exe
(IOBit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCAvSvc.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\User\Downloads\Defogger.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7288424 2011-08-15] (Realtek Semiconductor)
HKLM\...\Run: [SBRegRebootCleaner] - "C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe"
HKLM\...\Run: [] - [x]
HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe [2493272 2013-10-18] ()
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKCU\...\Run: [9d0ca6779c4df125b0313463a3f5f631] - "C:\Windows\Chrome.exe" ..
HKCU\...\Run: [Advanced SystemCare 7] - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2283808 2013-11-11] (IObit)
HKCU\...\Run: [Advanced SystemCare Ultimate] - C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCTray.exe [512384 2012-11-07] (IObit)
HKCU\...\RunOnce: [Temp] - "C:\Users\User\AppData\Roaming\Microsoft\Windows\Temp\system.vbs" [223 2013-11-25] ()
MountPoints2: {0ac27f70-abc4-11e1-a93b-806e6f6e6963} - D:\Setup\rsrc\autorun.exe
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [RoccatIskuFX] - C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe [546656 2012-11-08] (ROCCAT GmbH)
HKLM-x32\...\Run: [ROCCAT Savu Gaming Mouse] - C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe [872048 2012-09-10] (ROCCAT GmbH)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [Aeria Ignite] - C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [9d0ca6779c4df125b0313463a3f5f631] - "C:\Windows\Chrome.exe" ..
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1572672 2013-11-19] (IObit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_sp_OC1
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC03FDE9FA766CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/$22/
SearchScopes: HKCU - DefaultScope {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_ds_OC1&query={searchTerms}
SearchScopes: HKCU - {53C2C26D-727C-41AA-945C-6742AD15CBE5} URL = hxxp://www.mysearchresults.com/search?c=4005&t=14&q={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_ds_OC1&query={searchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} -  No File
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.66.2.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default
FF Homepage: about:home|hxxp://www.giga.de/$22/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.4.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.4.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: Ads Removal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\adsremoval@adsremoval.net
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: Lavasoft Search Plugin - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\staged

Chrome: 
=======
CHR HomePage: hxxp://google.com/
CHR RestoreOnStartup: "hxxp://www.google.de/", "hxxp://www.giga.de/$22/"
CHR DefaultSearchURL: (Amazon) - hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_cr_de_display?ie=UTF8&tag=bds-p18-serp-de-cr-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_cr_ds_OC1&query={searchTerms}
CHR DefaultSuggestURL: (Amazon) - hxxp://suggestqueries.google.com/complete/search?q={searchTerms}&output=chrome
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\gcswf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Extension: (ProxTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.4_0
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (GFACE Experience Plugin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol\0.39.0_0
CHR Extension: (Assassin's Creed III) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\geadmffjboclimmeiaimcafapjaefnfn\1.4_0
CHR Extension: (Ads Removal) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkcefkcdkepgkpbgncjchhbjgoanleod\1.0.0_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Lavasoft NewTab) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole\0.12_0
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\BrowerProtect\ASC_GhromePlugin.crx
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ascsvc.exe [1051088 2012-12-13] (IObit)
R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)
R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.)
R2 ASCAntivirusSrv; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ascavsvc.exe [623936 2013-07-08] (IOBit)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe [517344 2013-10-18] ()
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-15] ()
S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-08] ()
R1 BdfNdisf; c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [93160 2013-07-17] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [102992 2013-07-17] (BitDefender LLC)
S3 bulkadi; C:\Windows\System32\DRIVERS\bulkrazer_x64.sys [25088 2011-02-09] (Windows (R) Codename Longhorn DDK provider)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-10-09] (GFI Software)
R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [138232 2013-07-17] (BitDefender LLC)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-01-26] ()
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-11-13] (OpenLibSys.org)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 slb; \??\C:\AeriaGames\ScarletBlade\avital\scarlb64.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-26 22:05 - 2013-11-26 22:05 - 00050477 _____ C:\Users\User\Downloads\Defogger.exe
2013-11-26 22:05 - 2013-11-26 22:05 - 00000470 _____ C:\Users\User\Downloads\defogger_disable.log
2013-11-26 22:05 - 2013-11-26 22:05 - 00000000 _____ C:\Users\User\defogger_reenable
2013-11-26 21:49 - 2013-11-26 21:50 - 00031026 _____ C:\Users\User\Downloads\Addition.txt
2013-11-26 21:48 - 2013-11-26 22:07 - 00019834 _____ C:\Users\User\Downloads\FRST.txt
2013-11-26 21:48 - 2013-11-26 21:48 - 00000000 ____D C:\FRST
2013-11-26 21:47 - 2013-11-26 21:47 - 01958474 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2013-11-26 21:33 - 2013-11-26 21:33 - 00003106 _____ C:\Windows\System32\Tasks\ASC6_PerformanceMonitor
2013-11-26 21:33 - 2013-11-26 21:33 - 00001274 _____ C:\Users\Public\Desktop\Advanced SystemCare Ultimate.lnk
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\IObit
2013-11-26 21:31 - 2013-11-26 21:33 - 00001313 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-11-26 21:31 - 2013-11-26 21:33 - 00000000 ____D C:\Users\User\AppData\Roaming\IObit
2013-11-26 21:31 - 2013-11-26 21:31 - 00003092 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2013-11-26 21:31 - 2013-11-26 21:31 - 00002209 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00001217 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00001177 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\ProductData
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-11-26 21:28 - 2013-11-26 21:35 - 00007599 _____ C:\Users\User\AppData\Local\Resmon.ResmonCfg
2013-11-26 21:28 - 2013-11-26 21:30 - 34466768 _____ (IObit                                                       ) C:\Users\User\Downloads\asc-setup.exe
2013-11-26 21:28 - 2013-11-26 21:29 - 25095200 _____ (IObit                                                       ) C:\Users\User\Downloads\imf-setup.exe
2013-11-26 21:25 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\IObit
2013-11-26 21:25 - 2013-11-26 21:32 - 00000000 ____D C:\Program Files (x86)\IObit
2013-11-26 21:25 - 2013-11-26 21:25 - 00001186 _____ C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
2013-11-26 21:25 - 2013-11-26 21:25 - 00001174 _____ C:\Users\Public\Desktop\Game Booster 3.lnk
2013-11-26 21:21 - 2013-11-26 21:21 - 04869208 _____ (IObit                                                       ) C:\Users\User\Downloads\gb3-setup.exe
2013-11-26 21:13 - 2013-11-26 21:13 - 00000000 ____D C:\ProgramData\BitDefender
2013-11-26 21:05 - 2013-11-26 21:05 - 00000000 ____D C:\ProgramData\Oracle
2013-11-26 21:05 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-26 21:04 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-26 21:04 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-26 21:04 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-26 21:03 - 2013-11-26 21:04 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-11-26 21:02 - 2013-11-26 21:02 - 00000017 _____ C:\ProgramData\adaware-installer-reboot-required.tmp
2013-11-26 21:02 - 2013-08-21 15:32 - 02084072 _____ (Bitdefender) C:\Windows\system32\bdnc.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 01061776 _____ (BitDefender S.R.L.) C:\Windows\system32\bdsmtpp.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00209984 _____ (BitDefender) C:\Windows\system32\BdFirewallSDK.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00195016 _____ (BitDefender) C:\Windows\system32\httproxy.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00156936 _____ C:\Windows\system32\bdfwcore.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00155912 _____ (BitDefender S.R.L.) C:\Windows\system32\bdpop3p.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00122928 _____ (BitDefender) C:\Windows\system32\OEMbdpredir.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00096160 _____ (BitDefender) C:\Windows\system32\bdpredir.dll
2013-11-26 20:59 - 2013-11-26 20:59 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-11-26 20:50 - 2013-11-26 20:50 - 01723528 _____ C:\Users\User\Downloads\Adaware_Installer.exe
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Mehrspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Einzelspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00000286 _____ C:\Windows\game.ini
2013-11-17 13:33 - 2013-11-17 13:33 - 00000000 ____D C:\Program Files (x86)\Activision
2013-11-16 19:00 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-16 18:58 - 2013-11-16 18:58 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 18:57 - 2013-11-16 19:00 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-15 19:41 - 2013-11-15 19:41 - 00080780 _____ C:\Users\User\Desktop\Alonian Launcher.exe
2013-11-14 17:56 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 17:56 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 17:56 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 17:56 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 17:56 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 17:56 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 17:56 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 17:56 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 17:56 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 17:56 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 17:56 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 17:56 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 17:56 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 17:56 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 17:56 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 17:56 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 17:56 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 17:56 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 17:56 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 17:56 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 17:56 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 17:56 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 17:56 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-14 17:55 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 17:55 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 17:55 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 17:55 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 17:55 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 17:55 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 17:55 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-12 18:49 - 2013-11-12 18:49 - 00000885 _____ C:\Users\Public\Desktop\osu!.lnk
2013-11-12 18:48 - 2013-11-12 20:51 - 00000000 ____D C:\Program Files (x86)\osu!
2013-11-10 20:06 - 2013-11-10 20:28 - 00000000 ____D C:\Users\User\Documents\dragoon
2013-11-01 17:01 - 2013-11-01 17:03 - 00000000 ____D C:\Users\User\AppData\Roaming\Audacity
2013-11-01 17:01 - 2013-11-01 17:01 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-11-01 17:01 - 2013-11-01 17:01 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-11-01 01:02 - 2013-11-01 01:02 - 00000000 ____D C:\Users\User\AppData\Local\fabi.me
2013-10-31 20:10 - 2013-10-31 21:27 - 00000000 ____D C:\Program Files (x86)\LOLReplay

