Windows 7 32 bit, Firefox (australianbrewingcompany meldung)

Grandpakai · 19.12.2013, 12:40

Guten Tag,

mein Morzilla Firefox öffnet seit eineiger Zeit(ca mitte November) selbstständig "australianbrewingcompany". Die Seite wird zwar gespeert und als "gefährlich" eingestuft trotzdem muss ich nun was dagegen unternehmen.
Ich habe mich schon etwas durch das Forum gearbeitet und einige Logs bereit liegen.

Anhang 63112

Ich hoffe das ich alle Logs richtig ausgeführt habe.

Danke

schrauber · 19.12.2013, 12:54

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Grandpakai · 19.12.2013, 13:49

Hatte ich erst so habe aber dann das mit dem Archivieren gesehen weil die Texte zu lang waren.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-12-2013 05
Ran by Kai (administrator) on KAI-PC on 19-12-2013 11:48:14
Running from E:\Users\Kai\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) E:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) E:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) E:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Just Develop It) E:\Program Files\MyPC Backup\BackupStack.exe
() E:\Program Files\DivX\DivX Update\DivXUpdate.exe
(APN) E:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() E:\Windows\System32\PnkBstrA.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Mozilla Corporation) E:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) E:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) E:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) E:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Microsoft Corporation) E:\Windows\System32\wuauclt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [DivXMediaServer] - E:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] - E:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [ApnTBMon] - E:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)
HKLM\...\Run: [Nvtmru] - E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [avgnt] - E:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ShadowPlay] - E:\Windows\system32\rundll32.exe E:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Adobe ARM] - E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
MountPoints2: F - F:\LaunchU3.exe -a
MountPoints2: {720aaa0f-3d63-11e3-8a43-806e6f6e6963} - D:\setup.exe
MountPoints2: {8468eced-40ce-11e3-b37b-0019664221ef} - F:\LaunchU3.exe -a

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3FCEDE4E71D1CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: E:\Users\Kai\AppData\Roaming\Mozilla\Firefox\Profiles\2dvsrxks.default
FF Plugin: @adobe.com/FlashPlayer - E:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - E:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - E:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @nvidia.com/3DVision - E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader - E:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; E:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; E:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; E:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 APNMCP; E:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
R2 BackupStack; E:\Program Files\MyPC Backup\BackupStack.exe [38440 2013-09-19] (Just Develop It)
R2 NvStreamSvc; E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14652704 2013-11-14] (NVIDIA Corporation)
R2 PnkBstrA; E:\Windows\system32\PnkBstrA.exe [66872 2013-12-16] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; E:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; E:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; E:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; E:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-12] (Avira Operations GmbH & Co. KG)
R3 nvvad_WaveExtensible; E:\Windows\System32\drivers\nvvad32v.sys [33568 2013-09-28] (NVIDIA Corporation)
R1 ssmdrv; E:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-31] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-19 11:48 - 2013-12-19 11:48 - 00008493 _____ E:\Users\Kai\Downloads\FRST.txt
2013-12-19 11:48 - 2013-12-19 11:48 - 00000000 ____D E:\FRST
2013-12-19 11:47 - 2013-12-19 11:47 - 01325654 _____ (Farbar) E:\Users\Kai\Downloads\FRST.exe
2013-12-19 11:42 - 2013-12-19 11:42 - 00092652 _____ E:\Users\Kai\Desktop\OTL.Txt
2013-12-19 11:42 - 2013-12-19 11:42 - 00053722 _____ E:\Users\Kai\Desktop\Extras.Txt
2013-12-19 11:41 - 2013-12-19 11:41 - 00002972 _____ E:\Users\Kai\Desktop\Ereignisse.txt
2013-12-19 11:31 - 2013-12-19 11:31 - 00602112 _____ (OldTimer Tools) E:\Users\Kai\Downloads\OTL.exe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Common Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Adobe
2013-12-18 22:42 - 2013-12-18 22:43 - 00000000 ____D E:\ProgramData\Adobe
2013-12-18 22:40 - 2013-12-18 22:40 - 00001293 _____ E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
2013-12-18 22:37 - 2013-12-18 22:37 - 00000000 ____D E:\Program Files\1C Company
2013-12-16 17:43 - 2013-12-18 16:09 - 00000000 ____D E:\Users\Kai\Documents\Gothic3ForsakenGods
2013-12-16 17:40 - 2013-12-16 17:40 - 00002399 _____ E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
2013-12-16 14:03 - 2013-12-16 14:03 - 00000682 _____ E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\PunkBuster
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\Activision
2013-12-16 13:32 - 2013-12-16 14:04 - 00138464 _____ E:\Windows\system32\Drivers\PnkBstrK.sys
2013-12-16 13:32 - 2013-12-16 13:32 - 00022328 _____ E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
2013-12-16 13:31 - 2013-12-16 14:04 - 00111928 _____ E:\Windows\system32\PnkBstrB.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00682280 _____ E:\Windows\system32\pbsvc.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00066872 _____ E:\Windows\system32\PnkBstrA.exe
2013-12-16 13:19 - 2013-12-16 13:19 - 00000000 ____D E:\Program Files\Activision
2013-12-16 09:45 - 2013-12-16 13:39 - 1560931305 _____ (JoWooD Entertainment AG                                     ) E:\Users\Kai\Downloads\Gothic_3_FSG_EE_Patch_v2.01_Int_Full.exe
2013-12-14 15:55 - 2013-12-14 16:14 - 00000000 ____D E:\Program Files\Steam
2013-12-14 15:55 - 2013-12-14 16:06 - 00000000 ____D E:\Program Files\Common Files\Steam
2013-12-14 15:54 - 2013-12-14 15:54 - 01133552 _____ E:\Users\Kai\Downloads\SteamSetup.exe
2013-12-14 15:52 - 2013-12-14 15:52 - 00000592 _____ E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
2013-12-14 15:34 - 2013-12-14 15:34 - 00000000 ____D E:\Program Files\THQ
2013-12-14 15:33 - 2013-12-14 15:33 - 00000000 __SHD E:\Windows\ftpcache
2013-12-12 12:31 - 2013-12-12 12:31 - 00000000 ____D E:\Program Files\Mozilla Firefox
2013-12-11 23:59 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.dll
2013-12-11 23:59 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.tlb
2013-12-11 23:59 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollectorres.dll
2013-12-11 23:59 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\iesetup.dll
2013-12-11 23:59 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) E:\Windows\system32\ieetwproxystub.dll
2013-12-11 23:59 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) E:\Windows\system32\iertutil.dll
2013-12-11 23:59 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\jsproxy.dll
2013-12-11 23:59 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) E:\Windows\system32\iernonce.dll
2013-12-11 23:59 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) E:\Windows\system32\ieui.dll
2013-12-11 23:59 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) E:\Windows\system32\ieUnatt.exe
2013-12-11 23:59 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollector.exe
2013-12-11 23:59 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) E:\Windows\system32\jscript9diag.dll
2013-12-11 23:59 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) E:\Windows\system32\jscript9.dll
2013-12-11 23:59 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) E:\Windows\system32\ie4uinit.exe
2013-12-11 23:59 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) E:\Windows\system32\inetcpl.cpl
2013-12-11 23:59 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) E:\Windows\system32\ieframe.dll
2013-12-11 23:59 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dll
2013-12-11 23:59 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) E:\Windows\system32\wininet.dll
2013-12-11 23:59 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) E:\Windows\system32\urlmon.dll
2013-12-11 22:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) E:\Windows\system32\tzres.dll
2013-12-11 22:35 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) E:\Windows\system32\imagehlp.dll
2013-12-11 22:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) E:\Windows\system32\wshom.ocx
2013-12-11 22:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) E:\Windows\system32\scrrun.dll
2013-12-11 22:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) E:\Windows\system32\wscript.exe
2013-12-11 22:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) E:\Windows\system32\cscript.exe
2013-12-11 22:34 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) E:\Windows\system32\win32k.sys
2013-12-11 22:34 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\drmk.sys
2013-12-11 22:34 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\portcls.sys
2013-12-06 20:26 - 2013-12-14 15:35 - 00132467 _____ E:\Windows\DirectX.log
2013-12-06 20:26 - 2013-12-06 20:26 - 00002074 _____ E:\Users\Public\Desktop\Medieval II Total War.lnk
2013-12-06 20:16 - 2013-12-16 13:31 - 00000000 ___HD E:\Program Files\InstallShield Installation Information
2013-12-06 20:16 - 2013-12-06 20:16 - 00000000 ____D E:\Program Files\SEGA
2013-12-06 20:14 - 2013-12-06 20:14 - 00000000 ____D E:\Users\Kai\AppData\Roaming\InstallShield
2013-12-02 19:10 - 2013-11-14 12:57 - 00955168 _____ (NVIDIA Corporation) E:\Windows\system32\nvspcap.dll
2013-12-02 19:08 - 2013-12-02 19:08 - 00000020 ___SH E:\Users\UpdatusUser\ntuser.ini
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Startmenü
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Netzwerkumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Druckumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-02 19:08 - 2009-07-14 05:42 - 00000000 ___RD E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-02 19:08 - 2009-07-14 05:37 - 00000000 ___RD E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-02 19:06 - 2013-11-14 12:57 - 22951200 _____ (NVIDIA Corporation) E:\Windows\system32\nvoglv32.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 17560352 _____ (NVIDIA Corporation) E:\Windows\system32\nvcompiler.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 15218504 _____ (NVIDIA Corporation) E:\Windows\system32\nvd3dum.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 10446112 _____ (NVIDIA Corporation) E:\Windows\system32\Drivers\nvlddmkm.sys
2013-12-02 19:06 - 2013-11-14 12:57 - 09663656 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuda.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 09619872 _____ (NVIDIA Corporation) E:\Windows\system32\nvopencl.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 02947872 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuvid.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 02747680 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuvenc.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 01049888 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispco3233182.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00893728 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispgenco3233182.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00609568 _____ (NVIDIA Corporation) E:\Windows\system32\NvFBC.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00562464 _____ (NVIDIA Corporation) E:\Windows\system32\NvIFR.dll
2013-12-02 18:11 - 2013-12-02 18:30 - 199358496 _____ (NVIDIA Corporation) E:\Users\Kai\Downloads\331.82-desktop-win8-win7-winvista-32bit-international-whql.exe
2013-12-01 17:45 - 2013-12-01 17:45 - 00000000 ____D E:\Users\Public\Desktop\Gothic 3 Modkit
