ESET meldet spy.zbot.aao trojaner

-Cyberwolf- · 01.12.2013, 14:07

Hallo liebe Trojaner-Board-community. Ich heiße Tom, bin neu hier und (wer hätte es gedacht) ersuche euren fachlichen Rat.

Heute morgen meldet mir mein ESET wie im Titel schon zu erkennen die folgende Bedrohung: spy.zbot.aao trojaner.
Darauf hin hat mein Brower jeglichen Zugriff auf die ESET Hauptseite und den Download von Malwarebytes unterbunden. Habe es aber dann letztendlich dann doch geschafft Malwarebytes zu installieren, auszuführen und einen scan zu starten.

Hier die Log-Datei des ersten scans:

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.01.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
Tom :: TOM-PC [Administrator]

Schutz: Aktiviert

01.12.2013 12:27:12
mbam-log-2013-12-01 (12-27-12).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 416787
Laufzeit: 15 Minute(n), 15 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 2
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 5
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=110c5d0b-ad90-4f41-a0c7-ee8df02ffe63&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit) -> Bösartig: (hxxp://search.conduit.com?SearchSource=10&ctid=CT2653012&UP=SP5DFC5560-3CE9-4B41-825F-A3C969714910) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=110c5d0b-ad90-4f41-a0c7-ee8df02ffe63&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=110c5d0b-ad90-4f41-a0c7-ee8df02ffe63&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=110c5d0b-ad90-4f41-a0c7-ee8df02ffe63&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 5
C:\Users\Tom\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Roaming\OpenCandy\06196DB7E00D4C05AFD6AAAF4963C5F2 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Roaming\OpenCandy\252B93005FE9420EAAA1149AF2C88242 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Roaming\OpenCandy\OpenCandy_06196DB7E00D4C05AFD6AAAF4963C5F2 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Roaming\OpenCandy\OpenCandy_252B93005FE9420EAAA1149AF2C88242 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 12
C:\Users\Tom\AppData\Local\Conduit\CT1060933\FreecorderAutoUpdateHelper.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WNS4306I\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WNS4306I\spstub[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Local\Temp\nsb90BF.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Local\Temp\nsl4255.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Local\Temp\nsqFF1B.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Local\Temp\nsw410D.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Local\Temp\nsw74.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Roaming\OpenCandy\06196DB7E00D4C05AFD6AAAF4963C5F2\2787.ico (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Roaming\OpenCandy\06196DB7E00D4C05AFD6AAAF4963C5F2\EBB77268-338F-4C6A-8590-AD88FED26F4A (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Roaming\OpenCandy\06196DB7E00D4C05AFD6AAAF4963C5F2\OCBrowserHelper_1.0.3.85.dll (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tom\AppData\Roaming\OpenCandy\252B93005FE9420EAAA1149AF2C88242\TuneUpUtilities2012_de-DE_1002175.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Darauf hin habe ich einfach einmal alle Prozesse markiert und in die Quarantäne verschoben. Einen Systemneustart durchgeführt und dann einen 2. scan gemacht:

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.01.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
Tom :: TOM-PC [Administrator]

Schutz: Aktiviert

01.12.2013 12:54:48
mbam-log-2013-12-01 (12-54-48).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 416628
Laufzeit: 14 Minute(n), 28 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

So. Nun zu FRST welches ich auch einmal runtergeladen und einen scan gestartet habe.
FRST zeigt folgendes:

FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2013
Ran by Tom (administrator) on TOM-PC on 01-12-2013 13:44:57
Running from C:\Users\Tom\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(AVM Berlin) C:\Program Files\FRITZ!DSL\IGDCTRL.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Palit Microsystems Ltd.) C:\Program Files (x86)\Thunder Master\THPanel.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Applian Technologies, Inc.) C:\Program Files (x86)\Freecorder\FLVSrvc.exe
(Dropbox, Inc.) C:\Users\Tom\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(AVM Berlin) C:\Program Files\FRITZ!DSL\StCenter.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [6330568 2013-03-21] (ESET)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Winlogon: [Userinit] C:\Windows\sysWOW64\userinit.exe [26624 2010-11-21] (Microsoft Corporation)
HKCU\...\Run: [THPanel] - C:\Program Files (x86)\Thunder Master\THPanel.exe [2050416 2012-07-13] (Palit Microsystems Ltd.)
MountPoints2: {12261c0e-17df-11e3-92e7-246511c3050f} - D:\pushinst.exe
MountPoints2: {2cc0786a-6ce4-11e1-9052-806e6f6e6963} - D:\Start.exe
MountPoints2: {34ea92f8-b3ef-11e2-a963-002522f4b380} - SETUP.EXE
HKLM-x32\...\Run: [Freecorder FLV Service] - C:\Program Files (x86)\Freecorder\FLVSrvc.exe [167936 2011-03-24] (Applian Technologies, Inc.)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe [241789 2009-07-07] (Creative Technology Ltd)
HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [24576 2011-08-11] (Creative Technology Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296 2012-01-17] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe [2105344 2010-10-22] (AVM Berlin)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Tom\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk
ShortcutTarget: FRITZ!DSL Startcenter.lnk -> C:\Users\Tom\AppData\Roaming\Microsoft\Installer\{2D5D9603-22CF-4B99-83F6-0CD20330F62E}\Icon8CF9C550.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xAF857700320BCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
URLSearchHook: HKLM-x32 - Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll No File
URLSearchHook: HKCU - (No Name) - {cd90bf73-20f6-44ef-993d-bb920303bd2e} - No File
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=110c5d0b-ad90-4f41-a0c7-ee8df02ffe63&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=110c5d0b-ad90-4f41-a0c7-ee8df02ffe63&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP5DFC5560-3CE9-4B41-825F-A3C969714910&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=110c5d0b-ad90-4f41-a0c7-ee8df02ffe63&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP5DFC5560-3CE9-4B41-825F-A3C969714910&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll No File
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {1392B8D2-5C05-419F-A8F6-B9F15A596612} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\3x5ksjcw.default
FF SelectedSearchEngine: Conduit Search
FF Homepage: chrome://speeddial/content/speeddial.xul
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @idsoftware.com/QuakeLive - C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.5.1 - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\3x5ksjcw.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\3x5ksjcw.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\3x5ksjcw.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Freecorder Community Toolbar - C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\3x5ksjcw.default\Extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
FF Extension: DownloadHelper - C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\3x5ksjcw.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: speeddial - C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\3x5ksjcw.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
FF Extension: noscript - C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\3x5ksjcw.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

==================== Services (Whitelisted) =================

R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1341664 2013-03-21] (ESET)
R2 IGDCTRL; C:\Program Files\FRITZ!DSL\IGDCTRL.EXE [88888 2009-07-28] (AVM Berlin)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-04-12] ()