==================== One Month Modified Files and Folders =======

2013-11-26 22:08 - 2013-11-26 21:48 - 00019834 _____ C:\Users\User\Downloads\FRST.txt
2013-11-26 22:05 - 2013-11-26 22:05 - 00050477 _____ C:\Users\User\Downloads\Defogger.exe
2013-11-26 22:05 - 2013-11-26 22:05 - 00000470 _____ C:\Users\User\Downloads\defogger_disable.log
2013-11-26 22:05 - 2013-11-26 22:05 - 00000000 _____ C:\Users\User\defogger_reenable
2013-11-26 21:56 - 2012-06-04 19:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2013-11-26 21:53 - 2012-09-15 16:50 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-26 21:53 - 2012-09-15 16:50 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-26 21:50 - 2013-11-26 21:49 - 00031026 _____ C:\Users\User\Downloads\Addition.txt
2013-11-26 21:48 - 2013-11-26 21:48 - 00000000 ____D C:\FRST
2013-11-26 21:47 - 2013-11-26 21:47 - 01958474 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2013-11-26 21:35 - 2013-11-26 21:28 - 00007599 _____ C:\Users\User\AppData\Local\Resmon.ResmonCfg
2013-11-26 21:33 - 2013-11-26 21:33 - 00003106 _____ C:\Windows\System32\Tasks\ASC6_PerformanceMonitor
2013-11-26 21:33 - 2013-11-26 21:33 - 00001274 _____ C:\Users\Public\Desktop\Advanced SystemCare Ultimate.lnk
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\IObit
2013-11-26 21:33 - 2013-11-26 21:31 - 00001313 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-11-26 21:33 - 2013-11-26 21:31 - 00000000 ____D C:\Users\User\AppData\Roaming\IObit
2013-11-26 21:33 - 2013-11-26 21:25 - 00000000 ____D C:\ProgramData\IObit
2013-11-26 21:32 - 2013-11-26 21:25 - 00000000 ____D C:\Program Files (x86)\IObit
2013-11-26 21:32 - 2012-06-01 09:35 - 01230092 _____ C:\Windows\WindowsUpdate.log
2013-11-26 21:32 - 2011-04-12 08:43 - 00745318 _____ C:\Windows\system32\perfh007.dat
2013-11-26 21:32 - 2011-04-12 08:43 - 00164106 _____ C:\Windows\system32\perfc007.dat
2013-11-26 21:32 - 2009-07-14 06:13 - 01732920 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-26 21:31 - 2013-11-26 21:31 - 00003092 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2013-11-26 21:31 - 2013-11-26 21:31 - 00002209 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00001217 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00001177 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\ProductData
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-11-26 21:31 - 2012-06-09 22:30 - 00000000 ____D C:\Users\User\AppData\Roaming\Apple Computer
2013-11-26 21:30 - 2013-11-26 21:28 - 34466768 _____ (IObit                                                       ) C:\Users\User\Downloads\asc-setup.exe
2013-11-26 21:30 - 2009-07-14 05:51 - 00098724 _____ C:\Windows\setupact.log
2013-11-26 21:29 - 2013-11-26 21:28 - 25095200 _____ (IObit                                                       ) C:\Users\User\Downloads\imf-setup.exe
2013-11-26 21:25 - 2013-11-26 21:25 - 00001186 _____ C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
2013-11-26 21:25 - 2013-11-26 21:25 - 00001174 _____ C:\Users\Public\Desktop\Game Booster 3.lnk
2013-11-26 21:21 - 2013-11-26 21:21 - 04869208 _____ (IObit                                                       ) C:\Users\User\Downloads\gb3-setup.exe
2013-11-26 21:13 - 2013-11-26 21:13 - 00000000 ____D C:\ProgramData\BitDefender
2013-11-26 21:10 - 2012-06-14 16:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-26 21:05 - 2013-11-26 21:05 - 00000000 ____D C:\ProgramData\Oracle
2013-11-26 21:04 - 2013-11-26 21:03 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-11-26 21:04 - 2013-06-24 16:22 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-26 21:03 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-26 21:03 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-26 21:02 - 2013-11-26 21:02 - 00000017 _____ C:\ProgramData\adaware-installer-reboot-required.tmp
2013-11-26 21:01 - 2013-10-09 19:06 - 00001327 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2013-11-26 20:59 - 2013-11-26 20:59 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-26 20:57 - 2012-06-04 19:23 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-26 20:56 - 2012-06-01 09:53 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-26 20:56 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-26 20:54 - 2013-05-06 20:39 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-11-26 20:50 - 2013-11-26 20:50 - 01723528 _____ C:\Users\User\Downloads\Adaware_Installer.exe
2013-11-26 20:50 - 2013-10-09 19:06 - 00000000 ____D C:\ProgramData\Lavasoft
2013-11-26 20:46 - 2010-11-21 04:47 - 00487000 _____ C:\Windows\PFRO.log
2013-11-25 22:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-25 20:35 - 2013-05-21 14:19 - 00000000 ____D C:\ProgramData\Origin
2013-11-25 20:04 - 2012-06-04 19:18 - 00063064 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 20:01 - 2013-10-26 21:51 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-25 20:01 - 2013-09-29 07:30 - 00000000 ____D C:\Fraps
2013-11-25 20:01 - 2013-01-19 11:01 - 00000000 ____D C:\Users\DefaultAppPool
2013-11-25 20:01 - 2012-07-15 18:58 - 00000000 ____D C:\Users\User\AppData\Local\Akamai
2013-11-25 20:01 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-25 20:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-25 18:40 - 2013-10-26 16:35 - 00000000 ____D C:\WoW
2013-11-25 18:39 - 2013-08-08 00:53 - 00000000 ____D C:\Program Files (x86)\Infinity Fiesta
2013-11-25 18:35 - 2013-10-09 19:06 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-11-24 00:30 - 2013-10-24 20:09 - 00000000 ____D C:\Users\User\AppData\Local\Battle.net
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Mehrspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Einzelspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00000286 _____ C:\Windows\game.ini
2013-11-17 13:37 - 2012-06-01 09:42 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-17 13:33 - 2013-11-17 13:33 - 00000000 ____D C:\Program Files (x86)\Activision
2013-11-17 00:54 - 2013-04-19 13:22 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic
2013-11-17 00:52 - 2012-11-23 22:41 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2013-11-16 21:34 - 2013-10-24 20:08 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-11-16 20:54 - 2012-06-01 09:36 - 00001425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-16 20:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-16 19:00 - 2013-11-16 18:57 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-16 18:58 - 2013-11-16 18:58 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 11:07 - 2013-04-19 13:22 - 02300919 _____ () C:\Users\User\Desktop\TechnicLauncher.exe
2013-11-15 19:41 - 2013-11-15 19:41 - 00080780 _____ C:\Users\User\Desktop\Alonian Launcher.exe
2013-11-15 19:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-14 22:28 - 2013-08-14 13:19 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 22:27 - 2012-06-04 19:29 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 20:49 - 2013-09-28 19:52 - 00000000 ____D C:\overwulf_musik
2013-11-12 20:51 - 2013-11-12 18:48 - 00000000 ____D C:\Program Files (x86)\osu!
2013-11-12 18:49 - 2013-11-12 18:49 - 00000885 _____ C:\Users\Public\Desktop\osu!.lnk
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 20:28 - 2013-11-10 20:06 - 00000000 ____D C:\Users\User\Documents\dragoon
2013-11-10 20:03 - 2012-06-04 19:56 - 01706264 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-10 19:59 - 2013-02-10 10:38 - 00000000 ____D C:\ProgramData\Package Cache
2013-11-10 14:31 - 2012-06-04 19:58 - 00000000 ____D C:\Users\User\Documents\My Games
2013-11-08 16:37 - 2013-02-17 16:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-08 16:37 - 2012-06-04 19:19 - 00000000 ____D C:\ProgramData\Skype
2013-11-01 17:03 - 2013-11-01 17:01 - 00000000 ____D C:\Users\User\AppData\Roaming\Audacity
2013-11-01 17:01 - 2013-11-01 17:01 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-11-01 17:01 - 2013-11-01 17:01 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-11-01 01:02 - 2013-11-01 01:02 - 00000000 ____D C:\Users\User\AppData\Local\fabi.me
2013-10-31 21:27 - 2013-10-31 20:10 - 00000000 ____D C:\Program Files (x86)\LOLReplay
2013-10-31 17:52 - 2012-06-05 19:08 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2013-10-27 21:52 - 2012-06-01 09:36 - 00000000 ___RD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-27 12:04 - 2013-10-26 14:59 - 00000000 ____D C:\Stormblade
2013-10-27 11:44 - 2009-07-14 05:45 - 00292384 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-27 01:13 - 2013-10-26 12:11 - 00020496 _____ C:\Windows\Chrome.exe.tmp

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.4064.dll


Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\3c80b9c4-f5ed-49df-9399-b6683efe50e5.exe
C:\Users\User\AppData\Local\Temp\880537d3-106f-44e9-80a6-1dbfabf477e2.exe
C:\Users\User\AppData\Local\Temp\Battlefield 4 - Keygen by Zer0x.exe
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\c51590f53fd2a7ccfba298f57841bf9a.dll
C:\Users\User\AppData\Local\Temp\c914553e-f6d6-44c8-abaf-92e7e3c833e4.exe
C:\Users\User\AppData\Local\Temp\dxwebsetup.exe
C:\Users\User\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\User\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\User\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\User\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\User\AppData\Local\Temp\NGMDll.dll
C:\Users\User\AppData\Local\Temp\NGMResource.dll
C:\Users\User\AppData\Local\Temp\NGMSetup.exe
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe
C:\Users\User\AppData\Local\Temp\unicows.dll
C:\Users\User\AppData\Local\Temp\Uninstall.exe
C:\Users\User\AppData\Local\Temp\vcredist_x86.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-23 10:21

==================== End Of Log ============================
         

Und nun die Addition.txt - Datei

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-11-2013 01
Ran by User at 2013-11-26 21:49:48
Running from C:\Users\User\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Ad-Aware Antivirus (Enabled - Up to date) {D87B6541-12A1-DAEA-0033-9B8057AAB996}
AV: Advanced SystemCare Ultimate (Enabled - Out of date) {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}
AS: Ad-Aware Antivirus (Enabled - Up to date) {631A84A5-349B-D564-3A83-A0F22C2DF32B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED}

==================== Installed Programs ======================

7-Zip 9.20 (x32)
Ad-Aware Antivirus (Version: 11.0.4555.0)
AdAwareInstaller (Version: 11.0.4555.0)
AdAwareUpdater (Version: 11.0.4555.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Advanced SystemCare 7 (x32 Version: 7.0.6)
Advanced SystemCare Ultimate 6 (x32 Version: 6.1.0)
Aeria Ignite (x32 Version: 1.13.3296)
Akamai NetSession Interface (HKCU)
Akamai NetSession Interface (x32)
ANNO 2070 (x32 Version: 1.0.0.0)
AntimalwareEngine (Version: 2.6.0.0)
AntispamEngine (Version: 2.2.3.0)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Audacity 2.0.5 (x32 Version: 2.0.5)
Battle.net (x32)
Bonjour (Version: 3.0.0.10)
Call of Duty(R) 2 (x32 Version: 1.2)
Call of Duty(R) 2 (x32 Version: 1.3)
Call of Duty(R) 2 Patch 1.3 (x32 Version: 1.3)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32)
Diablo III (x32)
Dota 2 (x32)
Evoland (x32)
Far Cry 3 (x32 Version: 1.05)
Fiesta Online DE 1.04.053 (x32 Version: 1.04.053)
FirewallEngine (Version: 1.6.0.0)
Fraps (remove only) (x32)
Free YouTube to MP3 Converter version 3.12.2.430 (x32 Version: 3.12.2.430)
Game Booster 3 (x32 Version: 3.0)
Google Chrome (x32 Version: 31.0.1650.57)
Google Earth (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.165)
Guild Wars 2 (x32)
HandBrake 0.9.9.1 (x32 Version: 0.9.9.1)
Hearthstone (x32)
Hi-Rez Studios Authenticate and Update Service (x32 Version: 3.0.0.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
IObit Malware Fighter (x32 Version: 2.2)
IObit Uninstaller (x32 Version: 3.0.4.1083)
iTunes (Version: 11.0.4.4)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 7 Update 4 (64-bit) (Version: 7.0.40)
JavaFX 2.1.1 (x32 Version: 2.1.1)
Just Aion Launcher (x32 Version: 1.00.0000)
League of Legends (x32 Version: 1.3)
Magic 2014 Demo (x32)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5.1 RC (Version: 4.5.50861)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Mozilla Firefox 5.0 (x86 en-US) (x32 Version: 5.0)
MSVCRT Redists (Version: 1.0)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML4 Parser (x32 Version: 1.0.0)
MySQL Connector/ODBC 5.1 (x32 Version: 5.1.5)
Neverwinter (x32)
NVIDIA 3D Vision Controller-Treiber 314.07 (Version: 314.07)
NVIDIA 3D Vision Treiber 314.07 (Version: 314.07)
NVIDIA Grafiktreiber 314.07 (Version: 314.07)
NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.109.706)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1407)
NVIDIA Systemsteuerung 314.07 (Version: 314.07)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
OnlineThreatsEngine (Version: 2.2.2.0)
OpenAL (x32)
OpenMG Limited Patch 4.7-07-14-05-01 (x32)
OpenMG Secure Module 4.7.00 (x32 Version: 4.7.00.12140)
osu! (x32 Version: 0.0.0.0)
PunkBuster Services (x32 Version: 0.989)
Razer Game Booster (x32 Version: 3.5.6.0)
Razer Megalodon Firmware Updater (x32 Version: 2.12.02)
Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6438)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0)
ROCCAT Isku FX Keyboard Driver (x32)
S4 League_EU (x32 Version: 1.00.0000)
Savu Mouse (x32 Version: 1.1.9)
ScarletBlade-DE (x32)
Skype™ 6.10 (x32 Version: 6.10.104)
StarCraft II (x32)
Steam (x32 Version: 1.0.0.0)
Stormblade Launcher 1.1 (x32)
Surfing Protection (x32 Version: 1.0)
TeamSpeak 3 Client (x32 Version: 3.0.13)
TeamViewer 8 (x32 Version: 8.0.22298)
Terraria (x32)
The Binding of Isaac (x32)
The Elder Scrolls V: Skyrim (x32)
TL-WN881ND Driver (x32 Version: 1.0.0)
Uplay (x32 Version: 2.0)
Vegas Pro 12.0 (64-bit) (Version: 12.0.670)
War Thunder Launcher 1.0.1.269 (x32)
Warframe (x32 Version: 1.0.0)
WebFilteringEngine (Version: 2.2.1.0)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
World of Tanks (x32)
World of Warplanes (x32)
Xiph.Org Open Codecs 0.85.17777 (x32 Version: 0.85.17777)
xReva Remote 1.3.0 (x32)

==================== Restore Points  =========================

14-11-2013 21:26:43 Windows Update
16-11-2013 17:56:51 Windows Update
17-11-2013 12:32:00 Installiert Call of Duty(R) 2
17-11-2013 12:45:51 Installed Call of Duty(R) 2 Patch 1.3
25-11-2013 18:14:12 Windows Update
25-11-2013 18:59:37 Wiederherstellungsvorgang
25-11-2013 19:06:36 Windows Update
26-11-2013 19:50:53 AA11
26-11-2013 19:59:22 AA11
26-11-2013 20:03:16 Installed Java 7 Update 45