2013-12-01 17:31 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_7.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) E:\Windows\system32\d3dcsx_43.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_43.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) E:\Windows\system32\d3dx11_43.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_6.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_6.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_4.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_5.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_5.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_3.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) E:\Windows\system32\d3dcsx_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) E:\Windows\system32\d3dx11_42.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_4.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_4.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_6.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_41.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_41.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_41.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_3.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_3.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_2.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_5.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_40.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_40.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_40.dll
2013-12-01 17:31 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_2.dll
2013-12-01 17:31 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_1.dll
2013-12-01 17:31 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_2.dll
2013-12-01 17:31 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_39.dll
2013-12-01 17:31 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_39.dll
2013-12-01 17:31 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_39.dll
2013-12-01 17:31 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_1.dll
2013-12-01 17:31 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_1.dll
2013-12-01 17:31 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_0.dll
2013-12-01 17:31 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_4.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_38.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_38.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_38.dll
2013-12-01 17:31 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_0.dll
2013-12-01 17:31 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_0.dll
2013-12-01 17:31 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_3.dll
2013-12-01 17:31 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_37.dll
2013-12-01 17:31 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_37.dll
2013-12-01 17:31 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_37.dll
2013-12-01 17:31 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_10.dll
2013-12-01 17:31 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_2.dll
2013-12-01 17:31 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_36.dll
2013-12-01 17:31 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_36.dll
2013-12-01 17:31 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_36.dll
2013-12-01 17:31 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_9.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_35.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_35.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_35.dll
2013-12-01 17:31 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_8.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_34.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_34.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_34.dll
2013-12-01 17:31 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_7.dll
2013-12-01 17:31 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_33.dll
2013-12-01 17:31 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_33.dll
2013-12-01 17:31 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_33.dll
2013-12-01 17:31 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) E:\Windows\system32\x3daudio1_1.dll
2013-12-01 17:31 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_6.dll
2013-12-01 17:31 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_5.dll
2013-12-01 17:31 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_32.dll
2013-12-01 17:31 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10.dll
2013-12-01 17:31 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_31.dll
2013-12-01 17:31 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_4.dll
2013-12-01 17:31 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_3.dll
2013-12-01 17:31 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) E:\Windows\system32\xinput1_2.dll
2013-12-01 17:31 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_2.dll
2013-12-01 17:31 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_30.dll
2013-12-01 17:31 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_1.dll
2013-12-01 17:31 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) E:\Windows\system32\xinput1_1.dll
2013-12-01 17:31 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_29.dll
2013-12-01 17:31 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_0.dll
2013-12-01 17:31 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) E:\Windows\system32\x3daudio1_0.dll
2013-12-01 17:31 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_28.dll
2013-12-01 17:31 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_27.dll
2013-12-01 17:31 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_26.dll
2013-12-01 17:31 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_25.dll
2013-12-01 17:31 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_24.dll
2013-12-01 17:29 - 2013-12-14 18:34 - 00000000 ____D E:\Users\Kai\Documents\Gothic3
2013-12-01 17:24 - 2013-12-16 17:34 - 00000000 ____D E:\Program Files\Nordic Games
2013-11-21 20:34 - 2013-11-21 20:34 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Avira
2013-11-21 20:33 - 2013-12-12 10:58 - 00135648 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avipbb.sys
2013-11-21 20:33 - 2013-12-12 10:58 - 00090400 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avgntflt.sys
2013-11-21 20:33 - 2013-12-12 10:58 - 00069240 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avnetflt.sys
2013-11-21 20:33 - 2013-11-21 20:33 - 00002022 _____ E:\Users\Public\Desktop\Avira Control Center.lnk
2013-11-21 20:33 - 2013-11-21 20:33 - 00000000 ____D E:\ProgramData\Avira
2013-11-21 20:33 - 2013-11-21 20:33 - 00000000 ____D E:\Program Files\Avira
2013-11-21 20:33 - 2013-10-31 19:25 - 00037352 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avkmgr.sys
2013-11-21 20:33 - 2013-10-31 19:25 - 00028520 _____ (Avira GmbH) E:\Windows\system32\Drivers\ssmdrv.sys
2013-11-21 17:12 - 2013-11-21 17:12 - 00000000 ____D E:\Windows\pss
2013-11-20 19:06 - 2013-12-01 21:06 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-11-20 18:59 - 2013-11-20 18:59 - 01071224 _____ (Solid State Networks) E:\Users\Kai\Downloads\install_flashplayer11x32au_mssd_aaa_aih.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 01051136 _____ (Microsoft Corporation) E:\Windows\system32\mshtmlmedia.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00646144 _____ (Microsoft Corporation) E:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00645120 _____ (Microsoft Corporation) E:\Windows\system32\jsIntl.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00616104 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dat
2013-11-19 22:20 - 2013-11-19 22:20 - 00610304 _____ (Microsoft Corporation) E:\Windows\system32\jscript.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00523776 _____ (Microsoft Corporation) E:\Windows\system32\msfeeds.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00454656 _____ (Microsoft Corporation) E:\Windows\system32\vbscript.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00367104 _____ (Microsoft Corporation) E:\Windows\system32\dxtmsft.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00337408 _____ (Microsoft Corporation) E:\Windows\system32\html.iec
2013-11-19 22:20 - 2013-11-19 22:20 - 00244736 _____ (Microsoft Corporation) E:\Windows\system32\dxtrans.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00238288 _____ (Microsoft Corporation) E:\Windows\system32\iedkcs32.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00233472 _____ (Microsoft Corporation) E:\Windows\system32\url.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00208384 _____ (Microsoft Corporation) E:\Windows\system32\webcheck.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00194048 _____ (Microsoft Corporation) E:\Windows\system32\elshyph.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00182272 _____ (Microsoft Corporation) E:\Windows\system32\msls31.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00164864 _____ (Microsoft Corporation) E:\Windows\system32\msrating.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00151552 _____ (Microsoft Corporation) E:\Windows\system32\iexpress.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00139264 _____ (Microsoft Corporation) E:\Windows\system32\wextract.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00127488 _____ (Microsoft Corporation) E:\Windows\system32\occache.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00116736 _____ (Microsoft Corporation) E:\Windows\system32\iepeers.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00111616 _____ (Microsoft Corporation) E:\Windows\system32\IEAdvpack.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00086016 _____ (Microsoft Corporation) E:\Windows\system32\iesysprep.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00083456 _____ (Microsoft Corporation) E:\Windows\system32\inseng.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00074240 _____ (Microsoft Corporation) E:\Windows\system32\SetIEInstalledDate.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00071680 _____ (Microsoft Corporation) E:\Windows\system32\RegisterIEPKEYs.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00069632 _____ (Microsoft Corporation) E:\Windows\system32\mshtmled.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00069120 _____ (Microsoft Corporation) E:\Windows\system32\icardie.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00062464 _____ (Microsoft Corporation) E:\Windows\system32\tdc.ocx
2013-11-19 22:20 - 2013-11-19 22:20 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\MshtmlDac.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00056832 _____ (Microsoft Corporation) E:\Windows\system32\pngfilt.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00048640 _____ (Microsoft Corporation) E:\Windows\system32\mshtmler.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\msfeedsbs.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00036352 _____ (Microsoft Corporation) E:\Windows\system32\imgutil.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00034816 _____ (Microsoft Corporation) E:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00024576 _____ (Microsoft Corporation) E:\Windows\system32\licmgr10.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00013312 _____ (Microsoft Corporation) E:\Windows\system32\mshta.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00012800 _____ (Microsoft Corporation) E:\Windows\system32\msfeedssync.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 03969472 _____ (Microsoft Corporation) E:\Windows\system32\ntkrnlpa.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 03914176 _____ (Microsoft Corporation) E:\Windows\system32\ntoskrnl.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 01294272 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\tcpip.sys
2013-11-19 22:19 - 2013-11-19 22:19 - 01289096 _____ (Microsoft Corporation) E:\Windows\system32\ntdll.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00640512 _____ (Microsoft Corporation) E:\Windows\system32\advapi32.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00619520 _____ (Microsoft Corporation) E:\Windows\system32\tdh.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00338944 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\afd.sys
2013-11-19 22:19 - 2013-11-19 22:19 - 00231424 _____ (Microsoft Corporation) E:\Windows\system32\mswsock.dll
2013-11-19 22:18 - 2013-11-19 22:22 - 00011323 _____ E:\Windows\IE11_main.log