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-01-04] ()
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [213416 2013-02-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [150616 2013-01-10] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [139768 2013-01-10] (ESET)
R3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-22] (AVM GmbH)
S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-01-04] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation)
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [x]
S3 cpuz136; \??\C:\Users\Tom\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-01 13:44 - 2013-12-01 13:45 - 00016735 _____ C:\Users\Tom\Desktop\FRST.txt
2013-12-01 13:44 - 2013-12-01 13:44 - 00000000 ____D C:\FRST
2013-12-01 12:59 - 2013-12-01 12:59 - 01959184 _____ (Farbar) C:\Users\Tom\Desktop\FRST64.exe
2013-12-01 12:26 - 2013-12-01 12:26 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-01 12:26 - 2013-12-01 12:26 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Malwarebytes
2013-12-01 12:26 - 2013-12-01 12:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-01 12:26 - 2013-12-01 12:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-01 12:26 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-01 12:25 - 2013-12-01 12:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tom\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-01 12:05 - 2013-12-01 12:06 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Qutob
2013-12-01 12:05 - 2013-12-01 12:06 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Kaxo
2013-12-01 12:05 - 2013-12-01 12:05 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Goah
2013-11-28 16:32 - 2013-11-28 16:33 - 00000000 ____D C:\Users\Tom\Desktop\xampp
2013-11-28 16:29 - 2013-11-28 16:31 - 92161976 _____ C:\Users\Tom\Desktop\xampp-win32-1.8.2-2-VC9.7z
2013-11-28 16:14 - 2013-11-28 16:14 - 03277648 _____ (Microsoft Corporation) C:\Users\Tom\Desktop\vcRaute_web.exe
2013-11-28 03:03 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-28 03:01 - 2013-11-28 03:01 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-28 03:01 - 2013-11-28 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-28 03:01 - 2013-11-28 03:01 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-28 03:01 - 2013-11-28 03:01 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-28 03:01 - 2013-11-28 03:01 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-28 03:01 - 2013-11-28 03:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 03:01 - 2013-11-28 03:01 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 03:01 - 2013-11-28 03:01 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-28 03:01 - 2013-11-28 03:01 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 03:01 - 2013-11-28 03:01 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-28 03:01 - 2013-11-28 03:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-28 03:00 - 2013-11-28 03:03 - 00012105 _____ C:\Windows\IE11_main.log
2013-11-28 03:00 - 2013-11-28 03:00 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-11-28 03:00 - 2013-11-28 03:00 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-11-25 10:53 - 2013-11-25 11:12 - 82562255 _____ C:\Users\Tom\Desktop\Bella_pepper_giant_buttplug_anal_fisting_and_anal_prolapse.mp4
2013-11-20 18:40 - 2013-11-14 12:57 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-20 18:40 - 2013-11-14 12:57 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-20 18:39 - 2013-11-20 18:39 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-20 18:39 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-20 18:39 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-20 18:37 - 2013-11-20 18:37 - 00000000 ____D C:\NVIDIA
2013-11-20 18:37 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-11-20 18:37 - 2013-11-14 12:57 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-11-20 18:37 - 2013-11-14 12:57 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-11-20 18:37 - 2013-11-14 12:57 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-11-20 18:37 - 2013-11-14 12:57 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-11-20 18:37 - 2013-11-14 12:57 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-20 18:37 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-20 18:37 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-20 18:33 - 2013-11-20 18:36 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tom\Desktop\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-11-18 22:29 - 2013-11-19 11:22 - 01589618 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-18 22:26 - 2013-11-18 22:26 - 00000000 ____D C:\ProgramData\Package Cache
2013-11-18 22:01 - 2013-11-18 22:01 - 00000202 _____ C:\Users\Tom\Desktop\Call of Duty Ghosts - Multiplayer.url
2013-11-18 03:22 - 2013-11-20 04:43 - 00000092 _____ C:\Users\Tom\Desktop\Neues Textdokument.txt
2013-11-13 14:42 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 14:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 14:42 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 14:42 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 14:42 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 14:42 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 14:42 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 14:42 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 14:42 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 14:42 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 14:42 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 14:42 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 14:42 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 14:42 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 14:42 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 14:42 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 14:11 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 13:59 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 13:59 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 13:58 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 13:58 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 13:58 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 13:58 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 13:58 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-12 22:54 - 2013-11-12 22:55 - 134779090 _____ C:\Users\Tom\Desktop\2006-08-24-sat1_akte06-ec_karten.ogg
2013-11-12 22:54 - 2013-11-12 22:54 - 04763268 _____ C:\Users\Tom\Desktop\1984-12-28-tagesschau-congress_1984.mp4
2013-11-11 15:37 - 2013-11-11 16:23 - 00000000 ____D C:\Users\Tom\Desktop\Tutorial
2013-11-11 15:18 - 2013-11-13 06:24 - 00000000 ____D C:\Users\Tom\Desktop\Neu2
2013-11-11 14:15 - 2013-11-11 16:23 - 00000000 ____D C:\Users\Tom\Desktop\MeinProjekt
2013-11-11 14:14 - 2013-11-13 06:24 - 00000000 ____D C:\Users\Tom\AppData\Roaming\CodeBlocks
2013-11-11 14:04 - 2013-11-11 14:04 - 00001091 _____ C:\Users\Tom\Desktop\CodeBlocks.lnk
2013-11-11 14:04 - 2013-11-11 14:04 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2013-11-11 14:04 - 2013-11-11 14:04 - 00000000 ____D C:\Program Files (x86)\CodeBlocks
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-07 19:53 - 2013-11-11 13:44 - 100600973 _____ (The Code::Blocks Team) C:\Users\Tom\Desktop\codeblocks-12.11mingw-setup.exe
2013-11-04 21:13 - 2013-11-04 22:47 - 00000000 ____D C:\Users\Tom\AppData\Local\ESN Sonar