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {077D5E27-DA67-4D47-8D36-3572E93FF4DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15] (Google Inc.)
Task: {1C7D998E-16F3-48BB-AA69-9E2880BDA8BD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {226CD196-0A84-42B7-BFB8-4B55F68438B9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated)
Task: {34D443B7-6CA1-413D-A076-99F08250FBC1} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {3AEE1AC9-E90C-4CC5-B484-B950BCC045DC} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe
Task: {3C6AC173-D003-45AA-B98B-D899CCE6FF16} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {4E2C0B7E-9CAE-40B4-83D3-71396DDCCF39} - System32\Tasks\{B18CD65E-752D-4483-8EF4-11438DCAEB45} => C:\Users\User\Desktop\BLAHBLAHBLAH\Hack S4.exe
Task: {81D9EBD2-58AB-4825-B784-E8FF1AEF0D53} - System32\Tasks\ASC6_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Monitor.exe [2013-07-06] (IObit)
Task: {84AB52A3-5F84-486B-B1F7-E43A6ED4CCC3} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {99D908F9-7443-4495-9DFC-2AA1A658409B} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe [2012-11-13] ()
Task: {B14621CE-ECD1-4E66-9D47-CE24CA24A92E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15] (Google Inc.)
Task: {B8F39C7D-CC04-4A95-8E10-6D93CE20A2F7} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-11] (IObit)
Task: {F013EB25-434B-44DE-93D9-D798D4F9C615} - System32\Tasks\ASC7_SkipUac_User => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2013-11-18] (IObit)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-18 18:02 - 2013-10-18 18:02 - 00158032 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\pugixml.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 02747720 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\RCF.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00123264 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\boost_filesystem-vc100-mt-1_53.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00023928 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\boost_system-vc100-mt-1_53.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00055168 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\boost_date_time-vc100-mt-1_53.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00102264 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\boost_thread-vc100-mt-1_53.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00499576 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\boost_locale-vc100-mt-1_53.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00267616 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\HtmlFramework.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00276816 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\Logger.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00064856 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\DllStorage.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00643440 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTrayDefaultSkin.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00140120 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\Localization.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00685904 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\SQLite.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00784760 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\boost_regex-vc100-mt-1_53.dll
2013-10-18 18:02 - 2013-10-18 18:02 - 00450952 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\boost_program_options-vc100-mt-1_53.dll
2013-10-18 18:01 - 2013-10-18 18:01 - 07401848 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareDesktopDefaultSkin.dll
2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-03-12 17:10 - 2013-10-24 18:45 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2012-06-04 19:24 - 2013-10-30 20:25 - 01123240 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2012-06-04 19:24 - 2013-10-23 21:07 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-06-04 19:24 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-06-04 19:24 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-06-04 19:24 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-03-12 20:28 - 2011-10-09 03:44 - 00143360 _____ () C:\Users\User\AppData\Roaming\GameDownloader\GdTip\libexpat.dll
2013-06-25 20:26 - 2012-04-28 10:22 - 12881408 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\jetrt\XKRN76027.dll
2013-06-25 20:26 - 2012-04-28 10:22 - 00655360 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\jetrt\XSQL76027.dll
2013-06-25 20:26 - 2012-04-28 10:22 - 03134464 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\jetrt\XMIS76027.dll
2013-06-25 20:26 - 2012-04-28 10:22 - 01999872 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\jetrt\XMNG76027.dll
2013-06-25 20:26 - 2012-04-28 10:22 - 12642816 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\jetrt\XAWT76027.dll
2013-06-25 20:26 - 2012-04-28 10:22 - 00257024 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\jetrt\XRMI76027.dll
2013-06-25 20:26 - 2012-04-28 10:22 - 00582656 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\jetrt\XSND76027.dll
2013-06-25 20:26 - 2012-04-28 10:22 - 08680960 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\jetrt\XXML76027.dll
2013-06-25 20:26 - 2011-09-16 01:27 - 00020480 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\bin\jetvm\jvm.dll
2013-06-25 20:26 - 2011-09-16 01:27 - 00069632 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\bin\java.dll
2013-06-25 20:26 - 2011-09-16 01:29 - 00126976 _____ () C:\Program Files (x86)\xReva Software\xReva Remote\rt\bin\zip.dll
2013-03-02 18:26 - 2012-07-08 16:31 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\hiddriver.dll
2013-11-25 17:56 - 2012-09-25 23:46 - 00445800 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Temp\cudart32_50_35.dll
2013-11-25 17:56 - 2012-05-27 01:36 - 00054272 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Temp\pthreadVC2.dll
2013-11-26 21:25 - 2011-02-22 16:01 - 00345088 _____ () C:\Program Files (x86)\IObit\Game Booster 3\madExcept_.bpl
2013-11-26 21:25 - 2011-02-22 16:01 - 00177152 _____ () C:\Program Files (x86)\IObit\Game Booster 3\madBasic_.bpl
2013-11-26 21:25 - 2011-02-22 16:01 - 00044544 _____ () C:\Program Files (x86)\IObit\Game Booster 3\madDisAsm_.bpl
2013-11-26 21:25 - 2011-08-26 13:56 - 00516440 _____ () C:\Program Files (x86)\IObit\Game Booster 3\sqlite3.dll
2013-11-26 21:31 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll
2013-11-26 21:31 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll
2013-11-26 21:31 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl
2013-11-26 21:31 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl
2013-11-26 21:31 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl
2013-11-26 21:31 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madExcept_.bpl
2013-11-26 21:31 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madBasic_.bpl
2013-11-26 21:31 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madDisAsm_.bpl
2013-11-26 21:31 - 2013-11-01 09:49 - 08001344 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\WebUI.dll
2013-11-26 21:31 - 2013-10-16 22:17 - 00185168 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\libcurl-4.dll
2013-11-26 21:31 - 2013-05-16 19:26 - 00182080 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\unrar.dll
2013-11-26 21:31 - 2013-05-16 19:26 - 00145216 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\zlibwapi.dll
2013-11-26 21:33 - 2012-11-01 10:21 - 00350592 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\madExcept_.bpl
2013-11-26 21:33 - 2012-11-01 10:21 - 00182656 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\madBasic_.bpl
2013-11-26 21:33 - 2012-11-01 10:21 - 00050048 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\madDisAsm_.bpl
2013-11-26 21:33 - 2012-04-14 15:41 - 00217944 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Antivirus\bdfltlib.dll
2013-11-17 14:01 - 2013-11-14 12:28 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libglesv2.dll
2013-11-17 14:01 - 2013-11-14 12:28 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libegl.dll
2013-11-17 14:01 - 2013-11-14 12:29 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-17 14:01 - 2013-11-14 12:29 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-17 14:01 - 2013-11-14 12:28 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData:$SS_DESCRIPTOR_NBVUV6PKDVBGTLPHJKBUK1R0WTPLY2LB3W2PHDEX6J5T4BW9V4DLNNH2V1UY71VU5VVVVVJVTVVJVT
AlternateDataStreams: C:\Users\All Users:$SS_DESCRIPTOR_NBVUV6PKDVBGTLPHJKBUK1R0WTPLY2LB3W2PHDEX6J5T4BW9V4DLNNH2V1UY71VU5VVVVVJVTVVJVT
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:$SS_DESCRIPTOR_NBVUV6PKDVBGTLPHJKBUK1R0WTPLY2LB3W2PHDEX6J5T4BW9V4DLNNH2V1UY71VU5VVVVVJVTVVJVT
AlternateDataStreams: C:\ProgramData\Application Data:$SS_DESCRIPTOR_NBVUV6PKDVBGTLPHJKBUK1R0WTPLY2LB3W2PHDEX6J5T4BW9V4DLNNH2V1UY71VU5VVVVVJVTVVJVT

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/26/2013 09:41:57 PM) (Source: Application Hang) (User: )
Description: Programm ASC.exe, Version 7.0.6.364 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 18dc

Startzeit: 01ceeae7924f7e7c

Endzeit: 11

Anwendungspfad: C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe

Berichts-ID: 2e9a1018-56db-11e3-8cdd-8c89a57c5833

Error: (11/26/2013 09:39:12 PM) (Source: Application Hang) (User: )
Description: Programm ASC.exe, Version 7.0.6.364 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1a78

Startzeit: 01ceeae689d4604d

Endzeit: 13

Anwendungspfad: C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe

Berichts-ID: c77cfc4d-56da-11e3-8cdd-8c89a57c5833

Error: (11/26/2013 08:57:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/26/2013 08:52:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0
Name des fehlerhaften Moduls: Adobe AIR.dll, Version: 3.7.0.1530, Zeitstempel: 0x5156646c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0006dd76
ID des fehlerhaften Prozesses: 0xec
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (11/26/2013 08:48:45 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/26/2013 02:14:54 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2013 08:04:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2013 08:00:01 PM) (Source: Bonjour Service) (User: )
Description: Client application bug: DNSServiceResolve(28:37:37:83:e0:20@fe80::2a37:37ff:fe83:e020._apple-mobdev._tcp.local.) active for over two minutes. This places considerable burden on the network.

Error: (11/25/2013 07:56:29 PM) (Source: Bonjour Service) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (11/25/2013 07:56:29 PM) (Source: Bonjour Service) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23


System errors:
=============
Error: (11/26/2013 09:33:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Advanced SystemCare Service 6" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (11/26/2013 09:31:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Advanced SystemCare Service 7" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (11/26/2013 08:58:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (11/26/2013 08:58:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (11/26/2013 08:50:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (11/26/2013 08:50:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (11/26/2013 02:16:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (11/26/2013 02:16:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (11/25/2013 08:05:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (11/25/2013 08:05:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (11/26/2013 09:41:57 PM) (Source: Application Hang)(User: )
Description: ASC.exe7.0.6.36418dc01ceeae7924f7e7c11C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe2e9a1018-56db-11e3-8cdd-8c89a57c5833

Error: (11/26/2013 09:39:12 PM) (Source: Application Hang)(User: )
Description: ASC.exe7.0.6.3641a7801ceeae689d4604d13C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exec77cfc4d-56da-11e3-8cdd-8c89a57c5833

Error: (11/26/2013 08:57:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/26/2013 08:52:43 PM) (Source: Application Error)(User: )
Description: LolClient.exe0.0.0.0515663e0Adobe AIR.dll3.7.0.15305156646cc00000050006dd76ec01ceeae09f705ff7C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.58\deploy\LolClient.exeC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.58\deploy\Adobe AIR\Versions\1.0\Adobe AIR.dll4fe59803-56d4-11e3-ad70-8c89a57c5833

Error: (11/26/2013 08:48:45 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/26/2013 02:14:54 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2013 08:04:18 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2013 08:00:01 PM) (Source: Bonjour Service)(User: )
Description: Client application bug: DNSServiceResolve(28:37:37:83:e0:20@fe80::2a37:37ff:fe83:e020._apple-mobdev._tcp.local.) active for over two minutes. This places considerable burden on the network.

Error: (11/25/2013 07:56:29 PM) (Source: Bonjour Service)(User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (11/25/2013 07:56:29 PM) (Source: Bonjour Service)(User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23


==================== Memory info =========================== 

Percentage of memory in use: 28%
Total physical RAM: 16336.45 MB
Available physical RAM: 11719.13 MB
Total Pagefile: 32671.08 MB
Available Pagefile: 27716.3 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.29 GB) (Free:641.93 GB) NTFS
Drive d: (COD2DVD) (CDROM) (Total:3.51 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 00000000)

Partition: GPT Partition Type
==================== End Of Log ============================
         

Der GMER - Log

Code:
ATTFilter
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-11-26 22:24:03
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 ST1000DM003-9YN162 rev.CC4D 931,51GB
Running: 819rxiz1.exe; Driver: C:\Users\User\AppData\Local\Temp\kxldapob.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                     fffff80012406000 77 bytes [00, 00, 07, 00, 46, 72, 65, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 606                                                                     fffff8001240604e 58 bytes [F1, 0B, 86, B3, 07, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Windows\SysWOW64\svchost.exe[1640] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                          0000000076e61465 2 bytes [E6, 76]
.text     C:\Windows\SysWOW64\svchost.exe[1640] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                         0000000076e614bb 2 bytes [E6, 76]
.text     ...                                                                                                                                    * 2
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2064] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                                0000000072f81a22 2 bytes [F8, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2064] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                                0000000072f81ad0 2 bytes [F8, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2064] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                                0000000072f81b08 2 bytes [F8, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2064] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                                0000000072f81bba 2 bytes [F8, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2064] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                                0000000072f81bda 2 bytes [F8, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2064] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                         0000000076e61465 2 bytes [E6, 76]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2064] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                        0000000076e614bb 2 bytes [E6, 76]
.text     ...                                                                                                                                    * 2
.text     C:\Program Files (x86)\Steam\Steam.exe[3116] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate                                             0000000076a0549c 5 bytes JMP 0000000100290800
.text     C:\Program Files (x86)\Steam\Steam.exe[3116] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                                   0000000076e61465 2 bytes [E6, 76]
.text     C:\Program Files (x86)\Steam\Steam.exe[3116] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                                  0000000076e614bb 2 bytes [E6, 76]
.text     ...                                                                                                                                    * 2
.text     C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4764] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate                         0000000076a0549c 5 bytes JMP 00000001000d0800
.text     C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4764] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69               0000000076e61465 2 bytes [E6, 76]
.text     C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4764] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155              0000000076e614bb 2 bytes [E6, 76]
.text     ...                                                                                                                                    * 2
.text     C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ascavsvc.exe[7068] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69   0000000076e61465 2 bytes [E6, 76]
.text     C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ascavsvc.exe[7068] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155  0000000076e614bb 2 bytes [E6, 76]
.text     ...                                                                                                                                    * 2
.text     C:\Users\User\Downloads\Defogger.exe[7892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                     0000000076e61465 2 bytes [E6, 76]
.text     C:\Users\User\Downloads\Defogger.exe[7892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                    0000000076e614bb 2 bytes [E6, 76]
.text     ...                                                                                                                                    * 2

---- Threads - GMER 2.1 ----

Thread    C:\Program Files\Windows Media Player\wmpnetwk.exe [4916:5116]                                                                         000007fefc112a7c

---- EOF - GMER 2.1 ----
         
Zu guter letzt noch der defogger_disable LOG

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 22:05 on 26/11/2013 (User)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
Ich für meinen Teil habe keine Ahnung von der Materie und hoffe,dass sie mir helfen können

Danke im Voraus
Mayler

Alt 27.11.2013, 07:44   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Standard

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________

__________________

Alt 27.11.2013, 17:52   #3
Mayler
 
Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Standard

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



Hallo erstmal!
Großes Lob für die schnelle Antwort und Bearbeitung meiner Anfrage!
Ich schicke anbei die Combofix-Datei (Das hat sich gereimt und was sich reimt ist gut!)