==================== One Month Modified Files and Folders =======

2013-12-19 11:48 - 2013-12-19 11:48 - 00008493 _____ E:\Users\Kai\Downloads\FRST.txt
2013-12-19 11:48 - 2013-12-19 11:48 - 00000000 ____D E:\FRST
2013-12-19 11:47 - 2013-12-19 11:47 - 01325654 _____ (Farbar) E:\Users\Kai\Downloads\FRST.exe
2013-12-19 11:42 - 2013-12-19 11:42 - 00092652 _____ E:\Users\Kai\Desktop\OTL.Txt
2013-12-19 11:42 - 2013-12-19 11:42 - 00053722 _____ E:\Users\Kai\Desktop\Extras.Txt
2013-12-19 11:41 - 2013-12-19 11:41 - 00002972 _____ E:\Users\Kai\Desktop\Ereignisse.txt
2013-12-19 11:31 - 2013-12-19 11:31 - 00602112 _____ (OldTimer Tools) E:\Users\Kai\Downloads\OTL.exe
2013-12-19 11:17 - 2013-10-29 20:37 - 00000884 _____ E:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 11:07 - 2013-10-30 19:02 - 00000109 _____ E:\Users\Kai\AppData\Roaming\WB.CFG
2013-12-19 11:07 - 2013-10-30 19:02 - 00000006 _____ E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
2013-12-19 11:07 - 2013-10-25 14:02 - 00000284 _____ E:\Windows\Tasks\DigitalSite.job
2013-12-19 11:03 - 2013-10-25 14:03 - 00000284 _____ E:\Windows\Tasks\MySearchDial.job
2013-12-19 10:49 - 2009-07-14 05:34 - 00022576 ____H E:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-19 10:49 - 2009-07-14 05:34 - 00022576 ____H E:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-19 10:48 - 2013-10-25 13:15 - 01638780 _____ E:\Windows\system32\PerfStringBackup.INI
2013-12-19 10:45 - 2013-10-25 11:55 - 01810452 _____ E:\Windows\WindowsUpdate.log
2013-12-19 10:41 - 2013-10-30 20:22 - 00000000 ____D E:\ProgramData\NVIDIA
2013-12-19 10:41 - 2009-07-14 05:53 - 00000006 ____H E:\Windows\Tasks\SA.DAT
2013-12-19 10:41 - 2009-07-14 05:39 - 00034907 _____ E:\Windows\setupact.log
2013-12-18 22:53 - 2013-10-30 19:08 - 00000000 ____D E:\Users\Kai\Documents\My Games
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Common Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:42 - 00000000 ____D E:\ProgramData\Adobe
2013-12-18 22:40 - 2013-12-18 22:40 - 00001293 _____ E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
2013-12-18 22:37 - 2013-12-18 22:37 - 00000000 ____D E:\Program Files\1C Company
2013-12-18 16:09 - 2013-12-16 17:43 - 00000000 ____D E:\Users\Kai\Documents\Gothic3ForsakenGods
2013-12-16 17:43 - 2013-10-29 20:26 - 00000000 ____D E:\Users\Kai\Desktop\DiesDas
2013-12-16 17:40 - 2013-12-16 17:40 - 00002399 _____ E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
2013-12-16 17:34 - 2013-12-01 17:24 - 00000000 ____D E:\Program Files\Nordic Games
2013-12-16 14:04 - 2013-12-16 13:32 - 00138464 _____ E:\Windows\system32\Drivers\PnkBstrK.sys
2013-12-16 14:04 - 2013-12-16 13:31 - 00111928 _____ E:\Windows\system32\PnkBstrB.exe
2013-12-16 14:03 - 2013-12-16 14:03 - 00000682 _____ E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
2013-12-16 13:39 - 2013-12-16 09:45 - 1560931305 _____ (JoWooD Entertainment AG                                     ) E:\Users\Kai\Downloads\Gothic_3_FSG_EE_Patch_v2.01_Int_Full.exe
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\PunkBuster
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\Activision
2013-12-16 13:32 - 2013-12-16 13:32 - 00022328 _____ E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
2013-12-16 13:31 - 2013-12-16 13:31 - 00682280 _____ E:\Windows\system32\pbsvc.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00066872 _____ E:\Windows\system32\PnkBstrA.exe
2013-12-16 13:31 - 2013-12-06 20:16 - 00000000 ___HD E:\Program Files\InstallShield Installation Information
2013-12-16 13:31 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\system32\LogFiles
2013-12-16 13:19 - 2013-12-16 13:19 - 00000000 ____D E:\Program Files\Activision
2013-12-15 10:09 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\rescache
2013-12-14 18:34 - 2013-12-01 17:29 - 00000000 ____D E:\Users\Kai\Documents\Gothic3
2013-12-14 16:14 - 2013-12-14 15:55 - 00000000 ____D E:\Program Files\Steam
2013-12-14 16:06 - 2013-12-14 15:55 - 00000000 ____D E:\Program Files\Common Files\Steam
2013-12-14 15:54 - 2013-12-14 15:54 - 01133552 _____ E:\Users\Kai\Downloads\SteamSetup.exe
2013-12-14 15:52 - 2013-12-14 15:52 - 00000592 _____ E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
2013-12-14 15:35 - 2013-12-06 20:26 - 00132467 _____ E:\Windows\DirectX.log
2013-12-14 15:34 - 2013-12-14 15:34 - 00000000 ____D E:\Program Files\THQ
2013-12-14 15:33 - 2013-12-14 15:33 - 00000000 __SHD E:\Windows\ftpcache
2013-12-12 21:08 - 2013-10-29 20:29 - 00000000 ____D E:\Program Files\Mozilla Maintenance Service
2013-12-12 12:31 - 2013-12-12 12:31 - 00000000 ____D E:\Program Files\Mozilla Firefox
2013-12-12 10:58 - 2013-11-21 20:33 - 00135648 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avipbb.sys
2013-12-12 10:58 - 2013-11-21 20:33 - 00090400 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avgntflt.sys
2013-12-12 10:58 - 2013-11-21 20:33 - 00069240 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avnetflt.sys
2013-12-12 10:48 - 2009-07-14 05:33 - 00278272 _____ E:\Windows\system32\FNTCACHE.DAT
2013-12-12 10:47 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\system32\de-DE
2013-12-11 12:18 - 2013-10-29 20:37 - 00692616 _____ (Adobe Systems Incorporated) E:\Windows\system32\FlashPlayerApp.exe
2013-12-11 12:18 - 2013-10-29 20:37 - 00071048 _____ (Adobe Systems Incorporated) E:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-06 20:26 - 2013-12-06 20:26 - 00002074 _____ E:\Users\Public\Desktop\Medieval II Total War.lnk
2013-12-06 20:16 - 2013-12-06 20:16 - 00000000 ____D E:\Program Files\SEGA
2013-12-06 20:14 - 2013-12-06 20:14 - 00000000 ____D E:\Users\Kai\AppData\Roaming\InstallShield
2013-12-03 21:43 - 2013-10-30 20:21 - 00000000 ____D E:\ProgramData\NVIDIA Corporation
2013-12-02 19:10 - 2013-10-30 20:12 - 00000000 ____D E:\Program Files\NVIDIA Corporation
2013-12-02 19:08 - 2013-12-02 19:08 - 00000020 ___SH E:\Users\UpdatusUser\ntuser.ini
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Startmenü
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Netzwerkumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Druckumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-02 18:30 - 2013-12-02 18:11 - 199358496 _____ (NVIDIA Corporation) E:\Users\Kai\Downloads\331.82-desktop-win8-win7-winvista-32bit-international-whql.exe
2013-12-01 21:06 - 2013-11-20 19:06 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-01 21:06 - 2013-10-25 11:58 - 00000000 ____D E:\Users\Kai\AppData\Local\VirtualStore
2013-12-01 17:45 - 2013-12-01 17:45 - 00000000 ____D E:\Users\Public\Desktop\Gothic 3 Modkit
2013-12-01 17:31 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\Microsoft.NET
2013-11-26 11:11 - 2013-12-11 23:59 - 17112576 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-11 23:59 - 02724864 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-11 23:59 - 00004096 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-11 23:59 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-11 23:59 - 00051200 _____ (Microsoft Corporation) E:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-11 23:59 - 02166784 _____ (Microsoft Corporation) E:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-11 23:59 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-11 23:59 - 00032768 _____ (Microsoft Corporation) E:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-11 23:59 - 00440832 _____ (Microsoft Corporation) E:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-11 23:59 - 00112128 _____ (Microsoft Corporation) E:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-11 23:59 - 00108032 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-11 23:59 - 00553472 _____ (Microsoft Corporation) E:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-11 23:59 - 04243968 _____ (Microsoft Corporation) E:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-11 23:59 - 00208896 _____ (Microsoft Corporation) E:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-11 23:59 - 01928192 _____ (Microsoft Corporation) E:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-11 23:59 - 11221504 _____ (Microsoft Corporation) E:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-11 23:59 - 00703488 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-11 23:59 - 01820160 _____ (Microsoft Corporation) E:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-11 23:59 - 01157632 _____ (Microsoft Corporation) E:\Windows\system32\urlmon.dll
2013-11-21 21:33 - 2013-10-25 15:10 - 00295640 _____ E:\Windows\PFRO.log
2013-11-21 20:34 - 2013-11-21 20:34 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Avira
2013-11-21 20:33 - 2013-11-21 20:33 - 00002022 _____ E:\Users\Public\Desktop\Avira Control Center.lnk
2013-11-21 20:33 - 2013-11-21 20:33 - 00000000 ____D E:\ProgramData\Avira
2013-11-21 20:33 - 2013-11-21 20:33 - 00000000 ____D E:\Program Files\Avira
2013-11-21 17:12 - 2013-11-21 17:12 - 00000000 ____D E:\Windows\pss
2013-11-20 18:59 - 2013-11-20 18:59 - 01071224 _____ (Solid State Networks) E:\Users\Kai\Downloads\install_flashplayer11x32au_mssd_aaa_aih.exe
2013-11-19 22:22 - 2013-11-19 22:18 - 00011323 _____ E:\Windows\IE11_main.log
2013-11-19 22:20 - 2013-11-19 22:20 - 01051136 _____ (Microsoft Corporation) E:\Windows\system32\mshtmlmedia.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00646144 _____ (Microsoft Corporation) E:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00645120 _____ (Microsoft Corporation) E:\Windows\system32\jsIntl.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00616104 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dat
2013-11-19 22:20 - 2013-11-19 22:20 - 00610304 _____ (Microsoft Corporation) E:\Windows\system32\jscript.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00523776 _____ (Microsoft Corporation) E:\Windows\system32\msfeeds.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00454656 _____ (Microsoft Corporation) E:\Windows\system32\vbscript.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00367104 _____ (Microsoft Corporation) E:\Windows\system32\dxtmsft.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00337408 _____ (Microsoft Corporation) E:\Windows\system32\html.iec
2013-11-19 22:20 - 2013-11-19 22:20 - 00244736 _____ (Microsoft Corporation) E:\Windows\system32\dxtrans.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00238288 _____ (Microsoft Corporation) E:\Windows\system32\iedkcs32.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00233472 _____ (Microsoft Corporation) E:\Windows\system32\url.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00208384 _____ (Microsoft Corporation) E:\Windows\system32\webcheck.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00194048 _____ (Microsoft Corporation) E:\Windows\system32\elshyph.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00182272 _____ (Microsoft Corporation) E:\Windows\system32\msls31.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00164864 _____ (Microsoft Corporation) E:\Windows\system32\msrating.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00151552 _____ (Microsoft Corporation) E:\Windows\system32\iexpress.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00139264 _____ (Microsoft Corporation) E:\Windows\system32\wextract.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00127488 _____ (Microsoft Corporation) E:\Windows\system32\occache.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00116736 _____ (Microsoft Corporation) E:\Windows\system32\iepeers.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00111616 _____ (Microsoft Corporation) E:\Windows\system32\IEAdvpack.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00086016 _____ (Microsoft Corporation) E:\Windows\system32\iesysprep.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00083456 _____ (Microsoft Corporation) E:\Windows\system32\inseng.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00074240 _____ (Microsoft Corporation) E:\Windows\system32\SetIEInstalledDate.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00071680 _____ (Microsoft Corporation) E:\Windows\system32\RegisterIEPKEYs.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00069632 _____ (Microsoft Corporation) E:\Windows\system32\mshtmled.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00069120 _____ (Microsoft Corporation) E:\Windows\system32\icardie.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00062464 _____ (Microsoft Corporation) E:\Windows\system32\tdc.ocx
2013-11-19 22:20 - 2013-11-19 22:20 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\MshtmlDac.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00056832 _____ (Microsoft Corporation) E:\Windows\system32\pngfilt.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00048640 _____ (Microsoft Corporation) E:\Windows\system32\mshtmler.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\msfeedsbs.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00036352 _____ (Microsoft Corporation) E:\Windows\system32\imgutil.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00034816 _____ (Microsoft Corporation) E:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00024576 _____ (Microsoft Corporation) E:\Windows\system32\licmgr10.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00013312 _____ (Microsoft Corporation) E:\Windows\system32\mshta.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00012800 _____ (Microsoft Corporation) E:\Windows\system32\msfeedssync.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 03969472 _____ (Microsoft Corporation) E:\Windows\system32\ntkrnlpa.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 03914176 _____ (Microsoft Corporation) E:\Windows\system32\ntoskrnl.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 01294272 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\tcpip.sys
2013-11-19 22:19 - 2013-11-19 22:19 - 01289096 _____ (Microsoft Corporation) E:\Windows\system32\ntdll.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00640512 _____ (Microsoft Corporation) E:\Windows\system32\advapi32.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00619520 _____ (Microsoft Corporation) E:\Windows\system32\tdh.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00338944 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\afd.sys
2013-11-19 22:19 - 2013-11-19 22:19 - 00231424 _____ (Microsoft Corporation) E:\Windows\system32\mswsock.dll

Some content of TEMP:
====================
E:\Users\Kai\AppData\Local\Temp\36260uninstall.exe
E:\Users\Kai\AppData\Local\Temp\avgnt.exe
E:\Users\Kai\AppData\Local\Temp\BackupSetup.exe
E:\Users\Kai\AppData\Local\Temp\drm_dyndata_7350008.dll
E:\Users\Kai\AppData\Local\Temp\nv3DVStreaming.dll
E:\Users\Kai\AppData\Local\Temp\nvSCPAPI.dll
E:\Users\Kai\AppData\Local\Temp\nvStereoApiI.dll
E:\Users\Kai\AppData\Local\Temp\nvStInst.exe
E:\Users\Kai\AppData\Local\Temp\Sqlite3.dll
E:\Users\Kai\AppData\Local\Temp\vcredist_x86.exe
E:\Users\Kai\AppData\Local\Temp\_is4E14.exe
E:\Users\Kai\AppData\Local\Temp\_is795.exe


==================== Bamital & volsnap Check =================

E:\Windows\explorer.exe => MD5 is legit
E:\Windows\System32\winlogon.exe => MD5 is legit
E:\Windows\System32\wininit.exe => MD5 is legit
E:\Windows\System32\svchost.exe => MD5 is legit
E:\Windows\System32\services.exe => MD5 is legit
E:\Windows\System32\User32.dll => MD5 is legit
E:\Windows\System32\userinit.exe => MD5 is legit
E:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-15 10:01

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-12-19 12:25:02
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\00000058 WDC_WD50 rev.12.0 465,76GB
Running: gmer_2.1.19163.exe; Driver: E:\Users\Kai\AppData\Local\Temp\kfldqpow.sys


---- System - GMER 2.1 ----

SSDT   9705398E                                  ZwCreateSection
SSDT   97053998                                  ZwRequestWaitReplyPort
SSDT   97053993                                  ZwSetContextThread
SSDT   9705399D                                  ZwSetSecurityObject
SSDT   970539A2                                  ZwSystemDebugControl
SSDT   9705392F                                  ZwTerminateProcess