==================== One Month Modified Files and Folders =======

2013-12-01 13:45 - 2013-12-01 13:44 - 00016735 _____ C:\Users\Tom\Desktop\FRST.txt
2013-12-01 13:44 - 2013-12-01 13:44 - 00000000 ____D C:\FRST
2013-12-01 13:37 - 2012-06-11 18:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-01 13:31 - 2013-10-13 23:03 - 00000000 ___RD C:\Users\Tom\Dropbox
2013-12-01 13:31 - 2013-10-13 23:01 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Dropbox
2013-12-01 13:04 - 2011-12-28 12:33 - 01772210 _____ C:\Windows\WindowsUpdate.log
2013-12-01 12:59 - 2013-12-01 12:59 - 01959184 _____ (Farbar) C:\Users\Tom\Desktop\FRST64.exe
2013-12-01 12:52 - 2011-04-12 08:43 - 00696832 _____ C:\Windows\system32\perfh007.dat
2013-12-01 12:52 - 2011-04-12 08:43 - 00148128 _____ C:\Windows\system32\perfc007.dat
2013-12-01 12:52 - 2009-07-14 06:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-01 12:52 - 2009-07-14 05:45 - 00028720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-01 12:52 - 2009-07-14 05:45 - 00028720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-01 12:46 - 2013-10-24 05:47 - 00000000 ____D C:\Users\Tom\AppData\Local\TSVNCache
2013-12-01 12:46 - 2012-01-03 22:53 - 02178770 _____ C:\Users\Tom\DesktopStCenter.txt
2013-12-01 12:45 - 2013-05-03 21:53 - 00039213 _____ C:\Windows\setupact.log
2013-12-01 12:45 - 2011-12-28 13:06 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-01 12:45 - 2010-11-21 04:47 - 00161544 _____ C:\Windows\PFRO.log
2013-12-01 12:45 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-01 12:38 - 2011-12-28 15:10 - 00000000 ____D C:\Users\Tom\AppData\Local\FLVService
2013-12-01 12:26 - 2013-12-01 12:26 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-01 12:26 - 2013-12-01 12:26 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Malwarebytes
2013-12-01 12:26 - 2013-12-01 12:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-01 12:26 - 2013-12-01 12:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-01 12:25 - 2013-12-01 12:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tom\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-01 12:06 - 2013-12-01 12:05 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Qutob
2013-12-01 12:06 - 2013-12-01 12:05 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Kaxo
2013-12-01 12:05 - 2013-12-01 12:05 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Goah
2013-11-30 23:11 - 2012-01-04 00:22 - 00000000 ____D C:\Users\Tom\AppData\Roaming\uTorrent
2013-11-28 16:33 - 2013-11-28 16:32 - 00000000 ____D C:\Users\Tom\Desktop\xampp
2013-11-28 16:31 - 2013-11-28 16:29 - 92161976 _____ C:\Users\Tom\Desktop\xampp-win32-1.8.2-2-VC9.7z
2013-11-28 16:14 - 2013-11-28 16:14 - 03277648 _____ (Microsoft Corporation) C:\Users\Tom\Desktop\vcRaute_web.exe
2013-11-28 09:54 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-28 03:19 - 2011-12-28 12:33 - 00001421 _____ C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-28 03:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-28 03:03 - 2013-11-28 03:00 - 00012105 _____ C:\Windows\IE11_main.log
2013-11-28 03:01 - 2013-11-28 03:01 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-28 03:01 - 2013-11-28 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-28 03:01 - 2013-11-28 03:01 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-28 03:01 - 2013-11-28 03:01 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-28 03:01 - 2013-11-28 03:01 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-28 03:01 - 2013-11-28 03:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 03:01 - 2013-11-28 03:01 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 03:01 - 2013-11-28 03:01 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-28 03:01 - 2013-11-28 03:01 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 03:01 - 2013-11-28 03:01 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-28 03:01 - 2013-11-28 03:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-28 03:01 - 2013-11-28 03:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-28 03:01 - 2013-11-28 03:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-11-28 03:00 - 2013-11-28 03:00 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-11-28 03:00 - 2013-11-28 03:00 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-11-28 03:00 - 2013-11-28 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-11-26 22:15 - 2011-12-29 18:36 - 00000000 ____D C:\Users\Tom\AppData\Local\Skyrim
2013-11-25 11:12 - 2013-11-25 10:53 - 82562255 _____ C:\Users\Tom\Desktop\Bella_pepper_giant_buttplug_anal_fisting_and_anal_prolapse.mp4
2013-11-20 18:40 - 2012-09-05 20:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-20 18:40 - 2012-09-05 20:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-20 18:40 - 2012-09-05 20:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-20 18:39 - 2013-11-20 18:39 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-11-20 18:39 - 2013-11-20 18:39 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-20 18:37 - 2013-11-20 18:37 - 00000000 ____D C:\NVIDIA
2013-11-20 18:36 - 2013-11-20 18:33 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tom\Desktop\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-11-20 04:43 - 2013-11-18 03:22 - 00000092 _____ C:\Users\Tom\Desktop\Neues Textdokument.txt