Code:
ATTFilter
ComboFix 13-11-27.01 - User 27.11.2013  17:38:15.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.16336.13562 [GMT 1:00]
ausgeführt von:: c:\users\User\Downloads\ComboFix.exe
AV: Ad-Aware Antivirus *Disabled/Updated* {D87B6541-12A1-DAEA-0033-9B8057AAB996}
FW: Ad-Aware Firewall *Disabled* {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
SP: Ad-Aware Antivirus *Disabled/Updated* {631A84A5-349B-D564-3A83-A0F22C2DF32B}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
c:\windows\Chrome.exe.tmp
c:\windows\SysWow64\FlashPlayerApp.exe
c:\windows\SysWow64\frapsvid.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-10-27 bis 2013-11-27  ))))))))))))))))))))))))))))))
.
.
2013-11-27 16:43 . 2013-11-27 16:43	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-11-27 16:43 . 2013-11-27 16:43	--------	d-----w-	c:\users\hedev\AppData\Local\temp
2013-11-27 16:43 . 2013-11-27 16:43	--------	d-----w-	c:\users\DefaultAppPool\AppData\Local\temp
2013-11-27 16:43 . 2013-11-27 16:43	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-11-27 16:40 . 2013-11-27 16:40	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{677DEDE2-6A19-44CF-A20D-E8E13166AF49}\offreg.dll
2013-11-27 16:32 . 2013-11-18 00:28	10285968	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{677DEDE2-6A19-44CF-A20D-E8E13166AF49}\mpengine.dll
2013-11-26 21:30 . 2013-11-26 21:30	163644	----a-w-	c:\windows\SysWow64\drivers\SECDRV.SYS
2013-11-26 20:48 . 2013-11-26 20:48	--------	d-----w-	C:\FRST
2013-11-26 20:33 . 2013-11-26 20:33	--------	d-----w-	c:\programdata\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-26 20:33 . 2013-11-26 20:33	--------	d-----w-	c:\programdata\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-26 20:33 . 2013-11-26 20:33	--------	d-----w-	C:\IObit
2013-11-26 20:31 . 2013-11-26 20:31	--------	d-----w-	c:\programdata\ProductData
2013-11-26 20:31 . 2013-11-26 20:31	--------	d-----w-	c:\programdata\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-11-26 20:31 . 2013-11-26 20:33	--------	d-----w-	c:\users\User\AppData\Roaming\IObit
2013-11-26 20:25 . 2013-11-26 20:33	--------	d-----w-	c:\programdata\IObit
2013-11-26 20:25 . 2013-11-26 20:32	--------	d-----w-	c:\program files (x86)\IObit
2013-11-26 20:13 . 2013-11-26 20:13	--------	d-----w-	c:\programdata\BitDefender
2013-11-26 20:05 . 2013-11-26 20:05	--------	d-----w-	c:\programdata\Oracle
2013-11-26 20:05 . 2013-11-26 20:05	--------	d-----w-	c:\program files (x86)\Common Files\Java
2013-11-26 20:04 . 2013-10-08 06:50	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-11-26 20:02 . 2013-08-21 14:32	2084072	----a-w-	c:\windows\system32\bdnc.dll
2013-11-26 20:02 . 2013-07-17 17:09	96160	----a-w-	c:\windows\system32\bdpredir.dll
2013-11-26 20:02 . 2013-07-17 17:09	209984	----a-w-	c:\windows\system32\BdFirewallSDK.dll
2013-11-26 20:02 . 2013-07-17 17:09	195016	----a-w-	c:\windows\system32\httproxy.dll
2013-11-26 20:02 . 2013-07-17 17:09	156936	----a-w-	c:\windows\system32\bdfwcore.dll
2013-11-26 20:02 . 2013-07-17 17:09	155912	----a-w-	c:\windows\system32\bdpop3p.dll
2013-11-26 20:02 . 2013-07-17 17:09	122928	----a-w-	c:\windows\system32\OEMbdpredir.dll
2013-11-26 20:02 . 2013-07-17 17:09	1061776	----a-w-	c:\windows\system32\bdsmtpp.dll
2013-11-26 19:59 . 2013-11-26 19:59	--------	d-----w-	c:\program files\Lavasoft
2013-11-26 19:52 . 2013-11-26 19:52	--------	d-----w-	c:\users\User\AppData\Roaming\Lavasoft
2013-11-26 19:52 . 2013-11-26 19:52	--------	d-----w-	c:\program files\Common Files\Lavasoft
2013-11-25 16:56 . 2012-09-25 22:46	445800	----a-w-	c:\users\User\AppData\Roaming\Microsoft\Windows\Temp\cudart32_50_35.dll
2013-11-25 16:56 . 2012-05-27 00:36	54272	----a-w-	c:\users\User\AppData\Roaming\Microsoft\Windows\Temp\pthreadVC2.dll
2013-11-25 16:56 . 2013-11-19 23:46	9752064	----a-w-	c:\users\User\AppData\Roaming\Microsoft\Windows\Temp\dllhost.exe
2013-11-25 16:55 . 2013-11-25 16:56	3894234	----a-w-	c:\users\User\AppData\Roaming\Microsoft\Windows\Temp\cleantemporary.exe
2013-11-25 16:55 . 2013-11-25 16:55	301	----a-w-	c:\users\User\AppData\Roaming\Microsoft\Windows\Temp\regsvr.bat
2013-11-25 16:55 . 2013-11-25 16:55	223	----a-w-	c:\users\User\AppData\Roaming\Microsoft\Windows\Temp\system.vbs
2013-11-17 12:33 . 2013-11-17 12:33	--------	d-----w-	c:\program files (x86)\Activision
2013-11-16 18:00 . 2013-10-14 17:00	28368	----a-w-	c:\windows\system32\IEUDINIT.EXE
2013-11-14 16:56 . 2013-10-05 20:25	1474048	----a-w-	c:\windows\system32\crypt32.dll
2013-11-14 16:55 . 2013-10-03 02:23	404480	----a-w-	c:\windows\system32\gdi32.dll
2013-11-14 16:55 . 2013-10-03 02:00	311808	----a-w-	c:\windows\SysWow64\gdi32.dll
2013-11-14 16:55 . 2013-10-12 02:30	830464	----a-w-	c:\windows\system32\nshwfp.dll
2013-11-14 16:55 . 2013-10-12 02:29	859648	----a-w-	c:\windows\system32\IKEEXT.DLL
2013-11-14 16:55 . 2013-10-12 02:29	324096	----a-w-	c:\windows\system32\FWPUCLNT.DLL
2013-11-14 16:55 . 2013-10-12 02:03	656896	----a-w-	c:\windows\SysWow64\nshwfp.dll
2013-11-14 16:55 . 2013-10-12 02:01	216576	----a-w-	c:\windows\SysWow64\FWPUCLNT.DLL
2013-11-12 17:48 . 2013-11-12 19:51	--------	d-----w-	c:\program files (x86)\osu!
2013-11-10 19:01 . 2013-11-10 19:01	--------	d-----w-	c:\windows\Migration
2013-11-01 16:01 . 2013-11-01 16:03	--------	d-----w-	c:\users\User\AppData\Roaming\Audacity
2013-11-01 16:01 . 2013-11-01 16:01	--------	d-----w-	c:\program files (x86)\Audacity
2013-11-01 00:02 . 2013-11-01 00:02	--------	d-----w-	c:\users\User\AppData\Local\fabi.me
2013-10-31 19:10 . 2013-10-31 20:27	--------	d-----w-	c:\program files (x86)\LOLReplay
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-14 21:27 . 2012-06-04 18:29	82896128	----a-w-	c:\windows\system32\MRT.exe
2013-11-11 04:50 . 2010-11-21 03:27	267936	------w-	c:\windows\system32\MpSigStub.exe
2013-10-19 15:23 . 2013-10-19 15:17	671261856	----a-w-	C:\S4_League.exe
2013-10-09 18:04 . 2013-05-06 19:37	14456	----a-w-	c:\windows\system32\drivers\gfibto.sys
2013-10-08 19:10 . 2012-06-04 19:26	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-28 16:23 . 2013-02-10 09:37	281688	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2013-09-28 16:23 . 2012-06-16 17:06	281688	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2013-09-08 02:30 . 2013-10-10 12:53	1903552	----a-w-	c:\windows\system32\drivers\tcpip.sys
2013-09-08 02:27 . 2013-10-10 12:53	327168	----a-w-	c:\windows\system32\mswsock.dll
2013-09-08 02:03 . 2013-10-10 12:53	231424	----a-w-	c:\windows\SysWow64\mswsock.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GdShellExt]
@="{21FEE1EA-15A3-4B35-B6E5-56EC9F00FF28}"
[HKEY_CLASSES_ROOT\CLSID\{21FEE1EA-15A3-4B35-B6E5-56EC9F00FF28}]
2012-06-04 07:49	223184	----a-w-	c:\users\User\AppData\Roaming\GameDownloader\GdTip\GdShellExt.1.0.0.8.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2013-10-30 1820584]
"Akamai NetSession Interface"="c:\users\User\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-10-21 20549280]
"Advanced SystemCare 7"="c:\program files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" [2013-11-11 2283808]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"RoccatIskuFX"="c:\program files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe" [2012-11-08 546656]
"ROCCAT Savu Gaming Mouse"="c:\program files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe" [2012-09-10 872048]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
"Aeria Ignite"="c:\program files (x86)\Aeria Games\Ignite\aeriaignite.exe" [2013-06-06 1925656]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2013-11-19 1572672]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
xReva Remote.lnk - c:\program files (x86)\xReva Software\xReva Remote\xReva Remote.exe [2013-6-25 920064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 LavasoftAdAwareService11;Ad-Aware Service 11;c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe;c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 bulkadi;Razer Megalodon DFU;c:\windows\system32\DRIVERS\bulkrazer_x64.sys;c:\windows\SYSNATIVE\DRIVERS\bulkrazer_x64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys;c:\windows\SYSNATIVE\drivers\gfiark.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 slb;slb;c:\aeriagames\ScarletBlade\avital\scarlb64.sys;c:\aeriagames\ScarletBlade\avital\scarlb64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
R3 X6va009;X6va009;c:\windows\SysWOW64\Drivers\X6va009;c:\windows\SysWOW64\Drivers\X6va009 [x]
R3 X6va011;X6va011;c:\windows\SysWOW64\Drivers\X6va011;c:\windows\SysWOW64\Drivers\X6va011 [x]
R3 X6va015;X6va015;c:\windows\SysWOW64\Drivers\X6va015;c:\windows\SysWOW64\Drivers\X6va015 [x]
R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x]
R4 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys;c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [x]
S1 bdfwfpf;bdfwfpf;c:\program files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys;c:\program files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [x]
S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [x]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 gzflt;gzflt;c:\program files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys;c:\program files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - Trufos
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai	REG_MULTI_SZ   	Akamai
iissvcs	REG_MULTI_SZ   	w3svc was
apphost	REG_MULTI_SZ   	apphostsvc
XLServicePlatform	REG_MULTI_SZ   	XLServicePlatform
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-17 12:58	1210320	----a-w-	c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-11-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-04 19:10]
.
2013-11-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15 15:50]
.
2013-11-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15 15:50]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2013-11-26 20:31	2486592	----a-w-	c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-08-15 7288424]
"AdAwareTray"="c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe" [2013-10-18 2493272]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_sp_OC1
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local;<local>??????????????s;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>;<local>
Trusted Zone: aeriagames.com
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\
FF - prefs.js: browser.startup.homepage - about:home|hxxp://www.giga.de/$22/
FF - ExtSQL: 2013-11-26 23:40; adsremoval@adsremoval.net; c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\extensions\adsremoval@adsremoval.net
FF - ExtSQL: 2013-11-27 18:36; ascsurfingprotection@iobit.com; c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\extensions\ascsurfingprotection@iobit.com
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-Overwolf - c:\program files (x86)\Overwolf\Overwolf.exe
Wow6432Node-HKCU-Run-9d0ca6779c4df125b0313463a3f5f631 - c:\windows\Chrome.exe
Wow6432Node-HKLM-Run-9d0ca6779c4df125b0313463a3f5f631 - c:\windows\Chrome.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SBRegRebootCleaner - c:\program files (x86)\Ad-Aware Antivirus\SBRC.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]
"ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va009]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va009"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va011]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va011"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va015]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va015"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2469488609-1612065801-1480973577-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-2469488609-1612065801-1480973577-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-2469488609-1612065801-1480973577-1000\Software\SecuROM\License information*]
"datasecu"=hex:8c,f1,28,62,44,38,ef,23,5f,75,73,9c,d2,23,f5,f7,8e,28,02,09,73,
   11,0e,fb,1f,7d,58,43,38,db,b2,6c,11,eb,7b,1a,06,bc,16,f1,ff,f9,f6,21,da,4f,\
"rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-11-27  17:44:26
ComboFix-quarantined-files.txt  2013-11-27 16:44
.
Vor Suchlauf: 22 Verzeichnis(se), 688.683.151.360 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 689.257.336.832 Bytes frei
.
- - End Of File - - BC56FB4B3499A6D1FCCAF76A1DBA104C
A36C5E4F47E84449FF07ED3517B43A31
         
//EDIT : Wie es scheint,hat ComboFix hier sehr geholfen:die Kiste fliegt wieder!
Vielen,vielen dank an euch und machts gut!
__________________

Alt 28.11.2013, 11:50   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Standard

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



Wir sind noch lange nicht durch

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 28.11.2013, 17:51   #5
Mayler
 
Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Standard

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



Sooo,hier die gewünschten Logs:

Erstmal die Log-Datei von MalwareByte

Code:
ATTFilter
 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.28.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
User :: USER-PC [Administrator]

Schutz: Aktiviert

28.11.2013 16:27:07
mbam-log-2013-11-28 (16-27-07).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 521245
Laufzeit: 55 Minute(n), 37 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Den ADWCleaner

Code:
ATTFilter
# AdwCleaner v3.013 - Bericht erstellt am 28/11/2013 um 16:23:21
# Updated 24/11/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : User - USER-PC
# Gestartet von : C:\Users\User\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\Toolbar Cleaner
Ordner Gelöscht : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\adawaretb

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\Software\adawaretb
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\Toolbar Cleaner
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v5.0 (en-US)

[ Datei : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\prefs.js ]


-\\ Google Chrome v31.0.1650.57

[ Datei : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [11824 octets] - [28/11/2013 16:21:16]
AdwCleaner[S0].txt - [10717 octets] - [28/11/2013 16:23:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10778 octets] ##########
         
Das JRT-Log

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by User on 28.11.2013 at 16:30:35,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\adawarebp
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{53C2C26D-727C-41AA-945C-6742AD15CBE5}