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRollbackEnlistment + 142D  8284AA15 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2    82884212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11F7       8288B58C 4 Bytes  [8E, 39, 05, 97]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1553       8288B8E8 4 Bytes  [98, 39, 05, 97]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1597       8288B92C 4 Bytes  [93, 39, 05, 97]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1613       8288B9A8 4 Bytes  [9D, 39, 05, 97]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1667       8288B9FC 4 Bytes  [A2, 39, 05, 97]
.text  ...                                       

---- EOF - GMER 2.1 ----

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-12-2013 05
Ran by Kai at 2013-12-19 11:48:37
Running from E:\Users\Kai\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Adobe Reader X (10.1.2) - Deutsch (Version: 10.1.2)
Avira Free Antivirus (Version: 14.0.2.286)
Avira SearchFree Toolbar (Version: 12.6.0.1898)
Call of Duty(R) - World at War(TM) (Version: 1.0)
Codec Pack Packages
Company of Heroes - FAKEMSI (Version: 2.0.0.0)
Company of Heroes (Version: 2.0.0.1)
CPUID CPU-Z 1.67
Diccuric (Version: 1.1e)
DirectVobSub 2.40.4209 (Version: 2.40.4209)
DivX-Setup (Version: 2.6.1.8)
ffdshow v1.1.4399 [2012-03-22] (Version: 1.1.4399.0)
GeForce Experience NvStream Client Components (Version: 1.6.28)
Gothic 3 Enhanced Edition
Gothic 3 Götterdämmerung Enhanced Edition
Gothic 3 Modkit v1.75.14 (Version: v1.75.14)
Haali Media Splitter
Lagarith Lossless Codec (1.3.27)
LAME v3.99.3 (for Windows)
Landwirtschafts Simulator 2013 (Version: 1.0)
Medieval II Total War (Version: 1.03.000)
Men of War Condemned Heroes (Nur entfernen) (Version: 1.0.0.1)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0)
Mozilla Maintenance Service (Version: 26.0)
MyPC Backup  (Version: ) <==== ATTENTION
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA Install Application (Version: 2.1002.140.952)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA PhysX (Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 9.3.21 (Version: 9.3.21)
NVIDIA Update Components (Version: 9.3.21)
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9)
OpenSource Flash Video Splitter 1.0.0.5 (Version: 1.0.0.5)
PunkBuster Services (Version: 0.986)
SHIELD Streaming (Version: 1.6.53)
Steam
Update for Codec Pack
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
WinRAR 5.00 (32-bit) (Version: 5.00.0)
Xvid Video Codec (Version: 1.3.2)

==================== Restore Points  =========================

18-12-2013 21:40:57 DirectX wurde installiert
18-12-2013 21:42:53 Installed Adobe Reader X (10.1.0) - Deutsch.

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A E:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {93D15B29-1113-43FD-91C1-E1A5BDE9EC89} - System32\Tasks\Adobe Flash Player Updater => E:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {E04E00F7-35E8-4E89-A01A-865728BDE37E} - System32\Tasks\MySearchDial => E:\Users\Kai\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {F65FF708-241D-4706-8747-138F2A0BB4DE} - System32\Tasks\DigitalSite => E:\Users\Kai\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: E:\Windows\Tasks\Adobe Flash Player Updater.job => E:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: E:\Windows\Tasks\DigitalSite.job => E:\Users\Kai\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: E:\Windows\Tasks\MySearchDial.job => E:\Users\Kai\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE

==================== Loaded Modules (whitelisted) =============

2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () E:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-12-12 12:31 - 2013-12-12 12:31 - 03559024 _____ () E:\Program Files\Mozilla Firefox\mozjs.dll
2013-12-11 12:18 - 2013-12-11 12:18 - 16242056 _____ () E:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/18/2013 11:45:49 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Condemned Heroes.exe, Version: 1.0.0.0, Zeitstempel: 0x4f6c1012
Name des fehlerhaften Moduls: Condemned Heroes.exe, Version: 1.0.0.0, Zeitstempel: 0x4f6c1012
Ausnahmecode: 0xc000000d
Fehleroffset: 0x00524e84
ID des fehlerhaften Prozesses: 0xf3c
Startzeit der fehlerhaften Anwendung: 0xCondemned Heroes.exe0
Pfad der fehlerhaften Anwendung: Condemned Heroes.exe1
Pfad des fehlerhaften Moduls: Condemned Heroes.exe2
Berichtskennung: Condemned Heroes.exe3

Error: (12/18/2013 10:40:54 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9f8e4004-8b75-44fd-aaf9-b87ed82960b4}

Error: (12/16/2013 02:13:23 PM) (Source:  ) (User: )
Description: 7

Error: (12/16/2013 02:13:23 PM) (Source:  ) (User: )
Description: 6

Error: (12/16/2013 02:13:18 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CoDWaW.exe, Version: 1.0.0.1, Zeitstempel: 0x48f7898c
Name des fehlerhaften Moduls: CoDWaW.exe, Version: 1.0.0.1, Zeitstempel: 0x48f7898c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f25e7
ID des fehlerhaften Prozesses: 0x17e4
Startzeit der fehlerhaften Anwendung: 0xCoDWaW.exe0
Pfad der fehlerhaften Anwendung: CoDWaW.exe1
Pfad des fehlerhaften Moduls: CoDWaW.exe2
Berichtskennung: CoDWaW.exe3

Error: (12/16/2013 01:18:41 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {f8671ea3-7a7f-4c23-8f1f-e3d3710d7be5}

Error: (12/15/2013 11:59:50 PM) (Source: Application Hang) (User: )
Description: Programm RelicCOH.exe, Version 2.500.0.127 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: ea4

Startzeit: 01cef9e237294ab3

Endzeit: 671

Anwendungspfad: E:\Program Files\THQ\Company of Heroes\RelicCOH.exe

Berichts-ID:

Error: (12/15/2013 11:00:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00004b85
ID des fehlerhaften Prozesses: 0x5e4
Startzeit der fehlerhaften Anwendung: 0xde_100_2101_patch.exe0
Pfad der fehlerhaften Anwendung: de_100_2101_patch.exe1
Pfad des fehlerhaften Moduls: de_100_2101_patch.exe2
Berichtskennung: de_100_2101_patch.exe3

Error: (12/15/2013 10:48:39 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00004b85
ID des fehlerhaften Prozesses: 0x68c
Startzeit der fehlerhaften Anwendung: 0xde_100_2101_patch.exe0
Pfad der fehlerhaften Anwendung: de_100_2101_patch.exe1
Pfad des fehlerhaften Moduls: de_100_2101_patch.exe2
Berichtskennung: de_100_2101_patch.exe3

Error: (12/15/2013 10:42:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00004b85
ID des fehlerhaften Prozesses: 0xfb8
Startzeit der fehlerhaften Anwendung: 0xde_100_2101_patch.exe0
Pfad der fehlerhaften Anwendung: de_100_2101_patch.exe1
Pfad des fehlerhaften Moduls: de_100_2101_patch.exe2
Berichtskennung: de_100_2101_patch.exe3


System errors:
=============
Error: (12/19/2013 10:42:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/19/2013 10:42:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/19/2013 10:42:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/19/2013 10:42:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/19/2013 10:42:15 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (12/19/2013 10:42:15 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (12/19/2013 10:42:06 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/19/2013 10:42:06 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/19/2013 10:42:06 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (12/19/2013 10:41:04 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.


Microsoft Office Sessions:
=========================
Error: (12/18/2013 11:45:49 PM) (Source: Application Error)(User: )
Description: Condemned Heroes.exe1.0.0.04f6c1012Condemned Heroes.exe1.0.0.04f6c1012c000000d00524e84f3c01cefc3cec7c33a6E:\Program Files\1C Company\Men of War Condemned Heroes\Condemned Heroes.exeE:\Program Files\1C Company\Men of War Condemned Heroes\Condemned Heroes.exe23c2d38a-6836-11e3-812b-0019664221ef

Error: (12/18/2013 10:40:54 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9f8e4004-8b75-44fd-aaf9-b87ed82960b4}

Error: (12/16/2013 02:13:23 PM) (Source:  )(User: )
Description: 7

Error: (12/16/2013 02:13:23 PM) (Source:  )(User: )
Description: 6

Error: (12/16/2013 02:13:18 PM) (Source: Application Error)(User: )
Description: CoDWaW.exe1.0.0.148f7898cCoDWaW.exe1.0.0.148f7898cc0000005002f25e717e401cefa5f3feca0f4E:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exeE:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exed40d2d3a-6653-11e3-82b4-0019664221ef

Error: (12/16/2013 01:18:41 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {f8671ea3-7a7f-4c23-8f1f-e3d3710d7be5}

Error: (12/15/2013 11:59:50 PM) (Source: Application Hang)(User: )
Description: RelicCOH.exe2.500.0.127ea401cef9e237294ab3671E:\Program Files\THQ\Company of Heroes\RelicCOH.exe

Error: (12/15/2013 11:00:41 PM) (Source: Application Error)(User: )
Description: de_100_2101_patch.exe0.0.0.046f5e102de_100_2101_patch.exe0.0.0.046f5e102c000000500004b855e401cef9e11783080cE:\Users\Kai\Desktop\de_100_2101_patch.exeE:\Users\Kai\Desktop\de_100_2101_patch.exe563111de-65d4-11e3-89dc-0019664221ef

Error: (12/15/2013 10:48:39 PM) (Source: Application Error)(User: )
Description: de_100_2101_patch.exe0.0.0.046f5e102de_100_2101_patch.exe0.0.0.046f5e102c000000500004b8568c01cef9df69ccd91aE:\Users\Kai\Downloads\de_100_2101_patch.exeE:\Users\Kai\Downloads\de_100_2101_patch.exea7e9bfc5-65d2-11e3-89dc-0019664221ef

Error: (12/15/2013 10:42:45 PM) (Source: Application Error)(User: )
Description: de_100_2101_patch.exe0.0.0.046f5e102de_100_2101_patch.exe0.0.0.046f5e102c000000500004b85fb801cef9de95ade32eE:\Users\Kai\Downloads\de_100_2101_patch.exeE:\Users\Kai\Downloads\de_100_2101_patch.exed4d7e748-65d1-11e3-89dc-0019664221ef


==================== Memory info =========================== 

Percentage of memory in use: 45%
Total physical RAM: 3071.3 MB
Available physical RAM: 1665.52 MB
Total Pagefile: 6140.9 MB
Available Pagefile: 4318.88 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898.66 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:146.48 GB) (Free:142.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (MoWCH _Ger) (CDROM) (Total:1.88 GB) (Free:0 GB) CDFS
Drive e: (Volume) (Fixed) (Total:78.13 GB) (Free:9.09 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000AD2BE)
Partition 1: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=78 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Code:

ATTFilter

OTL logfile created on: 19.12.2013 11:32:08 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = E:\Users\Kai\Downloads
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16476)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,82 Gb Available Physical Memory | 60,67% Memory free
6,00 Gb Paging File | 4,31 Gb Available in Paging File | 71,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = E: | %SystemRoot% = E:\Windows | %ProgramFiles% = E:\Program Files
Drive C: | 146,48 Gb Total Space | 142,12 Gb Free Space | 97,03% Space Free | Partition Type: NTFS
Drive D: | 1,88 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 78,13 Gb Total Space | 8,07 Gb Free Space | 10,33% Space Free | Partition Type: NTFS
 
Computer Name: KAI-PC | User Name: Kai | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - E:\Users\Kai\Downloads\OTL.exe (OldTimer Tools)
PRC - E:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.)
PRC - E:\Programme\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - E:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
PRC - E:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
PRC - E:\Programme\MyPC Backup\BackupStack.exe (Just Develop It)
PRC - E:\Programme\DivX\DivX Update\DivXUpdate.exe ()
PRC - E:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - E:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - E:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - E:\Windows\explorer.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - E:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - E:\Windows\System32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
MOD - E:\Programme\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - E:\Programme\DivX\DivX Update\DivXUpdate.exe ()
 