2013-11-19 11:22 - 2013-11-18 22:29 - 01589618 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-18 22:26 - 2013-11-18 22:26 - 00000000 ____D C:\ProgramData\Package Cache
2013-11-18 22:26 - 2011-12-28 16:40 - 00842964 _____ C:\Windows\DirectX.log
2013-11-18 22:01 - 2013-11-18 22:01 - 00000202 _____ C:\Users\Tom\Desktop\Call of Duty Ghosts - Multiplayer.url
2013-11-18 15:59 - 2011-12-28 20:18 - 00000000 ____D C:\Users\Tom\AppData\Local\Nero
2013-11-18 04:01 - 2011-12-28 20:29 - 00000000 ____D C:\Users\Tom\AppData\Roaming\vlc
2013-11-14 12:57 - 2013-11-20 18:40 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-14 12:57 - 2013-11-20 18:40 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-14 12:57 - 2013-11-20 18:37 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-11-14 12:57 - 2013-11-20 18:37 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-11-14 12:57 - 2013-11-20 18:37 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-11-14 12:57 - 2013-11-20 18:37 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-11-14 12:57 - 2013-11-20 18:37 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-11-14 12:57 - 2013-11-20 18:37 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-20 18:37 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-20 18:37 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-14 12:56 - 2013-02-25 16:57 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-14 12:56 - 2012-10-10 21:23 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2012-10-10 21:23 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2012-10-10 21:23 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-14 12:56 - 2012-10-10 21:22 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2012-10-10 21:22 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2012-09-05 20:06 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-14 12:56 - 2012-09-05 20:06 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-14 12:56 - 2012-09-05 20:06 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-14 12:56 - 2012-09-05 20:06 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-14 12:56 - 2012-09-05 20:06 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-14 05:07 - 2013-04-07 15:10 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-11-14 05:07 - 2012-06-11 10:59 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-11-14 05:07 - 2012-06-11 10:59 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-11-14 03:01 - 2013-08-14 22:06 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 03:00 - 2011-12-29 14:10 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 06:24 - 2013-11-11 15:18 - 00000000 ____D C:\Users\Tom\Desktop\Neu2
2013-11-13 06:24 - 2013-11-11 14:14 - 00000000 ____D C:\Users\Tom\AppData\Roaming\CodeBlocks
2013-11-12 22:55 - 2013-11-12 22:54 - 134779090 _____ C:\Users\Tom\Desktop\2006-08-24-sat1_akte06-ec_karten.ogg
2013-11-12 22:54 - 2013-11-12 22:54 - 04763268 _____ C:\Users\Tom\Desktop\1984-12-28-tagesschau-congress_1984.mp4
2013-11-11 16:23 - 2013-11-11 15:37 - 00000000 ____D C:\Users\Tom\Desktop\Tutorial
2013-11-11 16:23 - 2013-11-11 14:15 - 00000000 ____D C:\Users\Tom\Desktop\MeinProjekt
2013-11-11 16:02 - 2012-09-05 20:06 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2012-09-05 20:06 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2012-09-05 20:06 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2013-11-11 16:01 - 2012-09-05 20:06 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2012-09-05 20:06 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2012-09-05 20:06 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2012-09-05 20:06 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 14:04 - 2013-11-11 14:04 - 00001091 _____ C:\Users\Tom\Desktop\CodeBlocks.lnk
2013-11-11 14:04 - 2013-11-11 14:04 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2013-11-11 14:04 - 2013-11-11 14:04 - 00000000 ____D C:\Program Files (x86)\CodeBlocks
2013-11-11 13:44 - 2013-11-07 19:53 - 100600973 _____ (The Code::Blocks Team) C:\Users\Tom\Desktop\codeblocks-12.11mingw-setup.exe
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 18:35 - 2011-12-28 15:10 - 00000000 ____D C:\Program Files (x86)\Freecorder
2013-11-04 22:47 - 2013-11-04 21:13 - 00000000 ____D C:\Users\Tom\AppData\Local\ESN Sonar
2013-11-03 15:37 - 2013-10-30 13:04 - 00000000 ____D C:\Program Files (x86)\eclipse
2013-11-03 15:37 - 2013-01-17 12:36 - 00000000 ____D C:\Users\Tom\AppData\Local\Eclipse
2013-11-02 20:41 - 2013-10-13 23:02 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-11-02 20:41 - 2011-12-28 12:33 - 00000000 ___RD C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Some content of TEMP:
====================
C:\Users\Tom\AppData\Local\Temp\AutoRun.exe
C:\Users\Tom\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Tom\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Tom\AppData\Local\Temp\drm_dyndata_7410004.dll
C:\Users\Tom\AppData\Local\Temp\eauninstall.exe
C:\Users\Tom\AppData\Local\Temp\Nexus%20Mod%20Manager-0.44.11.exe
C:\Users\Tom\AppData\Local\Temp\Nexus%20Mod%20Manager-0.45.1.exe
C:\Users\Tom\AppData\Local\Temp\Nexus%20Mod%20Manager-0.45.6.exe
C:\Users\Tom\AppData\Local\Temp\nvStInst.exe
C:\Users\Tom\AppData\Local\Temp\SimCity 4 Deluxe_uninst.exe
C:\Users\Tom\AppData\Local\Temp\sonarinst.exe
C:\Users\Tom\AppData\Local\Temp\utt4211.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-30 03:31