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{0C75A062-1144-4AF9-92BF-3D7D32717C91}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{0CB1903E-146F-4D72-AF26-2FAB4BD8B1D2}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{1460CCC1-9E09-4ED7-B77F-D2A03496AA82}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{14D480B2-F804-4B01-B626-613259E1389B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{2D5B3E61-92BE-4ACD-9555-34B96CFC5161}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{32F82C0C-BA02-406F-BAF6-C9043CC146EB}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{3A685D65-D9B5-4011-A463-79586463B1D3}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{3FF0A016-0C17-41ED-8C75-44A45A9B90FA}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{4770F701-C317-45CE-BBE7-8BB90CEFD739}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{4AE416DA-6105-41D6-ACB7-01474ACEA438}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6D1DA3ED-94C9-452D-8A0B-C92E9D9AEB0B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{733B9BB5-2773-4F3F-BF17-CEC39DB086B4}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{7CC7D1CF-90AF-4966-BB0E-EDD8FB4410CF}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{82CDBDD4-BE83-44C0-AB72-F217ED337BA2}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{8520160F-7D8E-46C3-B5F8-48AB4215AE27}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{8619D222-1091-4DD6-B568-A55DE3E2D3AF}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{906D070D-2F71-44D9-95BB-AF377B9C4CBD}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{93751E68-79FA-460A-8473-A5502D7700F0}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{966A4CBB-B85B-4F0B-825C-DDB727968A7B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{9BFD3011-66F8-4A27-AAB1-D8E0A827C727}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{9F2A5AF4-8178-4E73-9180-775AC976B3FF}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{A2C4AB00-962A-49A8-A9DE-273F9644FD2C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{AF850CD1-0B6D-4D5B-8154-46DF2636CD93}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B3847120-C375-4FF6-B2F2-9C1BE658A260}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{C617F943-1FAD-40F3-B0EF-8C2A8348D7DE}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{C6D7AA33-15F5-4FA7-BB43-3DEF4480DF83}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{CEB11618-8999-41AD-87C4-0C8272E224C5}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F694DE1F-E4FC-4E0F-B47B-A922FEBB737E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{FE18021E-0713-468B-BDAE-5BC6C62226A3}



~~~ FireFox

Successfully deleted: [Folder] C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\a3o97mqw.default\extensions\staged



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.11.2013 at 16:35:36,69
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Und die neue FRST



FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-11-2013 01
Ran by User (administrator) on USER-PC on 28-11-2013 17:45:23
Running from C:\Users\User\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(xReva Software) C:\Program Files (x86)\xReva Software\xReva Remote\xReva Remote.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7288424 2011-08-15] (Realtek Semiconductor)
HKLM\...\Run: [SBRegRebootCleaner] - "C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe"
HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe [2493272 2013-10-18] ()
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Advanced SystemCare 7] - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2283808 2013-11-11] (IObit)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [RoccatIskuFX] - C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe [546656 2012-11-08] (ROCCAT GmbH)
HKLM-x32\...\Run: [ROCCAT Savu Gaming Mouse] - C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe [872048 2012-09-10] (ROCCAT GmbH)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [Aeria Ignite] - C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1572672 2013-11-19] (IObit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_sp_OC1
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC03FDE9FA766CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_ds_OC1&query={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_ds_OC1&query={searchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.66.2.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default
FF Homepage: about:home|hxxp://www.giga.de/$22/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.4.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.4.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: Ads Removal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\adsremoval@adsremoval.net
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: Lavasoft Search Plugin - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack

Chrome: 
=======
CHR HomePage: hxxp://google.com/
CHR RestoreOnStartup: "hxxp://www.google.de/", "hxxp://www.giga.de/$22/"
CHR DefaultSearchURL: (Amazon) - hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_cr_de_display?ie=UTF8&tag=bds-p18-serp-de-cr-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_cr_ds_OC1&query={searchTerms}
CHR DefaultSuggestURL: (Amazon) - hxxp://suggestqueries.google.com/complete/search?q={searchTerms}&output=chrome
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\gcswf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Extension: (ProxTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.4_0
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (GFACE Experience Plugin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol\0.39.0_0
CHR Extension: (Assassin's Creed III) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\geadmffjboclimmeiaimcafapjaefnfn\1.4_0
CHR Extension: (Ads Removal) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkcefkcdkepgkpbgncjchhbjgoanleod\1.0.0_0
CHR Extension: (	"name":"Advanced SystemCare Surfing Protection",) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Lavasoft NewTab) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole\0.12_0
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)
R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe [517344 2013-10-18] ()
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-15] ()
S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-08] ()
R1 BdfNdisf; c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [93160 2013-07-17] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [102992 2013-07-17] (BitDefender LLC)
S3 bulkadi; C:\Windows\System32\DRIVERS\bulkrazer_x64.sys [25088 2011-02-09] (Windows (R) Codename Longhorn DDK provider)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-10-09] (GFI Software)
R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [138232 2013-07-17] (BitDefender LLC)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-01-26] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
R2 SecDrv; C:\Windows\SysWow64\drivers\SECDRV.SYS [163644 2013-11-26] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-11-13] (OpenLibSys.org)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 slb; \??\C:\AeriaGames\ScarletBlade\avital\scarlb64.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-28 16:35 - 2013-11-28 16:35 - 00004056 _____ C:\Users\User\Desktop\JRT.txt
2013-11-28 16:30 - 2013-11-28 16:30 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT (2).exe
2013-11-28 16:29 - 2013-11-28 16:29 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT (1).exe
2013-11-28 16:21 - 2013-11-28 16:21 - 00000000 ____D C:\Windows\ERUNT
2013-11-28 16:19 - 2013-11-28 16:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Malwarebytes
2013-11-28 16:18 - 2013-11-28 16:23 - 00000000 ____D C:\AdwCleaner
2013-11-28 16:17 - 2013-11-28 16:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-28 16:17 - 2013-11-28 16:17 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT.exe
2013-11-28 16:17 - 2013-11-28 16:17 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-28 16:17 - 2013-11-28 16:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-28 16:17 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-28 16:16 - 2013-11-28 16:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\User\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-28 16:16 - 2013-11-28 16:16 - 01091882 _____ C:\Users\User\Downloads\adwcleaner.exe
2013-11-28 16:13 - 2013-11-28 16:13 - 01958850 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2013-11-28 16:12 - 2013-11-28 16:12 - 00000000 _____ C:\Users\User\defogger_reenable
2013-11-27 17:59 - 2013-11-27 17:59 - 00000242 _____ C:\Users\User\Downloads\defogger_enable.log
2013-11-27 17:44 - 2013-11-27 17:44 - 00026661 _____ C:\ComboFix.txt
2013-11-27 17:36 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-27 17:36 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-27 17:36 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-27 17:33 - 2013-11-27 17:44 - 00000000 ____D C:\Qoobox
2013-11-27 17:33 - 2013-11-27 17:43 - 00000000 ____D C:\Windows\erdnt
2013-11-27 17:29 - 2013-11-27 17:29 - 05150163 ____R (Swearware) C:\Users\User\Downloads\ComboFix.exe
2013-11-26 22:30 - 2013-11-26 22:30 - 00163644 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\Windows\SysWOW64\Drivers\SECDRV.SYS
2013-11-26 22:24 - 2013-11-26 22:24 - 00005354 _____ C:\Users\User\Downloads\gmer.log
2013-11-26 22:15 - 2013-11-26 22:16 - 00097210 _____ C:\Users\User\Desktop\Bericht.txt
2013-11-26 22:15 - 2013-11-26 22:15 - 00000000 ____D C:\Users\User\Desktop\Neuer Ordner
2013-11-26 22:12 - 2013-11-26 22:29 - 00000864 _____ C:\Users\User\Desktop\GMER-ZEUG.txt
2013-11-26 22:12 - 2013-11-26 22:12 - 00377856 _____ C:\Users\User\Downloads\819rxiz1.exe
2013-11-26 22:05 - 2013-11-28 16:12 - 00000470 _____ C:\Users\User\Downloads\defogger_disable.log
2013-11-26 22:05 - 2013-11-26 22:05 - 00050477 _____ C:\Users\User\Downloads\Defogger.exe
2013-11-26 21:49 - 2013-11-26 21:50 - 00031026 _____ C:\Users\User\Downloads\Addition.txt
2013-11-26 21:48 - 2013-11-28 17:45 - 00018821 _____ C:\Users\User\Downloads\FRST.txt
2013-11-26 21:48 - 2013-11-26 21:48 - 00000000 ____D C:\FRST
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\IObit
2013-11-26 21:31 - 2013-11-28 16:10 - 00002209 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2013-11-26 21:31 - 2013-11-27 17:35 - 00003092 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2013-11-26 21:31 - 2013-11-26 21:33 - 00000000 ____D C:\Users\User\AppData\Roaming\IObit
2013-11-26 21:31 - 2013-11-26 21:31 - 00001217 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00001177 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\ProductData
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-11-26 21:28 - 2013-11-27 17:36 - 00007599 _____ C:\Users\User\AppData\Local\Resmon.ResmonCfg
2013-11-26 21:28 - 2013-11-26 21:30 - 34466768 _____ (IObit                                                       ) C:\Users\User\Downloads\asc-setup.exe
2013-11-26 21:28 - 2013-11-26 21:29 - 25095200 _____ (IObit                                                       ) C:\Users\User\Downloads\imf-setup.exe
2013-11-26 21:25 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\IObit
2013-11-26 21:25 - 2013-11-26 21:32 - 00000000 ____D C:\Program Files (x86)\IObit
2013-11-26 21:25 - 2013-11-26 21:25 - 00001186 _____ C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
2013-11-26 21:25 - 2013-11-26 21:25 - 00001174 _____ C:\Users\Public\Desktop\Game Booster 3.lnk
2013-11-26 21:21 - 2013-11-26 21:21 - 04869208 _____ (IObit                                                       ) C:\Users\User\Downloads\gb3-setup.exe
2013-11-26 21:13 - 2013-11-26 21:13 - 00000000 ____D C:\ProgramData\BitDefender
2013-11-26 21:05 - 2013-11-26 21:05 - 00000000 ____D C:\ProgramData\Oracle
2013-11-26 21:05 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-26 21:04 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-26 21:04 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-26 21:04 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-26 21:03 - 2013-11-26 21:04 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-11-26 21:02 - 2013-08-21 15:32 - 02084072 _____ (Bitdefender) C:\Windows\system32\bdnc.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 01061776 _____ (BitDefender S.R.L.) C:\Windows\system32\bdsmtpp.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00209984 _____ (BitDefender) C:\Windows\system32\BdFirewallSDK.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00195016 _____ (BitDefender) C:\Windows\system32\httproxy.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00156936 _____ C:\Windows\system32\bdfwcore.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00155912 _____ (BitDefender S.R.L.) C:\Windows\system32\bdpop3p.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00122928 _____ (BitDefender) C:\Windows\system32\OEMbdpredir.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00096160 _____ (BitDefender) C:\Windows\system32\bdpredir.dll
2013-11-26 20:59 - 2013-11-26 20:59 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-11-26 20:50 - 2013-11-26 20:50 - 01723528 _____ C:\Users\User\Downloads\Adaware_Installer.exe
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Mehrspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Einzelspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00000286 _____ C:\Windows\game.ini
2013-11-17 13:33 - 2013-11-17 13:33 - 00000000 ____D C:\Program Files (x86)\Activision
2013-11-16 19:00 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-16 18:58 - 2013-11-16 18:58 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 18:57 - 2013-11-16 19:00 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-15 19:41 - 2013-11-15 19:41 - 00080780 _____ C:\Users\User\Desktop\Alonian Launcher.exe
2013-11-14 17:56 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 17:56 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 17:56 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 17:56 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 17:56 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 17:56 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 17:56 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 17:56 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 17:56 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 17:56 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 17:56 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 17:56 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 17:56 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 17:56 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 17:56 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 17:56 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 17:56 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 17:56 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 17:56 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 17:56 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 17:56 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 17:56 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 17:56 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-14 17:55 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 17:55 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 17:55 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 17:55 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 17:55 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 17:55 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 17:55 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-12 18:49 - 2013-11-12 18:49 - 00000885 _____ C:\Users\Public\Desktop\osu!.lnk