 
========== Services (SafeList) ==========
 
SRV - (MozillaMaintenance) -- E:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AntiVirSchedulerService) -- E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) -- E:\Programme\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
SRV - (Steam Client Service) -- E:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) -- E:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (IEEtwCollectorService) -- E:\Windows\System32\IEEtwCollector.exe (Microsoft Corporation)
SRV - (NvStreamSvc) -- E:\Programme\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation)
SRV - (nvUpdatusService) -- E:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- E:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (AntiVirService) -- E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (APNMCP) -- E:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
SRV - (BackupStack) -- E:\Programme\MyPC Backup\BackupStack.exe (Just Develop It)
SRV - (WinDefend) -- E:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AdobeARMservice) -- E:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (WMPNetworkSvc) -- E:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (SensrSvc) -- E:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (avipbb) -- E:\Windows\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- E:\Windows\System32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avnetflt) -- E:\Windows\System32\drivers\avnetflt.sys (Avira Operations GmbH & Co. KG)
DRV - (nvlddmkm) -- E:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (ssmdrv) -- E:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avkmgr) -- E:\Windows\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (nvvad_WaveExtensible) -- E:\Windows\System32\drivers\nvvad32v.sys (NVIDIA Corporation)
DRV - (TsUsbFlt) -- E:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (NVENETFD) -- E:\Windows\System32\drivers\nvm62x32.sys (NVIDIA Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKLM\..\SearchScopes\{724ADDFC-63B1-C60D-26B0-28119C33B4FC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3F CE DE 4E 71 D1 CE 01  [binary data]
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes\{724ADDFC-63B1-C60D-26B0-28119C33B4FC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: E:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: E:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: E:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins
 
[2013.10.29 20:29:49 | 000,000,000 | ---D | M] (No name found) -- E:\Users\Kai\AppData\Roaming\mozilla\Extensions
[2013.12.12 12:31:09 | 000,000,000 | ---D | M] (No name found) -- E:\Programme\Mozilla Firefox\browser\extensions
[2013.12.12 12:31:16 | 000,000,000 | ---D | M] (Default) -- E:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - E:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\Toolbar\WebBrowser: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O4 - HKLM..\Run: [ApnTBMon] E:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [avgnt] E:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [DivXMediaServer] E:\Programme\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] E:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Nvtmru] E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [ShadowPlay] E:\Windows\System32\nvspcap.dll (NVIDIA Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] E:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] E:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1724954217-4260448841-1615121279-1004..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CB30BC81-0965-4AFC-B69B-13FAA5116A0E}: DhcpNameServer = 192.168.2.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (E:\Windows\system32\userinit.exe) - E:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - E:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.10.25 10:26:52 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2012.05.09 12:18:40 | 000,000,076 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{720aaa0f-3d63-11e3-8a43-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{720aaa0f-3d63-11e3-8a43-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe -- [2012.05.09 12:50:51 | 001,537,332 | R--- | M] (1C Company.                                                 )
O33 - MountPoints2\{8468eced-40ce-11e3-b37b-0019664221ef}\Shell - "" = AutoRun
O33 - MountPoints2\{8468eced-40ce-11e3-b37b-0019664221ef}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.12.18 22:43:10 | 000,000,000 | ---D | C] -- E:\Program Files\Common Files\Adobe
[2013.12.18 22:43:10 | 000,000,000 | ---D | C] -- E:\Program Files\Adobe
[2013.12.18 22:42:32 | 000,000,000 | ---D | C] -- E:\ProgramData\Adobe
[2013.12.18 22:40:46 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C Company
[2013.12.18 22:37:58 | 000,000,000 | ---D | C] -- E:\Program Files\1C Company
[2013.12.16 17:43:54 | 000,000,000 | ---D | C] -- E:\Users\Kai\Documents\Gothic3ForsakenGods
[2013.12.16 17:40:29 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Götterdämmerung Enhanced Edition
[2013.12.16 13:34:16 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Local\PunkBuster
[2013.12.16 13:34:10 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Local\Activision
[2013.12.16 13:19:53 | 000,000,000 | ---D | C] -- E:\Program Files\Activision
[2013.12.14 15:55:11 | 000,000,000 | ---D | C] -- E:\Program Files\Common Files\Steam
[2013.12.14 15:55:10 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2013.12.14 15:55:10 | 000,000,000 | ---D | C] -- E:\Program Files\Steam
[2013.12.14 15:48:32 | 000,000,000 | ---D | C] -- E:\ProgramData\Media Center Programs
[2013.12.14 15:34:57 | 000,000,000 | ---D | C] -- E:\Program Files\THQ
[2013.12.14 15:33:39 | 000,000,000 | -HSD | C] -- E:\Windows\ftpcache
[2013.12.12 12:31:09 | 000,000,000 | ---D | C] -- E:\Program Files\Mozilla Firefox
[2013.12.11 23:59:51 | 002,724,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtml.tlb
[2013.12.11 23:59:51 | 000,208,896 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ie4uinit.exe
[2013.12.11 23:59:50 | 000,043,008 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jsproxy.dll
[2013.12.11 23:59:49 | 000,703,488 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dll
[2013.12.11 23:59:49 | 000,553,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript9diag.dll
[2013.12.11 23:59:49 | 000,440,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieui.dll
[2013.12.11 23:59:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iesetup.dll
[2013.12.11 23:59:49 | 000,032,768 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iernonce.dll
[2013.12.11 23:59:49 | 000,004,096 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollectorres.dll
[2013.12.11 23:59:48 | 000,112,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieUnatt.exe
[2013.12.11 23:59:48 | 000,108,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollector.exe
[2013.12.11 23:59:48 | 000,051,200 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwproxystub.dll
[2013.12.11 23:59:46 | 001,928,192 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\inetcpl.cpl
[2013.12.11 23:59:44 | 004,243,968 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript9.dll
[2013.12.11 22:35:05 | 000,126,976 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\cscript.exe
[2013.12.11 22:35:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\tzres.dll
[2013.12.11 22:34:52 | 002,349,056 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\win32k.sys
[2013.12.11 22:34:52 | 000,177,152 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\drivers\portcls.sys
[2013.12.11 22:34:52 | 000,081,408 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\drivers\drmk.sys
[2013.12.06 20:16:40 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEGA
[2013.12.06 20:16:40 | 000,000,000 | ---D | C] -- E:\Program Files\SEGA
[2013.12.06 20:16:34 | 000,000,000 | -H-D | C] -- E:\Program Files\InstallShield Installation Information
[2013.12.06 20:14:57 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\InstallShield
[2013.12.02 19:10:06 | 000,955,168 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvspcap.dll
[2013.12.02 19:06:20 | 022,951,200 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvoglv32.dll
[2013.12.02 19:06:20 | 015,218,504 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvd3dum.dll
[2013.12.02 19:06:20 | 010,446,112 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\drivers\nvlddmkm.sys
[2013.12.02 19:06:20 | 009,663,656 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuda.dll
[2013.12.02 19:06:20 | 009,619,872 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvopencl.dll
[2013.12.02 19:06:20 | 002,947,872 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuvid.dll
[2013.12.02 19:06:20 | 002,747,680 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuvenc.dll
[2013.12.02 19:06:20 | 001,049,888 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvdispco3233182.dll
[2013.12.02 19:06:20 | 000,893,728 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvdispgenco3233182.dll
[2013.12.02 19:06:20 | 000,609,568 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\NvFBC.dll
[2013.12.02 19:06:20 | 000,562,464 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\NvIFR.dll
[2013.12.02 19:06:19 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcompiler.dll
[2013.12.01 17:45:31 | 000,000,000 | ---D | C] -- E:\Users\Public\Desktop\Gothic 3 Modkit
[2013.12.01 17:45:31 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Modkit
[2013.12.01 17:31:51 | 000,239,960 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_7.dll
[2013.12.01 17:31:50 | 001,868,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dcsx_43.dll
[2013.12.01 17:31:50 | 000,470,880 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_43.dll
[2013.12.01 17:31:50 | 000,248,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx11_43.dll
[2013.12.01 17:31:49 | 005,501,792 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dcsx_42.dll
[2013.12.01 17:31:49 | 001,974,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_42.dll
[2013.12.01 17:31:49 | 000,528,216 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_6.dll
[2013.12.01 17:31:49 | 000,515,416 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_5.dll
[2013.12.01 17:31:49 | 000,238,936 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_6.dll
[2013.12.01 17:31:49 | 000,238,936 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_5.dll
[2013.12.01 17:31:49 | 000,235,344 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx11_42.dll
[2013.12.01 17:31:49 | 000,074,072 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_4.dll
[2013.12.01 17:31:48 | 004,178,264 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_41.dll
[2013.12.01 17:31:48 | 001,892,184 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_42.dll
[2013.12.01 17:31:48 | 001,846,632 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_41.dll
[2013.12.01 17:31:48 | 000,517,448 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_4.dll
[2013.12.01 17:31:48 | 000,453,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_42.dll
[2013.12.01 17:31:48 | 000,453,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_41.dll
[2013.12.01 17:31:48 | 000,235,352 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_4.dll
[2013.12.01 17:31:48 | 000,069,464 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_3.dll
[2013.12.01 17:31:47 | 004,379,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_40.dll
[2013.12.01 17:31:47 | 002,036,576 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_40.dll
[2013.12.01 17:31:47 | 001,493,528 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_39.dll
[2013.12.01 17:31:47 | 000,514,384 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_3.dll
[2013.12.01 17:31:47 | 000,509,448 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_2.dll
[2013.12.01 17:31:47 | 000,467,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_39.dll
[2013.12.01 17:31:47 | 000,452,440 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_40.dll
[2013.12.01 17:31:47 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_2.dll
[2013.12.01 17:31:47 | 000,235,856 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_3.dll
[2013.12.01 17:31:47 | 000,070,992 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_2.dll
[2013.12.01 17:31:47 | 000,068,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_1.dll
[2013.12.01 17:31:47 | 000,023,376 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_5.dll
[2013.12.01 17:31:47 | 000,022,360 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_6.dll
[2013.12.01 17:31:46 | 003,851,784 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_39.dll
[2013.12.01 17:31:46 | 003,850,760 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_38.dll
[2013.12.01 17:31:46 | 001,491,992 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_38.dll
[2013.12.01 17:31:46 | 000,507,400 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_1.dll
[2013.12.01 17:31:46 | 000,467,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_38.dll
[2013.12.01 17:31:46 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_1.dll
[2013.12.01 17:31:46 | 000,065,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_0.dll
[2013.12.01 17:31:46 | 000,025,608 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_4.dll
[2013.12.01 17:31:45 | 003,786,760 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_37.dll
[2013.12.01 17:31:45 | 003,734,536 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_36.dll
[2013.12.01 17:31:45 | 001,420,824 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_37.dll
[2013.12.01 17:31:45 | 001,374,232 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_36.dll
[2013.12.01 17:31:45 | 000,479,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_0.dll
[2013.12.01 17:31:45 | 000,462,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_37.dll
[2013.12.01 17:31:45 | 000,444,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_36.dll
[2013.12.01 17:31:45 | 000,267,272 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_10.dll
[2013.12.01 17:31:45 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_0.dll
[2013.12.01 17:31:45 | 000,025,608 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_3.dll
[2013.12.01 17:31:44 | 003,727,720 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_35.dll
[2013.12.01 17:31:44 | 001,358,192 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_35.dll
[2013.12.01 17:31:44 | 000,444,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_35.dll
[2013.12.01 17:31:44 | 000,267,112 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_9.dll
[2013.12.01 17:31:44 | 000,266,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_8.dll
[2013.12.01 17:31:44 | 000,017,928 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_2.dll
[2013.12.01 17:31:43 | 003,497,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_34.dll
[2013.12.01 17:31:43 | 003,495,784 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_33.dll
[2013.12.01 17:31:43 | 001,124,720 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_34.dll
[2013.12.01 17:31:43 | 001,123,696 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_33.dll
[2013.12.01 17:31:43 | 000,443,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_34.dll
[2013.12.01 17:31:43 | 000,443,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_33.dll
[2013.12.01 17:31:43 | 000,261,480 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_7.dll
[2013.12.01 17:31:42 | 003,426,072 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_32.dll
[2013.12.01 17:31:42 | 002,414,360 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_31.dll
[2013.12.01 17:31:42 | 000,440,080 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10.dll
[2013.12.01 17:31:42 | 000,255,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_6.dll
[2013.12.01 17:31:42 | 000,251,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_5.dll
[2013.12.01 17:31:42 | 000,237,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_4.dll
[2013.12.01 17:31:42 | 000,236,824 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_3.dll
[2013.12.01 17:31:42 | 000,062,744 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xinput1_2.dll
[2013.12.01 17:31:42 | 000,015,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\x3daudio1_1.dll
[2013.12.01 17:31:41 | 000,230,168 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_2.dll
[2013.12.01 17:31:41 | 000,229,584 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_1.dll
[2013.12.01 17:31:41 | 000,062,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xinput1_1.dll
[2013.12.01 17:31:38 | 002,388,176 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_30.dll
[2013.12.01 17:31:38 | 002,332,368 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_29.dll
[2013.12.01 17:31:38 | 002,323,664 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_28.dll
[2013.12.01 17:31:38 | 000,230,096 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_0.dll
[2013.12.01 17:31:38 | 000,014,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\x3daudio1_0.dll
[2013.12.01 17:31:37 | 002,337,488 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_25.dll
[2013.12.01 17:31:37 | 002,319,568 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_27.dll
[2013.12.01 17:31:37 | 002,297,552 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_26.dll
[2013.12.01 17:31:37 | 002,222,800 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_24.dll
[2013.12.01 17:29:47 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Enhanced Edition
[2013.12.01 17:29:43 | 000,000,000 | ---D | C] -- E:\Users\Kai\Documents\Gothic3
[2013.12.01 17:24:00 | 000,000,000 | ---D | C] -- E:\Program Files\Nordic Games
[2013.11.21 20:34:07 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\Avira
[2013.11.21 20:33:38 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013.11.21 20:33:29 | 000,135,648 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avipbb.sys
[2013.11.21 20:33:29 | 000,090,400 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avgntflt.sys
[2013.11.21 20:33:29 | 000,069,240 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avnetflt.sys
[2013.11.21 20:33:29 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avkmgr.sys
[2013.11.21 20:33:29 | 000,028,520 | ---- | C] (Avira GmbH) -- E:\Windows\System32\drivers\ssmdrv.sys
[2013.11.21 20:33:28 | 000,000,000 | ---D | C] -- E:\ProgramData\Avira
[2013.11.21 20:33:28 | 000,000,000 | ---D | C] -- E:\Program Files\Avira
[2013.11.21 17:12:59 | 000,000,000 | ---D | C] -- E:\Windows\pss
[2013.11.20 19:06:26 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013.11.19 22:20:14 | 000,646,144 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\MsSpellCheckingFacility.exe
[2013.11.19 22:20:14 | 000,645,120 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jsIntl.dll
[2013.11.19 22:20:14 | 000,194,048 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\elshyph.dll
[2013.11.19 22:20:14 | 000,071,680 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\RegisterIEPKEYs.exe
[2013.11.19 22:20:13 | 001,051,136 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtmlmedia.dll
[2013.11.19 22:20:13 | 000,616,104 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dat
[2013.11.19 22:20:13 | 000,523,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeeds.dll
[2013.11.19 22:20:13 | 000,367,104 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\dxtmsft.dll
[2013.11.19 22:20:13 | 000,337,408 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\html.iec
[2013.11.19 22:20:13 | 000,244,736 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\dxtrans.dll
[2013.11.19 22:20:13 | 000,238,288 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iedkcs32.dll
[2013.11.19 22:20:13 | 000,233,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\url.dll
[2013.11.19 22:20:13 | 000,182,272 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msls31.dll
[2013.11.19 22:20:13 | 000,164,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msrating.dll
[2013.11.19 22:20:13 | 000,151,552 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iexpress.exe
[2013.11.19 22:20:13 | 000,139,264 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\wextract.exe
[2013.11.19 22:20:13 | 000,083,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\inseng.dll
[2013.11.19 22:20:13 | 000,034,816 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\JavaScriptCollectionAgent.dll
[2013.11.19 22:20:13 | 000,024,576 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\licmgr10.dll
[2013.11.19 22:20:12 | 000,116,736 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iepeers.dll
[2013.11.19 22:20:12 | 000,111,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\IEAdvpack.dll
[2013.11.19 22:20:12 | 000,086,016 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iesysprep.dll
[2013.11.19 22:20:12 | 000,074,240 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\SetIEInstalledDate.exe
[2013.11.19 22:20:12 | 000,061,952 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\MshtmlDac.dll
[2013.11.19 22:20:12 | 000,056,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\pngfilt.dll
[2013.11.19 22:20:12 | 000,048,640 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtmler.dll
[2013.11.19 22:20:12 | 000,043,008 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeedsbs.dll
[2013.11.19 22:20:12 | 000,036,352 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\imgutil.dll
[2013.11.19 22:20:12 | 000,012,800 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeedssync.exe
[2013.11.19 22:19:37 | 003,969,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ntkrnlpa.exe
[2013.11.19 22:19:37 | 003,914,176 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ntoskrnl.exe
[2013.11.19 22:19:37 | 000,619,520 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\tdh.dll
 