==================== End Of Log ============================

--- --- ---

Dann noch die Audition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2013
Ran by Tom at 2013-12-01 13:45:26
Running from C:\Users\Tom\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET NOD32 Antivirus 6.0 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET NOD32 Antivirus 6.0 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

µTorrent (HKCU Version: 3.3.2.30303)
64 Bit HP CIO Components Installer (Version: 6.2.1)
7-Zip 9.20 (x32)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader X (10.1.1) - Deutsch (x32 Version: 10.1.1)
AutoMode Switcher (x32 Version: 1.00)
AVM FRITZ!WLAN (x32)
Battlefield 3™ (x32 Version: 1.6.0.0)
Battlelog Web Plugins (x32 Version: 2.3.0)
Blake Stone Aliens of Gold (x32)
Blake Stone Planet Strike (x32)
BSC Cleanitol TM NAM Version (HKCU)
Call of Duty: Black Ops II - Multiplayer (x32)
Call of Duty: Black Ops II - Zombies (x32)
Call of Duty: Black Ops II (x32)
Call of Duty: Ghosts - Multiplayer (x32)
CodeBlocks (HKCU Version: 12.11)
Colossus Addon Mod 1.0 (x32 Version: 1.0)
Counter-Strike: Global Offensive (x32)
CPUID CPU-Z 1.59
Creative ALchemy (x32 Version: 1.43)
Creative Audio-Systemsteuerung (x32 Version: 3.00)
Creative Konsole Starter (x32 Version: 2.61)
Creative Lautsprecher-Einrichtungskonsole (x32 Version: 3.50)
Creative Sound Blaster Properties x64 Edition (x32 Version: 1.02)
Creative WaveStudio 7 (x32 Version: 7.12)
Crusader No Regret (x32 Version: 2.0.0.8)
Crusader No Remorse (x32 Version: 2.0.0.15)
DarthMod Napoleon (x32)
DarthMod Ultimate Commander Edition  (HKCU)
DarthMod Ultimate Commander Edition (x32)
Deus Ex: Human Revolution - The Missing Link (x32)
Deus Ex: Human Revolution (x32)
DivX-Setup (x32 Version: 2.6.1.3)
Dolby Digital Live Pack (x32 Version: 3.02)
Driver Sweeper 1.5.5 (x32)
Dropbox (HKCU Version: 2.4.6)
DTS Connect Pack (x32 Version: 1.00)
ESET NOD32 Antivirus (Version: 6.0.316.1)
ESN Sonar (x32 Version: 0.70.4)
Etron USB3.0 Host Controller (x32 Version: 0.96)
Freecorder 5 (x32 Version: 5.1)
Freecorder Toolbar (x32 Version: 6.8.2.0)
FRITZ!DSL64 (Version: 2.04.03)
gamelauncher-ps2-psg (HKCU)
GeForce Experience NvStream Client Components (Version: 1.6.28)
GIMP 2.8.0 (Version: 2.8.0)
GlassFish Server Open Source Edition 3.1.2.2
gmax (x32 Version: 4.4.0.125)
Gn_Leugim's Dirty Texture Replace (HKCU)
GOG.com Shogo
Java 7 Update 10 (64-bit) (Version: 7.0.100)
Java Auto Updater (x32 Version: 2.1.6.0)
Java SE Development Kit 7 Update 10 (64-bit) (Version: 1.7.0.100)
Java(TM) 6 Update 22 (x32 Version: 6.0.220)
Java(TM) 7 Update 5 (x32 Version: 7.0.50)
JavaFX 2.1.1 (x32 Version: 2.1.1)
Lautstärkefenster (x32 Version: 2.21)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mass Effect™ 3 (x32 Version: 1.05.0.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Games for Windows - LIVE (x32 Version: 3.1.186.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Mozilla Firefox 9.0.1 (x86 de) (x32 Version: 9.0.1)