2013-11-12 18:48 - 2013-11-12 20:51 - 00000000 ____D C:\Program Files (x86)\osu!
2013-11-10 20:06 - 2013-11-10 20:28 - 00000000 ____D C:\Users\User\Documents\dragoon
2013-11-01 17:01 - 2013-11-01 17:03 - 00000000 ____D C:\Users\User\AppData\Roaming\Audacity
2013-11-01 17:01 - 2013-11-01 17:01 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-11-01 17:01 - 2013-11-01 17:01 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-11-01 01:02 - 2013-11-01 01:02 - 00000000 ____D C:\Users\User\AppData\Local\fabi.me
2013-10-31 20:10 - 2013-10-31 21:27 - 00000000 ____D C:\Program Files (x86)\LOLReplay

==================== One Month Modified Files and Folders =======

2013-11-28 17:45 - 2013-11-26 21:48 - 00018821 _____ C:\Users\User\Downloads\FRST.txt
2013-11-28 17:44 - 2012-06-04 19:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2013-11-28 17:10 - 2012-06-14 16:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-28 16:53 - 2012-09-15 16:50 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-28 16:35 - 2013-11-28 16:35 - 00004056 _____ C:\Users\User\Desktop\JRT.txt
2013-11-28 16:32 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-28 16:32 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-28 16:31 - 2011-04-12 08:43 - 00745318 _____ C:\Windows\system32\perfh007.dat
2013-11-28 16:31 - 2011-04-12 08:43 - 00164106 _____ C:\Windows\system32\perfc007.dat
2013-11-28 16:31 - 2009-07-14 06:13 - 01732920 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-28 16:30 - 2013-11-28 16:30 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT (2).exe
2013-11-28 16:29 - 2013-11-28 16:29 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT (1).exe
2013-11-28 16:29 - 2012-06-01 09:35 - 01350706 _____ C:\Windows\WindowsUpdate.log
2013-11-28 16:26 - 2012-06-04 19:23 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-28 16:25 - 2012-09-15 16:50 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-28 16:24 - 2012-06-01 09:53 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-28 16:24 - 2010-11-21 04:47 - 00489728 _____ C:\Windows\PFRO.log
2013-11-28 16:24 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-28 16:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-28 16:24 - 2009-07-14 05:51 - 00099253 _____ C:\Windows\setupact.log
2013-11-28 16:23 - 2013-11-28 16:18 - 00000000 ____D C:\AdwCleaner
2013-11-28 16:21 - 2013-11-28 16:21 - 00000000 ____D C:\Windows\ERUNT
2013-11-28 16:19 - 2013-11-28 16:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Malwarebytes
2013-11-28 16:18 - 2013-11-28 16:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-28 16:17 - 2013-11-28 16:17 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT.exe
2013-11-28 16:17 - 2013-11-28 16:17 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-28 16:17 - 2013-11-28 16:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-28 16:17 - 2013-11-28 16:16 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\User\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-28 16:16 - 2013-11-28 16:16 - 01091882 _____ C:\Users\User\Downloads\adwcleaner.exe
2013-11-28 16:13 - 2013-11-28 16:13 - 01958850 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2013-11-28 16:12 - 2013-11-28 16:12 - 00000000 _____ C:\Users\User\defogger_reenable
2013-11-28 16:12 - 2013-11-26 22:05 - 00000470 _____ C:\Users\User\Downloads\defogger_disable.log
2013-11-28 16:10 - 2013-11-26 21:31 - 00002209 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2013-11-27 17:59 - 2013-11-27 17:59 - 00000242 _____ C:\Users\User\Downloads\defogger_enable.log
2013-11-27 17:44 - 2013-11-27 17:44 - 00026661 _____ C:\ComboFix.txt
2013-11-27 17:44 - 2013-11-27 17:33 - 00000000 ____D C:\Qoobox
2013-11-27 17:44 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-11-27 17:43 - 2013-11-27 17:33 - 00000000 ____D C:\Windows\erdnt
2013-11-27 17:43 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-11-27 17:36 - 2013-11-26 21:28 - 00007599 _____ C:\Users\User\AppData\Local\Resmon.ResmonCfg
2013-11-27 17:35 - 2013-11-26 21:31 - 00003092 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2013-11-27 17:29 - 2013-11-27 17:29 - 05150163 ____R (Swearware) C:\Users\User\Downloads\ComboFix.exe
2013-11-26 22:30 - 2013-11-26 22:30 - 00163644 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\Windows\SysWOW64\Drivers\SECDRV.SYS
2013-11-26 22:29 - 2013-11-26 22:12 - 00000864 _____ C:\Users\User\Desktop\GMER-ZEUG.txt
2013-11-26 22:24 - 2013-11-26 22:24 - 00005354 _____ C:\Users\User\Downloads\gmer.log
2013-11-26 22:16 - 2013-11-26 22:15 - 00097210 _____ C:\Users\User\Desktop\Bericht.txt
2013-11-26 22:15 - 2013-11-26 22:15 - 00000000 ____D C:\Users\User\Desktop\Neuer Ordner
2013-11-26 22:12 - 2013-11-26 22:12 - 00377856 _____ C:\Users\User\Downloads\819rxiz1.exe
2013-11-26 22:05 - 2013-11-26 22:05 - 00050477 _____ C:\Users\User\Downloads\Defogger.exe
2013-11-26 21:50 - 2013-11-26 21:49 - 00031026 _____ C:\Users\User\Downloads\Addition.txt
2013-11-26 21:48 - 2013-11-26 21:48 - 00000000 ____D C:\FRST
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\IObit
2013-11-26 21:33 - 2013-11-26 21:31 - 00000000 ____D C:\Users\User\AppData\Roaming\IObit
2013-11-26 21:33 - 2013-11-26 21:25 - 00000000 ____D C:\ProgramData\IObit
2013-11-26 21:32 - 2013-11-26 21:25 - 00000000 ____D C:\Program Files (x86)\IObit
2013-11-26 21:31 - 2013-11-26 21:31 - 00001217 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00001177 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\ProductData
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-11-26 21:31 - 2012-06-09 22:30 - 00000000 ____D C:\Users\User\AppData\Roaming\Apple Computer
2013-11-26 21:30 - 2013-11-26 21:28 - 34466768 _____ (IObit                                                       ) C:\Users\User\Downloads\asc-setup.exe
2013-11-26 21:29 - 2013-11-26 21:28 - 25095200 _____ (IObit                                                       ) C:\Users\User\Downloads\imf-setup.exe
2013-11-26 21:25 - 2013-11-26 21:25 - 00001186 _____ C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
2013-11-26 21:25 - 2013-11-26 21:25 - 00001174 _____ C:\Users\Public\Desktop\Game Booster 3.lnk
2013-11-26 21:21 - 2013-11-26 21:21 - 04869208 _____ (IObit                                                       ) C:\Users\User\Downloads\gb3-setup.exe
2013-11-26 21:13 - 2013-11-26 21:13 - 00000000 ____D C:\ProgramData\BitDefender
2013-11-26 21:05 - 2013-11-26 21:05 - 00000000 ____D C:\ProgramData\Oracle
2013-11-26 21:04 - 2013-11-26 21:03 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-11-26 21:04 - 2013-06-24 16:22 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-26 21:01 - 2013-10-09 19:06 - 00001327 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2013-11-26 20:59 - 2013-11-26 20:59 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-26 20:54 - 2013-05-06 20:39 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-11-26 20:50 - 2013-11-26 20:50 - 01723528 _____ C:\Users\User\Downloads\Adaware_Installer.exe
2013-11-26 20:50 - 2013-10-09 19:06 - 00000000 ____D C:\ProgramData\Lavasoft
2013-11-25 22:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-25 20:35 - 2013-05-21 14:19 - 00000000 ____D C:\ProgramData\Origin
2013-11-25 20:04 - 2012-06-04 19:18 - 00063064 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 20:01 - 2013-10-26 21:51 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-25 20:01 - 2013-09-29 07:30 - 00000000 ____D C:\Fraps
2013-11-25 20:01 - 2013-01-19 11:01 - 00000000 ____D C:\Users\DefaultAppPool
2013-11-25 20:01 - 2012-07-15 18:58 - 00000000 ____D C:\Users\User\AppData\Local\Akamai
2013-11-25 20:01 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-25 20:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-25 18:40 - 2013-10-26 16:35 - 00000000 ____D C:\WoW
2013-11-25 18:39 - 2013-08-08 00:53 - 00000000 ____D C:\Program Files (x86)\Infinity Fiesta
2013-11-25 18:35 - 2013-10-09 19:06 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-11-24 00:30 - 2013-10-24 20:09 - 00000000 ____D C:\Users\User\AppData\Local\Battle.net
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Mehrspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Einzelspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00000286 _____ C:\Windows\game.ini
2013-11-17 13:37 - 2012-06-01 09:42 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-17 13:33 - 2013-11-17 13:33 - 00000000 ____D C:\Program Files (x86)\Activision
2013-11-17 00:54 - 2013-04-19 13:22 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic
2013-11-17 00:52 - 2012-11-23 22:41 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2013-11-16 21:34 - 2013-10-24 20:08 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-11-16 20:54 - 2012-06-01 09:36 - 00001425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-16 20:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-16 19:00 - 2013-11-16 18:57 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-16 18:58 - 2013-11-16 18:58 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 11:07 - 2013-04-19 13:22 - 02300919 _____ () C:\Users\User\Desktop\TechnicLauncher.exe
2013-11-15 19:41 - 2013-11-15 19:41 - 00080780 _____ C:\Users\User\Desktop\Alonian Launcher.exe
2013-11-15 19:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-14 22:28 - 2013-08-14 13:19 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 22:27 - 2012-06-04 19:29 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 20:49 - 2013-09-28 19:52 - 00000000 ____D C:\overwulf_musik
2013-11-12 20:51 - 2013-11-12 18:48 - 00000000 ____D C:\Program Files (x86)\osu!
2013-11-12 18:49 - 2013-11-12 18:49 - 00000885 _____ C:\Users\Public\Desktop\osu!.lnk
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 20:28 - 2013-11-10 20:06 - 00000000 ____D C:\Users\User\Documents\dragoon
2013-11-10 20:03 - 2012-06-04 19:56 - 01706264 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-10 19:59 - 2013-02-10 10:38 - 00000000 ____D C:\ProgramData\Package Cache
2013-11-10 14:31 - 2012-06-04 19:58 - 00000000 ____D C:\Users\User\Documents\My Games
2013-11-08 16:37 - 2013-02-17 16:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-08 16:37 - 2012-06-04 19:19 - 00000000 ____D C:\ProgramData\Skype
2013-11-01 17:03 - 2013-11-01 17:01 - 00000000 ____D C:\Users\User\AppData\Roaming\Audacity
2013-11-01 17:01 - 2013-11-01 17:01 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-11-01 17:01 - 2013-11-01 17:01 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-11-01 01:02 - 2013-11-01 01:02 - 00000000 ____D C:\Users\User\AppData\Local\fabi.me
2013-10-31 21:27 - 2013-10-31 20:10 - 00000000 ____D C:\Program Files (x86)\LOLReplay
2013-10-31 17:52 - 2012-06-05 19:08 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.4064.dll


Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-23 10:21

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---

//EDIT:Was genau hat eigentlich die verringerte Leistung ausgelöst?Würde mich interessieren was ich mir da genau gefangen habe und was es tut.
//EDIT//EDIT:Und was genau ist ein Rootkit?


Geändert von Mayler (28.11.2013 um 18:00 Uhr)

Alt 29.11.2013, 15:13   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Standard

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



Rootkit ? Wikipedia


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
--> Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.

Alt 29.11.2013, 23:16   #7
Mayler
 
Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Standard

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



So,hier also wiedermal die gewünschten Logs:

Das ESET-log:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1a84332b1a274f4e8621ac135a811a90
# engine=16081
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-11-29 09:59:14
# local_time=2013-11-29 10:59:14 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 14746 137392204 0 0
# scanned=278586
# found=3
# cleaned=0
# scan_time=6658
sh=16C8B78109D7950E3494FB3265325B9CAE5B87B6 ft=1 fh=2478213aaf05656c vn="probably unknown NewHeur_PE virus" ac=I fn="C:\Stormblade\updater.exe"
sh=8B274B098FA672941964D3495423475A4C2CF433 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.Agent.OJF trojan" ac=I fn="C:\Users\User\Documents\Zeug\mc-ZEUG\Paintball Mod Server Installer.jar"
sh=8A5385B7576787D880F7485D44CCF5F644D99D42 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.Agent.OJF trojan" ac=I fn="C:\Users\User\Documents\Zeug\mc-ZEUG\Flans zeug\Paintball Mod Client Installer.jar"
         
Dann noch die checkup.log:

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.76  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Ad-Aware Antivirus   
 Antivirus out of date! (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 JavaFX 2.1.1    
 Java 7 Update 45  
 Adobe Flash Player 11.9.900.117  
 Adobe Reader XI  
 Mozilla Firefox 5.0 Firefox out of Date!  
 Google Chrome 30.0.1599.101  
 Google Chrome 31.0.1650.57  
````````Process Check: objlist.exe by Laurent````````  
 Lavasoft Ad-Aware Antivirus Ad-Aware Antivirus 11.0.4555.0\AdAwareService.exe 
 Lavasoft Ad-Aware Antivirus Ad-Aware Antivirus 11.0.4555.0\AdAwareTray.exe 
 IObit IObit Malware Fighter IMFsrv.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Und eine weitere FRST:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-11-2013
Ran by User (administrator) on USER-PC on 29-11-2013 23:11:56
Running from C:\Users\User\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(xReva Software) C:\Program Files (x86)\xReva Software\xReva Remote\xReva Remote.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\User\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corp.) C:\Windows\System32\Defrag.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7288424 2011-08-15] (Realtek Semiconductor)
HKLM\...\Run: [SBRegRebootCleaner] - "C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe"
HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe [2493272 2013-10-18] ()
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Advanced SystemCare 7] - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2283808 2013-11-11] (IObit)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [RoccatIskuFX] - C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe [546656 2012-11-08] (ROCCAT GmbH)
HKLM-x32\...\Run: [ROCCAT Savu Gaming Mouse] - C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe [872048 2012-09-10] (ROCCAT GmbH)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [Aeria Ignite] - C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1572672 2013-11-19] (IObit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_sp_OC1
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC03FDE9FA766CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_ds_OC1&query={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_ie_ds_OC1&query={searchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.66.2.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default
FF Homepage: about:home|hxxp://www.giga.de/$22/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.4.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.4.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: Ads Removal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\adsremoval@adsremoval.net
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: Lavasoft Search Plugin - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a3o97mqw.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack

Chrome: 
=======
CHR HomePage: hxxp://google.com/
CHR RestoreOnStartup: "hxxp://www.google.de/", "hxxp://www.giga.de/$22/"
CHR DefaultSearchURL: (Amazon) - hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_cr_de_display?ie=UTF8&tag=bds-p18-serp-de-cr-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_110a8f7ecec745ac99bafe91ba81daed_18_38_20130117_DE_cr_ds_OC1&query={searchTerms}
CHR DefaultSuggestURL: (Amazon) - hxxp://suggestqueries.google.com/complete/search?q={searchTerms}&output=chrome
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\gcswf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Extension: (ProxTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.5_0
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (GFACE Experience Plugin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol\0.39.0_0
CHR Extension: (Assassin's Creed III) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\geadmffjboclimmeiaimcafapjaefnfn\1.4_0
CHR Extension: (Ads Removal) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkcefkcdkepgkpbgncjchhbjgoanleod\1.0.0_0
CHR Extension: (	"name":"Advanced SystemCare Surfing Protection",) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Lavasoft NewTab) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole\0.12_0
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)
R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe [517344 2013-10-18] ()
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-15] ()
S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-08] ()
R1 BdfNdisf; c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [93160 2013-07-17] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [102992 2013-07-17] (BitDefender LLC)
S3 bulkadi; C:\Windows\System32\DRIVERS\bulkrazer_x64.sys [25088 2011-02-09] (Windows (R) Codename Longhorn DDK provider)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-10-09] (GFI Software)
R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [138232 2013-07-17] (BitDefender LLC)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-01-26] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
R2 SecDrv; C:\Windows\SysWow64\drivers\SECDRV.SYS [163644 2013-11-26] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-11-13] (OpenLibSys.org)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 slb; \??\C:\AeriaGames\ScarletBlade\avital\scarlb64.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-29 23:09 - 2013-11-29 23:09 - 00891184 _____ C:\Users\User\Downloads\SecurityCheck.exe
2013-11-29 21:06 - 2013-11-29 21:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_enu.exe
2013-11-29 21:06 - 2013-11-29 21:06 - 00000000 ____D C:\Program Files (x86)\ESET
2013-11-28 16:35 - 2013-11-28 16:35 - 00004056 _____ C:\Users\User\Desktop\JRT.txt
2013-11-28 16:30 - 2013-11-28 16:30 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT (2).exe
2013-11-28 16:29 - 2013-11-28 16:29 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT (1).exe
2013-11-28 16:21 - 2013-11-28 16:21 - 00000000 ____D C:\Windows\ERUNT
2013-11-28 16:19 - 2013-11-28 16:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Malwarebytes
2013-11-28 16:18 - 2013-11-28 16:23 - 00000000 ____D C:\AdwCleaner
2013-11-28 16:17 - 2013-11-28 16:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-28 16:17 - 2013-11-28 16:17 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT.exe
2013-11-28 16:17 - 2013-11-28 16:17 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-28 16:17 - 2013-11-28 16:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-28 16:17 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-28 16:16 - 2013-11-28 16:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\User\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-28 16:16 - 2013-11-28 16:16 - 01091882 _____ C:\Users\User\Downloads\adwcleaner.exe
2013-11-28 16:13 - 2013-11-29 23:11 - 01959024 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2013-11-28 16:12 - 2013-11-28 16:12 - 00000000 _____ C:\Users\User\defogger_reenable
2013-11-27 17:59 - 2013-11-27 17:59 - 00000242 _____ C:\Users\User\Downloads\defogger_enable.log
2013-11-27 17:44 - 2013-11-27 17:44 - 00026661 _____ C:\ComboFix.txt
2013-11-27 17:36 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-27 17:36 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-27 17:36 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-27 17:36 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-27 17:33 - 2013-11-27 17:44 - 00000000 ____D C:\Qoobox
2013-11-27 17:33 - 2013-11-27 17:43 - 00000000 ____D C:\Windows\erdnt
2013-11-27 17:29 - 2013-11-27 17:29 - 05150163 ____R (Swearware) C:\Users\User\Downloads\ComboFix.exe
2013-11-26 22:30 - 2013-11-26 22:30 - 00163644 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\Windows\SysWOW64\Drivers\SECDRV.SYS
2013-11-26 22:24 - 2013-11-26 22:24 - 00005354 _____ C:\Users\User\Downloads\gmer.log
2013-11-26 22:15 - 2013-11-26 22:16 - 00097210 _____ C:\Users\User\Desktop\Bericht.txt
2013-11-26 22:15 - 2013-11-26 22:15 - 00000000 ____D C:\Users\User\Desktop\Neuer Ordner
2013-11-26 22:12 - 2013-11-26 22:29 - 00000864 _____ C:\Users\User\Desktop\GMER-ZEUG.txt
2013-11-26 22:12 - 2013-11-26 22:12 - 00377856 _____ C:\Users\User\Downloads\819rxiz1.exe
2013-11-26 22:05 - 2013-11-28 16:12 - 00000470 _____ C:\Users\User\Downloads\defogger_disable.log
2013-11-26 22:05 - 2013-11-26 22:05 - 00050477 _____ C:\Users\User\Downloads\Defogger.exe
2013-11-26 21:49 - 2013-11-26 21:50 - 00031026 _____ C:\Users\User\Downloads\Addition.txt
2013-11-26 21:48 - 2013-11-29 23:11 - 00018683 _____ C:\Users\User\Downloads\FRST.txt
2013-11-26 21:48 - 2013-11-26 21:48 - 00000000 ____D C:\FRST
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\IObit
2013-11-26 21:31 - 2013-11-28 16:10 - 00002209 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2013-11-26 21:31 - 2013-11-27 17:35 - 00003092 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2013-11-26 21:31 - 2013-11-26 21:33 - 00000000 ____D C:\Users\User\AppData\Roaming\IObit
2013-11-26 21:31 - 2013-11-26 21:31 - 00001217 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00001177 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\ProductData
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-11-26 21:28 - 2013-11-27 17:36 - 00007599 _____ C:\Users\User\AppData\Local\Resmon.ResmonCfg
2013-11-26 21:28 - 2013-11-26 21:30 - 34466768 _____ (IObit                                                       ) C:\Users\User\Downloads\asc-setup.exe
2013-11-26 21:28 - 2013-11-26 21:29 - 25095200 _____ (IObit                                                       ) C:\Users\User\Downloads\imf-setup.exe
2013-11-26 21:25 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\IObit
2013-11-26 21:25 - 2013-11-26 21:32 - 00000000 ____D C:\Program Files (x86)\IObit
2013-11-26 21:25 - 2013-11-26 21:25 - 00001186 _____ C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
2013-11-26 21:25 - 2013-11-26 21:25 - 00001174 _____ C:\Users\Public\Desktop\Game Booster 3.lnk
2013-11-26 21:21 - 2013-11-26 21:21 - 04869208 _____ (IObit                                                       ) C:\Users\User\Downloads\gb3-setup.exe
2013-11-26 21:13 - 2013-11-26 21:13 - 00000000 ____D C:\ProgramData\BitDefender
2013-11-26 21:05 - 2013-11-26 21:05 - 00000000 ____D C:\ProgramData\Oracle
2013-11-26 21:05 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-26 21:04 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-26 21:04 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-26 21:04 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-26 21:03 - 2013-11-26 21:04 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-11-26 21:02 - 2013-08-21 15:32 - 02084072 _____ (Bitdefender) C:\Windows\system32\bdnc.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 01061776 _____ (BitDefender S.R.L.) C:\Windows\system32\bdsmtpp.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00209984 _____ (BitDefender) C:\Windows\system32\BdFirewallSDK.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00195016 _____ (BitDefender) C:\Windows\system32\httproxy.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00156936 _____ C:\Windows\system32\bdfwcore.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00155912 _____ (BitDefender S.R.L.) C:\Windows\system32\bdpop3p.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00122928 _____ (BitDefender) C:\Windows\system32\OEMbdpredir.dll
2013-11-26 21:02 - 2013-07-17 18:09 - 00096160 _____ (BitDefender) C:\Windows\system32\bdpredir.dll
2013-11-26 20:59 - 2013-11-26 20:59 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-11-26 20:50 - 2013-11-26 20:50 - 01723528 _____ C:\Users\User\Downloads\Adaware_Installer.exe
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Mehrspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Einzelspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00000286 _____ C:\Windows\game.ini
2013-11-17 13:33 - 2013-11-17 13:33 - 00000000 ____D C:\Program Files (x86)\Activision
2013-11-16 19:00 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-16 18:58 - 2013-11-16 18:58 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 18:57 - 2013-11-16 19:00 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-15 19:41 - 2013-11-15 19:41 - 00080780 _____ C:\Users\User\Desktop\Alonian Launcher.exe
2013-11-14 17:56 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 17:56 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 17:56 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 17:56 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 17:56 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 17:56 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 17:56 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 17:56 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 17:56 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 17:56 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 17:56 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 17:56 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 17:56 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 17:56 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 17:56 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 17:56 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 17:56 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 17:56 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 17:56 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 17:56 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 17:56 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 17:56 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 17:56 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-14 17:55 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 17:55 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 17:55 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 17:55 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 17:55 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 17:55 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 17:55 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-12 18:49 - 2013-11-12 18:49 - 00000885 _____ C:\Users\Public\Desktop\osu!.lnk
2013-11-12 18:48 - 2013-11-12 20:51 - 00000000 ____D C:\Program Files (x86)\osu!
2013-11-10 20:06 - 2013-11-10 20:28 - 00000000 ____D C:\Users\User\Documents\dragoon
2013-11-01 17:01 - 2013-11-01 17:03 - 00000000 ____D C:\Users\User\AppData\Roaming\Audacity
2013-11-01 17:01 - 2013-11-01 17:01 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-11-01 17:01 - 2013-11-01 17:01 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-11-01 01:02 - 2013-11-01 01:02 - 00000000 ____D C:\Users\User\AppData\Local\fabi.me
2013-10-31 20:10 - 2013-10-31 21:27 - 00000000 ____D C:\Program Files (x86)\LOLReplay