========== Files - Modified Within 30 Days ==========
 
[2013.12.19 11:17:00 | 000,000,884 | ---- | M] () -- E:\Windows\tasks\Adobe Flash Player Updater.job
[2013.12.19 11:07:06 | 000,000,284 | ---- | M] () -- E:\Windows\tasks\DigitalSite.job
[2013.12.19 11:07:05 | 000,000,109 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\WB.CFG
[2013.12.19 11:07:05 | 000,000,006 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
[2013.12.19 11:03:01 | 000,000,284 | ---- | M] () -- E:\Windows\tasks\MySearchDial.job
[2013.12.19 10:49:05 | 000,022,576 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.12.19 10:49:05 | 000,022,576 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.12.19 10:48:17 | 000,710,730 | ---- | M] () -- E:\Windows\System32\perfh007.dat
[2013.12.19 10:48:17 | 000,655,758 | ---- | M] () -- E:\Windows\System32\perfh009.dat
[2013.12.19 10:48:17 | 000,152,002 | ---- | M] () -- E:\Windows\System32\perfc007.dat
[2013.12.19 10:48:17 | 000,124,498 | ---- | M] () -- E:\Windows\System32\perfc009.dat
[2013.12.19 10:41:12 | 000,067,584 | --S- | M] () -- E:\Windows\bootstat.dat
[2013.12.19 10:41:05 | 2415,370,240 | -HS- | M] () -- E:\hiberfil.sys
[2013.12.18 22:40:47 | 000,001,293 | ---- | M] () -- E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
[2013.12.16 17:40:30 | 000,002,399 | ---- | M] () -- E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
[2013.12.16 14:04:08 | 000,138,464 | ---- | M] () -- E:\Windows\System32\drivers\PnkBstrK.sys
[2013.12.16 14:03:42 | 000,000,682 | ---- | M] () -- E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
[2013.12.16 13:32:05 | 000,022,328 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
[2013.12.16 13:31:47 | 000,682,280 | ---- | M] () -- E:\Windows\System32\pbsvc.exe
[2013.12.14 15:52:38 | 000,000,592 | ---- | M] () -- E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
[2013.12.12 10:58:31 | 000,135,648 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avipbb.sys
[2013.12.12 10:58:31 | 000,090,400 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avgntflt.sys
[2013.12.12 10:58:31 | 000,069,240 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avnetflt.sys
[2013.12.12 10:48:58 | 000,278,272 | ---- | M] () -- E:\Windows\System32\FNTCACHE.DAT
[2013.12.11 12:18:01 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerApp.exe
[2013.12.11 12:18:01 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.12.06 20:26:45 | 000,002,074 | ---- | M] () -- E:\Users\Public\Desktop\Medieval II Total War.lnk
[2013.11.26 10:23:02 | 002,724,864 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtml.tlb
[2013.11.26 10:22:11 | 000,004,096 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollectorres.dll
[2013.11.26 09:53:56 | 000,061,952 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iesetup.dll
[2013.11.26 09:52:26 | 000,051,200 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwproxystub.dll
[2013.11.26 09:38:07 | 000,043,008 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jsproxy.dll
[2013.11.26 09:36:52 | 000,032,768 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iernonce.dll
[2013.11.26 09:32:08 | 000,440,832 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieui.dll
[2013.11.26 09:29:55 | 000,112,128 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieUnatt.exe
[2013.11.26 09:29:52 | 000,108,032 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollector.exe
[2013.11.26 09:28:16 | 000,553,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jscript9diag.dll
[2013.11.26 09:16:12 | 004,243,968 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jscript9.dll
[2013.11.26 09:13:00 | 000,208,896 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ie4uinit.exe
[2013.11.26 08:32:06 | 001,928,192 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\inetcpl.cpl
[2013.11.26 07:34:55 | 000,703,488 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dll
[2013.11.21 20:33:38 | 000,002,022 | ---- | M] () -- E:\Users\Public\Desktop\Avira Control Center.lnk
[2013.11.19 22:20:14 | 000,646,144 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\MsSpellCheckingFacility.exe
[2013.11.19 22:20:14 | 000,645,120 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jsIntl.dll
[2013.11.19 22:20:14 | 000,194,048 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\elshyph.dll
[2013.11.19 22:20:14 | 000,071,680 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\RegisterIEPKEYs.exe
[2013.11.19 22:20:13 | 001,051,136 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtmlmedia.dll
[2013.11.19 22:20:13 | 000,616,104 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dat
[2013.11.19 22:20:13 | 000,523,776 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeeds.dll
[2013.11.19 22:20:13 | 000,367,104 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\dxtmsft.dll
[2013.11.19 22:20:13 | 000,337,408 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\html.iec
[2013.11.19 22:20:13 | 000,244,736 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\dxtrans.dll
[2013.11.19 22:20:13 | 000,238,288 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iedkcs32.dll
[2013.11.19 22:20:13 | 000,233,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\url.dll
[2013.11.19 22:20:13 | 000,182,272 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msls31.dll
[2013.11.19 22:20:13 | 000,164,864 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msrating.dll
[2013.11.19 22:20:13 | 000,151,552 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iexpress.exe
[2013.11.19 22:20:13 | 000,139,264 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\wextract.exe
[2013.11.19 22:20:13 | 000,083,456 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\inseng.dll
[2013.11.19 22:20:13 | 000,034,816 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\JavaScriptCollectionAgent.dll
[2013.11.19 22:20:13 | 000,024,576 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\licmgr10.dll
[2013.11.19 22:20:13 | 000,016,284 | ---- | M] () -- E:\Windows\System32\ieuinit.inf
[2013.11.19 22:20:12 | 000,116,736 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iepeers.dll
[2013.11.19 22:20:12 | 000,111,616 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\IEAdvpack.dll
[2013.11.19 22:20:12 | 000,086,016 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iesysprep.dll
[2013.11.19 22:20:12 | 000,074,240 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\SetIEInstalledDate.exe
[2013.11.19 22:20:12 | 000,061,952 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\MshtmlDac.dll
[2013.11.19 22:20:12 | 000,056,832 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\pngfilt.dll
[2013.11.19 22:20:12 | 000,048,640 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtmler.dll
[2013.11.19 22:20:12 | 000,043,008 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeedsbs.dll
[2013.11.19 22:20:12 | 000,036,352 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\imgutil.dll
[2013.11.19 22:20:12 | 000,012,800 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeedssync.exe
[2013.11.19 22:19:37 | 003,969,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ntkrnlpa.exe
[2013.11.19 22:19:37 | 003,914,176 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ntoskrnl.exe
[2013.11.19 22:19:37 | 000,619,520 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\tdh.dll
 