MSI Afterburner 2.2.1 (x32 Version: 2.2.1)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10600.6.0)
Nero BurnRights 10 (x32 Version: 4.0.11300.14.100)
Nero BurnRights 10 Help (CHM) (x32 Version: 1.0.10900)
Nero Control Center 10 (x32 Version: 10.0.12900.2.6)
Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10900)
Nero Core Components 10 (x32 Version: 2.0.16800.7.15)
Nero CoverDesigner 10 (x32 Version: 5.0.11200.16.100)
Nero CoverDesigner 10 Help (CHM) (x32 Version: 1.0.10900)
Nero DiscSpeed 10 (x32 Version: 6.0.11400.18.100)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 1.0.10900)
Nero Express 10 (x32 Version: 10.0.12300.23.100)
Nero Express 10 Help (CHM) (x32 Version: 1.0.10900)
Nero InfoTool 10 (x32 Version: 7.0.11400.15.100)
Nero InfoTool 10 Help (CHM) (x32 Version: 1.0.10900)
Nero MediaHub 10 (x32 Version: 1.0.14800.28.100)
Nero MediaHub 10 Help (CHM) (x32 Version: 1.0.10900)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.0.10300)
Nero StartSmart 10 (x32 Version: 10.0.12600.30.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 1.0.10900)
Nero Update (x32 Version: 1.0.0018)
NetBeans IDE 7.2.1 (Version: 7.2.1)
Network Addon Mod (HKCU Version: 31.2)
Nexus Mod Manager (Version: 0.45.6)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.140.952)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 9.3.21 (Version: 9.3.21)
NVIDIA Update Components (Version: 9.3.21)
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9)
OpenAL (x32)
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
Opera 12.16 (x32 Version: 12.16.1860)
Origin (x32 Version: 8.5.0.4554)
PunkBuster Services (x32 Version: 0.991)
Quake Live Mozilla Plugin (x32 Version: 1.0.520)
Raptor - Call of the Shadows (x32)
Realtek Ethernet Controller Driver (x32 Version: 7.44.421.2011)
Rise of The Triad (x32)
SC4 Mapper 2013 (HKCU)
SC4DatPacker 2008 (HKCU)
Shadow Warrior Classic Redux (x32)
SHIELD Streaming (Version: 1.6.53)
Shogo - Mobile Armor Division (x32 Version: 2.0.0.4)
SimCity 4 Deluxe (x32)
SIW 2013 Home Edition (x32 Version: 2013.05.14)
SoundFont-Bank-Manager (x32)
Splashtop Software Updater (x32 Version: 1.5.6.14)
Splashtop Streamer (x32 Version: 2.4.5.2)
StarCraft II (x32 Version: 2.0.8.25604)
Steam (x32 Version: 1.0.0.0)
Syndicate (x32 Version: 2.0.0.11)
System Shock 2 (x32)
The Chronicles of Riddick: Assault on Dark Athena (x32)
The Elder Scrolls V: Skyrim (x32)
The Swapper (x32)
Thunder Master v1.4 (x32 Version: 1.4.0.0)
To the Moon (x32)
TortoiseSVN 1.8.2.24708 (64 bit) (Version: 1.8.24708)
Train Container Lots (HKCU)
TrueCrypt (x32 Version: 7.1a)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 1.1.11 (x32 Version: 1.1.11)
Winamp (x32 Version: 5.622 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Wing Commander Privateer (x32 Version: 2.0.0.9)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Wrye Bash (x32 Version: 0.3.0.4)