==================== One Month Modified Files and Folders =======

2013-11-29 23:12 - 2013-11-26 21:48 - 00018683 _____ C:\Users\User\Downloads\FRST.txt
2013-11-29 23:11 - 2013-11-28 16:13 - 01959024 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2013-11-29 23:10 - 2012-06-14 16:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-29 23:09 - 2013-11-29 23:09 - 00891184 _____ C:\Users\User\Downloads\SecurityCheck.exe
2013-11-29 23:04 - 2012-06-04 19:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2013-11-29 22:59 - 2012-09-15 16:50 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-29 22:13 - 2012-06-01 09:35 - 01418865 _____ C:\Windows\WindowsUpdate.log
2013-11-29 21:06 - 2013-11-29 21:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_enu.exe
2013-11-29 21:06 - 2013-11-29 21:06 - 00000000 ____D C:\Program Files (x86)\ESET
2013-11-29 15:59 - 2012-09-15 16:50 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-29 15:54 - 2012-09-15 16:50 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-29 15:54 - 2012-09-15 16:50 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-29 15:30 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-29 15:30 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-29 15:24 - 2012-06-04 19:23 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-29 15:22 - 2012-06-01 09:53 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-29 15:22 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-29 15:22 - 2009-07-14 05:51 - 00099309 _____ C:\Windows\setupact.log
2013-11-28 16:35 - 2013-11-28 16:35 - 00004056 _____ C:\Users\User\Desktop\JRT.txt
2013-11-28 16:31 - 2011-04-12 08:43 - 00745318 _____ C:\Windows\system32\perfh007.dat
2013-11-28 16:31 - 2011-04-12 08:43 - 00164106 _____ C:\Windows\system32\perfc007.dat
2013-11-28 16:31 - 2009-07-14 06:13 - 01732920 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-28 16:30 - 2013-11-28 16:30 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT (2).exe
2013-11-28 16:29 - 2013-11-28 16:29 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT (1).exe
2013-11-28 16:24 - 2010-11-21 04:47 - 00489728 _____ C:\Windows\PFRO.log
2013-11-28 16:24 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-28 16:23 - 2013-11-28 16:18 - 00000000 ____D C:\AdwCleaner
2013-11-28 16:21 - 2013-11-28 16:21 - 00000000 ____D C:\Windows\ERUNT
2013-11-28 16:19 - 2013-11-28 16:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Malwarebytes
2013-11-28 16:18 - 2013-11-28 16:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-28 16:17 - 2013-11-28 16:17 - 01034531 _____ (Thisisu) C:\Users\User\Downloads\JRT.exe
2013-11-28 16:17 - 2013-11-28 16:17 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-28 16:17 - 2013-11-28 16:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-28 16:17 - 2013-11-28 16:16 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\User\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-28 16:16 - 2013-11-28 16:16 - 01091882 _____ C:\Users\User\Downloads\adwcleaner.exe
2013-11-28 16:12 - 2013-11-28 16:12 - 00000000 _____ C:\Users\User\defogger_reenable
2013-11-28 16:12 - 2013-11-26 22:05 - 00000470 _____ C:\Users\User\Downloads\defogger_disable.log
2013-11-28 16:10 - 2013-11-26 21:31 - 00002209 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2013-11-27 17:59 - 2013-11-27 17:59 - 00000242 _____ C:\Users\User\Downloads\defogger_enable.log
2013-11-27 17:44 - 2013-11-27 17:44 - 00026661 _____ C:\ComboFix.txt
2013-11-27 17:44 - 2013-11-27 17:33 - 00000000 ____D C:\Qoobox
2013-11-27 17:44 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-11-27 17:43 - 2013-11-27 17:33 - 00000000 ____D C:\Windows\erdnt
2013-11-27 17:43 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-11-27 17:36 - 2013-11-26 21:28 - 00007599 _____ C:\Users\User\AppData\Local\Resmon.ResmonCfg
2013-11-27 17:35 - 2013-11-26 21:31 - 00003092 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2013-11-27 17:29 - 2013-11-27 17:29 - 05150163 ____R (Swearware) C:\Users\User\Downloads\ComboFix.exe
2013-11-26 22:30 - 2013-11-26 22:30 - 00163644 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\Windows\SysWOW64\Drivers\SECDRV.SYS
2013-11-26 22:29 - 2013-11-26 22:12 - 00000864 _____ C:\Users\User\Desktop\GMER-ZEUG.txt
2013-11-26 22:24 - 2013-11-26 22:24 - 00005354 _____ C:\Users\User\Downloads\gmer.log
2013-11-26 22:16 - 2013-11-26 22:15 - 00097210 _____ C:\Users\User\Desktop\Bericht.txt
2013-11-26 22:15 - 2013-11-26 22:15 - 00000000 ____D C:\Users\User\Desktop\Neuer Ordner
2013-11-26 22:12 - 2013-11-26 22:12 - 00377856 _____ C:\Users\User\Downloads\819rxiz1.exe
2013-11-26 22:05 - 2013-11-26 22:05 - 00050477 _____ C:\Users\User\Downloads\Defogger.exe
2013-11-26 21:50 - 2013-11-26 21:49 - 00031026 _____ C:\Users\User\Downloads\Addition.txt
2013-11-26 21:48 - 2013-11-26 21:48 - 00000000 ____D C:\FRST
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\ProgramData\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-26 21:33 - 2013-11-26 21:33 - 00000000 ____D C:\IObit
2013-11-26 21:33 - 2013-11-26 21:31 - 00000000 ____D C:\Users\User\AppData\Roaming\IObit
2013-11-26 21:33 - 2013-11-26 21:25 - 00000000 ____D C:\ProgramData\IObit
2013-11-26 21:32 - 2013-11-26 21:25 - 00000000 ____D C:\Program Files (x86)\IObit
2013-11-26 21:31 - 2013-11-26 21:31 - 00001217 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00001177 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\ProductData
2013-11-26 21:31 - 2013-11-26 21:31 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-11-26 21:31 - 2012-06-09 22:30 - 00000000 ____D C:\Users\User\AppData\Roaming\Apple Computer
2013-11-26 21:30 - 2013-11-26 21:28 - 34466768 _____ (IObit                                                       ) C:\Users\User\Downloads\asc-setup.exe
2013-11-26 21:29 - 2013-11-26 21:28 - 25095200 _____ (IObit                                                       ) C:\Users\User\Downloads\imf-setup.exe
2013-11-26 21:25 - 2013-11-26 21:25 - 00001186 _____ C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
2013-11-26 21:25 - 2013-11-26 21:25 - 00001174 _____ C:\Users\Public\Desktop\Game Booster 3.lnk
2013-11-26 21:21 - 2013-11-26 21:21 - 04869208 _____ (IObit                                                       ) C:\Users\User\Downloads\gb3-setup.exe
2013-11-26 21:13 - 2013-11-26 21:13 - 00000000 ____D C:\ProgramData\BitDefender
2013-11-26 21:05 - 2013-11-26 21:05 - 00000000 ____D C:\ProgramData\Oracle
2013-11-26 21:04 - 2013-11-26 21:03 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-11-26 21:04 - 2013-06-24 16:22 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-26 21:01 - 2013-10-09 19:06 - 00001327 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2013-11-26 20:59 - 2013-11-26 20:59 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-26 20:54 - 2013-05-06 20:39 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Lavasoft
2013-11-26 20:52 - 2013-11-26 20:52 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-11-26 20:50 - 2013-11-26 20:50 - 01723528 _____ C:\Users\User\Downloads\Adaware_Installer.exe
2013-11-26 20:50 - 2013-10-09 19:06 - 00000000 ____D C:\ProgramData\Lavasoft
2013-11-25 22:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-25 20:35 - 2013-05-21 14:19 - 00000000 ____D C:\ProgramData\Origin
2013-11-25 20:04 - 2012-06-04 19:18 - 00063064 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 20:01 - 2013-10-26 21:51 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-25 20:01 - 2013-09-29 07:30 - 00000000 ____D C:\Fraps
2013-11-25 20:01 - 2013-01-19 11:01 - 00000000 ____D C:\Users\DefaultAppPool
2013-11-25 20:01 - 2012-07-15 18:58 - 00000000 ____D C:\Users\User\AppData\Local\Akamai
2013-11-25 20:01 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-25 20:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-25 18:40 - 2013-10-26 16:35 - 00000000 ____D C:\WoW
2013-11-25 18:39 - 2013-08-08 00:53 - 00000000 ____D C:\Program Files (x86)\Infinity Fiesta
2013-11-25 18:35 - 2013-10-09 19:06 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-11-24 00:30 - 2013-10-24 20:09 - 00000000 ____D C:\Users\User\AppData\Local\Battle.net
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Mehrspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00001886 _____ C:\Users\Public\Desktop\Call of Duty(R) 2 - Einzelspieler.lnk
2013-11-17 13:37 - 2013-11-17 13:37 - 00000286 _____ C:\Windows\game.ini
2013-11-17 13:37 - 2012-06-01 09:42 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-17 13:33 - 2013-11-17 13:33 - 00000000 ____D C:\Program Files (x86)\Activision
2013-11-17 00:54 - 2013-04-19 13:22 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic
2013-11-17 00:52 - 2012-11-23 22:41 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2013-11-16 21:34 - 2013-10-24 20:08 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-11-16 20:54 - 2012-06-01 09:36 - 00001425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-16 20:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-16 19:00 - 2013-11-16 18:57 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-16 18:58 - 2013-11-16 18:58 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 18:58 - 2013-11-16 18:58 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 18:58 - 2013-11-16 18:58 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 18:58 - 2013-11-16 18:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 18:58 - 2013-11-16 18:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 18:58 - 2013-11-16 18:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 18:58 - 2013-11-16 18:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 18:58 - 2013-11-16 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 11:07 - 2013-04-19 13:22 - 02300919 _____ () C:\Users\User\Desktop\TechnicLauncher.exe
2013-11-15 19:41 - 2013-11-15 19:41 - 00080780 _____ C:\Users\User\Desktop\Alonian Launcher.exe
2013-11-15 19:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-14 22:28 - 2013-08-14 13:19 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 22:27 - 2012-06-04 19:29 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 20:49 - 2013-09-28 19:52 - 00000000 ____D C:\overwulf_musik
2013-11-12 20:51 - 2013-11-12 18:48 - 00000000 ____D C:\Program Files (x86)\osu!
2013-11-12 18:49 - 2013-11-12 18:49 - 00000885 _____ C:\Users\Public\Desktop\osu!.lnk
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 20:28 - 2013-11-10 20:06 - 00000000 ____D C:\Users\User\Documents\dragoon
2013-11-10 20:03 - 2012-06-04 19:56 - 01706264 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-10 19:59 - 2013-02-10 10:38 - 00000000 ____D C:\ProgramData\Package Cache
2013-11-10 14:31 - 2012-06-04 19:58 - 00000000 ____D C:\Users\User\Documents\My Games
2013-11-08 16:37 - 2013-02-17 16:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-08 16:37 - 2012-06-04 19:19 - 00000000 ____D C:\ProgramData\Skype
2013-11-01 17:03 - 2013-11-01 17:01 - 00000000 ____D C:\Users\User\AppData\Roaming\Audacity
2013-11-01 17:01 - 2013-11-01 17:01 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-11-01 17:01 - 2013-11-01 17:01 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-11-01 01:02 - 2013-11-01 01:02 - 00000000 ____D C:\Users\User\AppData\Local\fabi.me
2013-10-31 21:27 - 2013-10-31 20:10 - 00000000 ____D C:\Program Files (x86)\LOLReplay
2013-10-31 17:52 - 2012-06-05 19:08 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.4064.dll


Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-23 10:21

==================== End Of Log ============================
         
--- --- ---

Alt 01.12.2013, 09:59   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Standard

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



Sorry für die Verspätung, liege flach mit Grippe.


Funde von ESET manuell löschen.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 01.12.2013, 18:32   #9
Mayler
 
Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Beitrag

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



So,habe besagte Schritte befolgt und stehe hier nun mit neuen Logs!

Fixlog von FRST

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-12-2013
Ran by User at 2013-12-01 18:19:50 Run:1
Running from C:\Users\User\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]
*****************

X6va008 => Service deleted successfully.
X6va009 => Service deleted successfully.
X6va011 => Service deleted successfully.
X6va015 => Service deleted successfully.
xhunter1 => Service deleted successfully.

==== End of Fixlog ====
         
und noch das DelFix-log (kann ja sein,dass das wichtig ist )

Code:
ATTFilter
# DelFix v10.6 - Datei am 01/12/2013 um 18:25:55 erstellt
# Aktualisiert am 11/11/2013 von Xplode
# Benutzer : User - USER-PC
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Aktiviere die Benutzerkontensteuerung ... OK

~ Entferne die Bereinigungsprogramme ...

Gelöscht : C:\FRST
Gelöscht : C:\AdwCleaner
Gelöscht : C:\ComboFix.txt
Gelöscht : C:\Users\User\Desktop\Fixlog.txt
Gelöscht : C:\Users\User\Desktop\FRST64.exe
Gelöscht : C:\Users\User\Downloads\Addition.txt
Gelöscht : C:\Users\User\Downloads\adwcleaner.exe
Gelöscht : C:\Users\User\Downloads\Defogger.exe
Gelöscht : C:\Users\User\Downloads\defogger_disable.log
Gelöscht : C:\Users\User\Downloads\defogger_enable.log
Gelöscht : C:\Users\User\Downloads\esetsmartinstaller_enu.exe
Gelöscht : C:\Users\User\Downloads\FRST.exe
Gelöscht : C:\Users\User\Downloads\FRST.txt
Gelöscht : C:\Users\User\Downloads\JRT (1).exe
Gelöscht : C:\Users\User\Downloads\JRT (2).exe
Gelöscht : C:\Users\User\Downloads\JRT.exe
Gelöscht : C:\Users\User\Downloads\SecurityCheck.exe
Gelöscht : HKLM\SOFTWARE\AdwCleaner
Gelöscht : HKLM\SOFTWARE\Swearware

~ Erstelle ein Backup der Registrierungsdatenbank ... OK

~ Lösche die Wiederherstellungspunkte ...

Gelöscht : RP #237 [ComboFix created restore point | 12/01/2013 17:23:23]

Ein neuer Wiederherstellungspunkt wurde erstellt !

~ Stelle die Systemeinstellungen wieder her ... OK

########## - EOF - ##########
         

---------
Danke für die Bearbeitung meines Problems,wünsche noch schöne Tage
Und an schrauber,Gute Besserung



Mit freundlichen Grüßen abdankend,
Mayler

Alt 02.12.2013, 11:31   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Standard

Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.



Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.
ad-aware, adblock, akamai, antivirus, bonjour, browser, checkliste, converter, error, failed, flash player, google, home, homepage, installation, keygen, malware, mozilla, mp3, newtab, realtek, registry, scan, security, services.exe, software, spielen, system, usb, vcredist



Ähnliche Themen: Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich.


  1. Internet nur eingeschränkt möglich dns antwortet nicht
    Plagegeister aller Art und deren Bekämpfung - 02.08.2015 (6)
  2. ZEOK.exe als Malware durch AVAST erkannt. Download nicht möglich
    Plagegeister aller Art und deren Bekämpfung - 28.11.2014 (27)
  3. Browser langsam, Internet stark beeinträchtigt, Spiele/streams nicht möglich
    Plagegeister aller Art und deren Bekämpfung - 27.05.2014 (1)
  4. Nach Befall von GVU-Trojaner: Windows nur noch eingeschränkt möglich.
    Plagegeister aller Art und deren Bekämpfung - 11.07.2013 (28)
  5. Virus: Updates nicht möglich und Installation von Malwarebytes Anti-Malware 1.70 nicht möglich
    Plagegeister aller Art und deren Bekämpfung - 17.02.2013 (10)
  6. Verschlüsselung Trojaner - Anti-Malware und Logfile nicht möglich
    Log-Analyse und Auswertung - 09.07.2012 (9)
  7. GVU/BKA Malware auf XP - Kein Rescue Disk möglich durch Festplattenverschlüsselung
    Log-Analyse und Auswertung - 09.07.2012 (1)
  8. BKA Trojaner Malware, Zugriff auf PC möglich nicht auf Taskmanager
    Plagegeister aller Art und deren Bekämpfung - 08.01.2012 (3)
  9. [BKA Trojaner Malware] Zugriff auf PC möglich aber kein Taskmanager
    Plagegeister aller Art und deren Bekämpfung - 16.12.2011 (8)
  10. Suchfunktion in Windows 7 nur eingeschränkt möglich....
    Alles rund um Windows - 27.12.2010 (1)
  11. Malware Angriff, Beseitigung nicht möglich
    Plagegeister aller Art und deren Bekämpfung - 09.12.2010 (15)
  12. Trojaner/Malware? Google Suchanfrage und antivir update nicht möglich
    Log-Analyse und Auswertung - 01.07.2008 (9)
  13. Super Eingeschränkt !
    Alles rund um Windows - 20.12.2005 (13)
  14. Hilfe!!!! Malware Befall und HT nicht möglich
    Plagegeister aller Art und deren Bekämpfung - 09.06.2005 (1)
  15. Websitenzugriff per DSL eingeschränkt
    Plagegeister aller Art und deren Bekämpfung - 17.10.2004 (3)
  16. IE-Probleme - Zusammenhang mit CWS?
    Plagegeister aller Art und deren Bekämpfung - 24.02.2004 (3)
  17. Downloadrate stark gesunken! Zusammenhang mit Trojanern?
    Plagegeister aller Art und deren Bekämpfung - 23.02.2004 (12)

Zum Thema Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. - Sehr geehrte Damen und Herren, vor wenigen Tagen versuchte ich,mir eines der Spiele aus der Battlefield-Reihe durch Keygen illegal herunterzuladen.Allerdings funktionierte heruntergeladener Keygen nicht (wie erwartet). Also warf ich die - Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich....
Archiv
Du betrachtest: Computergeschwindigkeit stark eingeschränkt.Zusammenhang mit Malware möglich. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.