========== Files Created - No Company Name ==========
 
[2013.12.18 22:43:29 | 000,002,441 | ---- | C] () -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2013.12.18 22:40:47 | 000,001,293 | ---- | C] () -- E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
[2013.12.16 17:40:30 | 000,002,399 | ---- | C] () -- E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
[2013.12.16 14:03:42 | 000,000,682 | ---- | C] () -- E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
[2013.12.16 13:32:05 | 000,138,464 | ---- | C] () -- E:\Windows\System32\drivers\PnkBstrK.sys
[2013.12.16 13:32:05 | 000,022,328 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
[2013.12.16 13:31:49 | 000,111,928 | ---- | C] () -- E:\Windows\System32\PnkBstrB.exe
[2013.12.16 13:31:47 | 000,066,872 | ---- | C] () -- E:\Windows\System32\PnkBstrA.exe
[2013.12.16 13:31:46 | 000,682,280 | ---- | C] () -- E:\Windows\System32\pbsvc.exe
[2013.12.14 15:52:38 | 000,000,592 | ---- | C] () -- E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
[2013.12.06 20:26:45 | 000,002,074 | ---- | C] () -- E:\Users\Public\Desktop\Medieval II Total War.lnk
[2013.11.21 20:33:38 | 000,002,022 | ---- | C] () -- E:\Users\Public\Desktop\Avira Control Center.lnk
[2013.11.19 22:20:13 | 000,016,284 | ---- | C] () -- E:\Windows\System32\ieuinit.inf
[2013.10.30 19:02:16 | 000,000,006 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
[2013.10.30 19:02:15 | 000,000,109 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\WB.CFG
[2013.10.25 14:03:48 | 000,645,632 | ---- | C] () -- E:\Windows\System32\xvidcore.dll
[2013.10.25 14:03:48 | 000,240,640 | ---- | C] () -- E:\Windows\System32\xvidvfw.dll
[2013.10.25 14:03:48 | 000,178,688 | ---- | C] () -- E:\Windows\System32\unrar.dll
[2013.10.25 14:03:48 | 000,079,360 | ---- | C] () -- E:\Windows\System32\ff_vfw.dll
[2013.10.25 14:03:41 | 000,715,038 | ---- | C] () -- E:\Windows\unins000.exe
[2013.10.25 14:03:41 | 000,216,064 | ---- | C] ( ) -- E:\Windows\System32\lagarith.dll
[2013.10.25 14:03:41 | 000,001,780 | ---- | C] () -- E:\Windows\unins000.dat
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- E:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013.10.25 14:03:48 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
[2013.10.25 14:03:40 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\CDXReader
[2013.10.25 14:02:53 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\DigitalSite
[2013.10.25 14:03:42 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\LavFilters
[2013.10.25 14:03:02 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\mysearchdial
[2013.10.30 22:52:36 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\Systweak
 
========== Purity Check ==========
 
 

< End of report >

Grandpakai · 19.12.2013, 13:50

und hier noch OTL und Extras

Code:

ATTFilter

OTL logfile created on: 19.12.2013 11:32:08 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = E:\Users\Kai\Downloads
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16476)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,82 Gb Available Physical Memory | 60,67% Memory free
6,00 Gb Paging File | 4,31 Gb Available in Paging File | 71,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = E: | %SystemRoot% = E:\Windows | %ProgramFiles% = E:\Program Files
Drive C: | 146,48 Gb Total Space | 142,12 Gb Free Space | 97,03% Space Free | Partition Type: NTFS
Drive D: | 1,88 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 78,13 Gb Total Space | 8,07 Gb Free Space | 10,33% Space Free | Partition Type: NTFS
 
Computer Name: KAI-PC | User Name: Kai | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - E:\Users\Kai\Downloads\OTL.exe (OldTimer Tools)
PRC - E:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.)
PRC - E:\Programme\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - E:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
PRC - E:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
PRC - E:\Programme\MyPC Backup\BackupStack.exe (Just Develop It)
PRC - E:\Programme\DivX\DivX Update\DivXUpdate.exe ()
PRC - E:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - E:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - E:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - E:\Windows\explorer.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - E:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - E:\Windows\System32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
MOD - E:\Programme\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - E:\Programme\DivX\DivX Update\DivXUpdate.exe ()
 
 
========== Services (SafeList) ==========
 
SRV - (MozillaMaintenance) -- E:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AntiVirSchedulerService) -- E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) -- E:\Programme\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
SRV - (Steam Client Service) -- E:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) -- E:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (IEEtwCollectorService) -- E:\Windows\System32\IEEtwCollector.exe (Microsoft Corporation)
SRV - (NvStreamSvc) -- E:\Programme\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation)
SRV - (nvUpdatusService) -- E:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- E:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (AntiVirService) -- E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (APNMCP) -- E:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
SRV - (BackupStack) -- E:\Programme\MyPC Backup\BackupStack.exe (Just Develop It)
SRV - (WinDefend) -- E:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AdobeARMservice) -- E:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (WMPNetworkSvc) -- E:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (SensrSvc) -- E:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (avipbb) -- E:\Windows\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- E:\Windows\System32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avnetflt) -- E:\Windows\System32\drivers\avnetflt.sys (Avira Operations GmbH & Co. KG)
DRV - (nvlddmkm) -- E:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (ssmdrv) -- E:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avkmgr) -- E:\Windows\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (nvvad_WaveExtensible) -- E:\Windows\System32\drivers\nvvad32v.sys (NVIDIA Corporation)
DRV - (TsUsbFlt) -- E:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (NVENETFD) -- E:\Windows\System32\drivers\nvm62x32.sys (NVIDIA Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKLM\..\SearchScopes\{724ADDFC-63B1-C60D-26B0-28119C33B4FC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3F CE DE 4E 71 D1 CE 01  [binary data]
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes\{724ADDFC-63B1-C60D-26B0-28119C33B4FC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: E:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: E:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: E:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins
 