==================== Restore Points  =========================

01-12-2013 05:46:32 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
Task: {1AFEC9C2-AE80-4D6C-9427-EB62AEEECC15} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
Task: {8DE2F746-8FDC-40EE-861C-8619BB91109B} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => Rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
Task: {A722B391-CC2D-48A6-AB8C-FC1F800EAF7D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe
Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations
Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe
Task: {E4043130-15CC-4E5B-AF56-C96C68D40B8F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-08-27 22:00 - 2013-08-27 22:00 - 00075504 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2013-08-27 21:59 - 2013-08-27 21:59 - 00088304 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Tom\AppData\Roaming\Dropbox\bin\libcef.dll
2012-01-08 00:27 - 2011-07-21 20:02 - 00207872 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2012-01-08 00:27 - 2011-07-21 20:04 - 00074240 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2011-12-28 13:18 - 2007-09-13 22:05 - 00002560 _____ () C:\Windows\system32\CTXFIGER.DLL

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Videocontroller
Description: Videocontroller
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/01/2013 00:47:42 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/01/2013 04:57:11 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2013 10:23:10 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2013 00:49:03 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/29/2013 11:08:08 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2013 03:53:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2013 09:30:24 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2013 04:02:14 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2013 03:21:05 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 04:28:02 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (12/01/2013 00:45:57 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (11/30/2013 10:28:25 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/29/2013 02:36:20 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/28/2013 04:57:58 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/28/2013 03:19:22 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (11/28/2013 03:18:48 AM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/27/2013 09:49:15 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/26/2013 10:16:23 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/26/2013 00:35:08 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎26.‎11.‎2013 um 12:31:54 unerwartet heruntergefahren.

Error: (11/25/2013 00:00:42 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office Sessions:
=========================
Error: (12/01/2013 00:47:42 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/01/2013 04:57:11 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2013 10:23:10 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2013 00:49:03 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/29/2013 11:08:08 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2013 03:53:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2013 09:30:24 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2013 04:02:14 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2013 03:21:05 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 04:28:02 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 24%
Total physical RAM: 8104.67 MB
Available physical RAM: 6105.29 MB
Total Pagefile: 16207.52 MB
Available Pagefile: 14182.1 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:59.62 GB) (Free:5.79 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (Spiele) (Fixed) (Total:345.47 GB) (Free:48.67 GB) NTFS
Drive g: (Daten) (Fixed) (Total:585.94 GB) (Free:0.33 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 60 GB) (Disk ID: EA0178BE)
Partition 1: (Active) - (Size=60 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: EA0178C6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=345 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=586 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Nun zu meiner Frage: ESET meldet keine Bedrohungen mehr und Malwarebytes (wie im 2. scan zu erkennen) meldet auch keine Bedrohungen mehr. Nun wollte ich wissen wie ich sicher sein kann, dass mein System auch frei von diesem Schädling ist, da es sich ja um einen recht gefährlichen Trojaner handelt, welcher Passwöter klaut. Aus diesem Grund schreibe ich euch auch über mein Notebook und übertrage Daten per usb stick auf meinen infizierten Desktoprechner. Vielen Dank an euch im voraus!

Gruß
Tom

ESET meldet spy.zbot.aao trojaner

Plagegeister aller Art und deren Bekämpfung: ESET meldet spy.zbot.aao trojaner

ESET meldet spy.zbot.aao trojaner

Ähnliche Themen: ESET meldet spy.zbot.aao trojaner