[2013.10.29 20:29:49 | 000,000,000 | ---D | M] (No name found) -- E:\Users\Kai\AppData\Roaming\mozilla\Extensions
[2013.12.12 12:31:09 | 000,000,000 | ---D | M] (No name found) -- E:\Programme\Mozilla Firefox\browser\extensions
[2013.12.12 12:31:16 | 000,000,000 | ---D | M] (Default) -- E:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - E:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\Toolbar\WebBrowser: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O4 - HKLM..\Run: [ApnTBMon] E:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [avgnt] E:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [DivXMediaServer] E:\Programme\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] E:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Nvtmru] E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [ShadowPlay] E:\Windows\System32\nvspcap.dll (NVIDIA Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] E:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] E:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1724954217-4260448841-1615121279-1004..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CB30BC81-0965-4AFC-B69B-13FAA5116A0E}: DhcpNameServer = 192.168.2.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (E:\Windows\system32\userinit.exe) - E:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - E:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.10.25 10:26:52 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2012.05.09 12:18:40 | 000,000,076 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{720aaa0f-3d63-11e3-8a43-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{720aaa0f-3d63-11e3-8a43-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe -- [2012.05.09 12:50:51 | 001,537,332 | R--- | M] (1C Company.                                                 )
O33 - MountPoints2\{8468eced-40ce-11e3-b37b-0019664221ef}\Shell - "" = AutoRun
O33 - MountPoints2\{8468eced-40ce-11e3-b37b-0019664221ef}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.12.18 22:43:10 | 000,000,000 | ---D | C] -- E:\Program Files\Common Files\Adobe
[2013.12.18 22:43:10 | 000,000,000 | ---D | C] -- E:\Program Files\Adobe
[2013.12.18 22:42:32 | 000,000,000 | ---D | C] -- E:\ProgramData\Adobe
[2013.12.18 22:40:46 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C Company
[2013.12.18 22:37:58 | 000,000,000 | ---D | C] -- E:\Program Files\1C Company
[2013.12.16 17:43:54 | 000,000,000 | ---D | C] -- E:\Users\Kai\Documents\Gothic3ForsakenGods
[2013.12.16 17:40:29 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Götterdämmerung Enhanced Edition
[2013.12.16 13:34:16 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Local\PunkBuster
[2013.12.16 13:34:10 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Local\Activision
[2013.12.16 13:19:53 | 000,000,000 | ---D | C] -- E:\Program Files\Activision
[2013.12.14 15:55:11 | 000,000,000 | ---D | C] -- E:\Program Files\Common Files\Steam
[2013.12.14 15:55:10 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2013.12.14 15:55:10 | 000,000,000 | ---D | C] -- E:\Program Files\Steam
[2013.12.14 15:48:32 | 000,000,000 | ---D | C] -- E:\ProgramData\Media Center Programs
[2013.12.14 15:34:57 | 000,000,000 | ---D | C] -- E:\Program Files\THQ
[2013.12.14 15:33:39 | 000,000,000 | -HSD | C] -- E:\Windows\ftpcache
[2013.12.12 12:31:09 | 000,000,000 | ---D | C] -- E:\Program Files\Mozilla Firefox
[2013.12.11 23:59:51 | 002,724,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtml.tlb
[2013.12.11 23:59:51 | 000,208,896 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ie4uinit.exe
[2013.12.11 23:59:50 | 000,043,008 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jsproxy.dll
[2013.12.11 23:59:49 | 000,703,488 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dll
[2013.12.11 23:59:49 | 000,553,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript9diag.dll
[2013.12.11 23:59:49 | 000,440,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieui.dll
[2013.12.11 23:59:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iesetup.dll
[2013.12.11 23:59:49 | 000,032,768 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iernonce.dll
[2013.12.11 23:59:49 | 000,004,096 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollectorres.dll
[2013.12.11 23:59:48 | 000,112,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieUnatt.exe
[2013.12.11 23:59:48 | 000,108,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollector.exe
[2013.12.11 23:59:48 | 000,051,200 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwproxystub.dll
[2013.12.11 23:59:46 | 001,928,192 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\inetcpl.cpl
[2013.12.11 23:59:44 | 004,243,968 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript9.dll
[2013.12.11 22:35:05 | 000,126,976 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\cscript.exe
[2013.12.11 22:35:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\tzres.dll
[2013.12.11 22:34:52 | 002,349,056 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\win32k.sys
[2013.12.11 22:34:52 | 000,177,152 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\drivers\portcls.sys
[2013.12.11 22:34:52 | 000,081,408 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\drivers\drmk.sys
[2013.12.06 20:16:40 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEGA
[2013.12.06 20:16:40 | 000,000,000 | ---D | C] -- E:\Program Files\SEGA
[2013.12.06 20:16:34 | 000,000,000 | -H-D | C] -- E:\Program Files\InstallShield Installation Information
[2013.12.06 20:14:57 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\InstallShield
[2013.12.02 19:10:06 | 000,955,168 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvspcap.dll
[2013.12.02 19:06:20 | 022,951,200 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvoglv32.dll
[2013.12.02 19:06:20 | 015,218,504 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvd3dum.dll
[2013.12.02 19:06:20 | 010,446,112 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\drivers\nvlddmkm.sys
[2013.12.02 19:06:20 | 009,663,656 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuda.dll
[2013.12.02 19:06:20 | 009,619,872 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvopencl.dll
[2013.12.02 19:06:20 | 002,947,872 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuvid.dll
[2013.12.02 19:06:20 | 002,747,680 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuvenc.dll
[2013.12.02 19:06:20 | 001,049,888 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvdispco3233182.dll
[2013.12.02 19:06:20 | 000,893,728 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvdispgenco3233182.dll
[2013.12.02 19:06:20 | 000,609,568 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\NvFBC.dll
[2013.12.02 19:06:20 | 000,562,464 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\NvIFR.dll
[2013.12.02 19:06:19 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcompiler.dll
[2013.12.01 17:45:31 | 000,000,000 | ---D | C] -- E:\Users\Public\Desktop\Gothic 3 Modkit
[2013.12.01 17:45:31 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Modkit
[2013.12.01 17:31:51 | 000,239,960 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_7.dll
[2013.12.01 17:31:50 | 001,868,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dcsx_43.dll
[2013.12.01 17:31:50 | 000,470,880 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_43.dll
[2013.12.01 17:31:50 | 000,248,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx11_43.dll
[2013.12.01 17:31:49 | 005,501,792 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dcsx_42.dll
[2013.12.01 17:31:49 | 001,974,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_42.dll
[2013.12.01 17:31:49 | 000,528,216 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_6.dll
[2013.12.01 17:31:49 | 000,515,416 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_5.dll
[2013.12.01 17:31:49 | 000,238,936 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_6.dll
[2013.12.01 17:31:49 | 000,238,936 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_5.dll
[2013.12.01 17:31:49 | 000,235,344 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx11_42.dll
[2013.12.01 17:31:49 | 000,074,072 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_4.dll
[2013.12.01 17:31:48 | 004,178,264 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_41.dll
[2013.12.01 17:31:48 | 001,892,184 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_42.dll
[2013.12.01 17:31:48 | 001,846,632 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_41.dll
[2013.12.01 17:31:48 | 000,517,448 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_4.dll
[2013.12.01 17:31:48 | 000,453,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_42.dll
[2013.12.01 17:31:48 | 000,453,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_41.dll
[2013.12.01 17:31:48 | 000,235,352 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_4.dll
[2013.12.01 17:31:48 | 000,069,464 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_3.dll
[2013.12.01 17:31:47 | 004,379,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_40.dll
[2013.12.01 17:31:47 | 002,036,576 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_40.dll
[2013.12.01 17:31:47 | 001,493,528 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_39.dll
[2013.12.01 17:31:47 | 000,514,384 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_3.dll
[2013.12.01 17:31:47 | 000,509,448 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_2.dll
[2013.12.01 17:31:47 | 000,467,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_39.dll
[2013.12.01 17:31:47 | 000,452,440 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_40.dll
[2013.12.01 17:31:47 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_2.dll
[2013.12.01 17:31:47 | 000,235,856 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_3.dll
[2013.12.01 17:31:47 | 000,070,992 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_2.dll
[2013.12.01 17:31:47 | 000,068,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_1.dll
[2013.12.01 17:31:47 | 000,023,376 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_5.dll
[2013.12.01 17:31:47 | 000,022,360 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_6.dll
[2013.12.01 17:31:46 | 003,851,784 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_39.dll
[2013.12.01 17:31:46 | 003,850,760 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_38.dll
[2013.12.01 17:31:46 | 001,491,992 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_38.dll
[2013.12.01 17:31:46 | 000,507,400 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_1.dll
[2013.12.01 17:31:46 | 000,467,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_38.dll
[2013.12.01 17:31:46 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_1.dll
[2013.12.01 17:31:46 | 000,065,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_0.dll
[2013.12.01 17:31:46 | 000,025,608 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_4.dll
[2013.12.01 17:31:45 | 003,786,760 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_37.dll
[2013.12.01 17:31:45 | 003,734,536 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_36.dll
[2013.12.01 17:31:45 | 001,420,824 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_37.dll
[2013.12.01 17:31:45 | 001,374,232 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_36.dll
[2013.12.01 17:31:45 | 000,479,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_0.dll
[2013.12.01 17:31:45 | 000,462,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_37.dll
[2013.12.01 17:31:45 | 000,444,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_36.dll
[2013.12.01 17:31:45 | 000,267,272 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_10.dll
[2013.12.01 17:31:45 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_0.dll
[2013.12.01 17:31:45 | 000,025,608 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_3.dll
[2013.12.01 17:31:44 | 003,727,720 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_35.dll
[2013.12.01 17:31:44 | 001,358,192 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_35.dll
[2013.12.01 17:31:44 | 000,444,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_35.dll
[2013.12.01 17:31:44 | 000,267,112 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_9.dll
[2013.12.01 17:31:44 | 000,266,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_8.dll
[2013.12.01 17:31:44 | 000,017,928 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_2.dll
[2013.12.01 17:31:43 | 003,497,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_34.dll
[2013.12.01 17:31:43 | 003,495,784 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_33.dll
[2013.12.01 17:31:43 | 001,124,720 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_34.dll
[2013.12.01 17:31:43 | 001,123,696 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_33.dll
[2013.12.01 17:31:43 | 000,443,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_34.dll
[2013.12.01 17:31:43 | 000,443,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_33.dll
[2013.12.01 17:31:43 | 000,261,480 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_7.dll
[2013.12.01 17:31:42 | 003,426,072 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_32.dll
[2013.12.01 17:31:42 | 002,414,360 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_31.dll
[2013.12.01 17:31:42 | 000,440,080 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10.dll
[2013.12.01 17:31:42 | 000,255,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_6.dll
[2013.12.01 17:31:42 | 000,251,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_5.dll
[2013.12.01 17:31:42 | 000,237,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_4.dll
[2013.12.01 17:31:42 | 000,236,824 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_3.dll
[2013.12.01 17:31:42 | 000,062,744 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xinput1_2.dll
[2013.12.01 17:31:42 | 000,015,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\x3daudio1_1.dll
[2013.12.01 17:31:41 | 000,230,168 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_2.dll
[2013.12.01 17:31:41 | 000,229,584 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_1.dll
[2013.12.01 17:31:41 | 000,062,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xinput1_1.dll
[2013.12.01 17:31:38 | 002,388,176 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_30.dll
[2013.12.01 17:31:38 | 002,332,368 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_29.dll
[2013.12.01 17:31:38 | 002,323,664 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_28.dll
[2013.12.01 17:31:38 | 000,230,096 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_0.dll
[2013.12.01 17:31:38 | 000,014,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\x3daudio1_0.dll
[2013.12.01 17:31:37 | 002,337,488 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_25.dll
[2013.12.01 17:31:37 | 002,319,568 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_27.dll
[2013.12.01 17:31:37 | 002,297,552 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_26.dll
[2013.12.01 17:31:37 | 002,222,800 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_24.dll
[2013.12.01 17:29:47 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Enhanced Edition
[2013.12.01 17:29:43 | 000,000,000 | ---D | C] -- E:\Users\Kai\Documents\Gothic3
[2013.12.01 17:24:00 | 000,000,000 | ---D | C] -- E:\Program Files\Nordic Games
[2013.11.21 20:34:07 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\Avira
[2013.11.21 20:33:38 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013.11.21 20:33:29 | 000,135,648 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avipbb.sys
[2013.11.21 20:33:29 | 000,090,400 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avgntflt.sys
[2013.11.21 20:33:29 | 000,069,240 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avnetflt.sys
[2013.11.21 20:33:29 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avkmgr.sys
[2013.11.21 20:33:29 | 000,028,520 | ---- | C] (Avira GmbH) -- E:\Windows\System32\drivers\ssmdrv.sys
[2013.11.21 20:33:28 | 000,000,000 | ---D | C] -- E:\ProgramData\Avira
[2013.11.21 20:33:28 | 000,000,000 | ---D | C] -- E:\Program Files\Avira
[2013.11.21 17:12:59 | 000,000,000 | ---D | C] -- E:\Windows\pss
[2013.11.20 19:06:26 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013.11.19 22:20:14 | 000,646,144 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\MsSpellCheckingFacility.exe
[2013.11.19 22:20:14 | 000,645,120 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jsIntl.dll
[2013.11.19 22:20:14 | 000,194,048 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\elshyph.dll
[2013.11.19 22:20:14 | 000,071,680 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\RegisterIEPKEYs.exe
[2013.11.19 22:20:13 | 001,051,136 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtmlmedia.dll
[2013.11.19 22:20:13 | 000,616,104 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dat
[2013.11.19 22:20:13 | 000,523,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeeds.dll
[2013.11.19 22:20:13 | 000,367,104 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\dxtmsft.dll
[2013.11.19 22:20:13 | 000,337,408 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\html.iec
[2013.11.19 22:20:13 | 000,244,736 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\dxtrans.dll
[2013.11.19 22:20:13 | 000,238,288 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iedkcs32.dll
[2013.11.19 22:20:13 | 000,233,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\url.dll
[2013.11.19 22:20:13 | 000,182,272 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msls31.dll
[2013.11.19 22:20:13 | 000,164,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msrating.dll
[2013.11.19 22:20:13 | 000,151,552 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iexpress.exe
[2013.11.19 22:20:13 | 000,139,264 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\wextract.exe
[2013.11.19 22:20:13 | 000,083,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\inseng.dll
[2013.11.19 22:20:13 | 000,034,816 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\JavaScriptCollectionAgent.dll
[2013.11.19 22:20:13 | 000,024,576 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\licmgr10.dll
[2013.11.19 22:20:12 | 000,116,736 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iepeers.dll
[2013.11.19 22:20:12 | 000,111,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\IEAdvpack.dll
[2013.11.19 22:20:12 | 000,086,016 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iesysprep.dll
[2013.11.19 22:20:12 | 000,074,240 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\SetIEInstalledDate.exe
[2013.11.19 22:20:12 | 000,061,952 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\MshtmlDac.dll
[2013.11.19 22:20:12 | 000,056,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\pngfilt.dll
[2013.11.19 22:20:12 | 000,048,640 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtmler.dll
[2013.11.19 22:20:12 | 000,043,008 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeedsbs.dll
[2013.11.19 22:20:12 | 000,036,352 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\imgutil.dll
[2013.11.19 22:20:12 | 000,012,800 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeedssync.exe
[2013.11.19 22:19:37 | 003,969,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ntkrnlpa.exe
[2013.11.19 22:19:37 | 003,914,176 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ntoskrnl.exe
[2013.11.19 22:19:37 | 000,619,520 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\tdh.dll
 
========== Files - Modified Within 30 Days ==========
 
[2013.12.19 11:17:00 | 000,000,884 | ---- | M] () -- E:\Windows\tasks\Adobe Flash Player Updater.job
[2013.12.19 11:07:06 | 000,000,284 | ---- | M] () -- E:\Windows\tasks\DigitalSite.job
[2013.12.19 11:07:05 | 000,000,109 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\WB.CFG
[2013.12.19 11:07:05 | 000,000,006 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
[2013.12.19 11:03:01 | 000,000,284 | ---- | M] () -- E:\Windows\tasks\MySearchDial.job
[2013.12.19 10:49:05 | 000,022,576 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.12.19 10:49:05 | 000,022,576 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.12.19 10:48:17 | 000,710,730 | ---- | M] () -- E:\Windows\System32\perfh007.dat
[2013.12.19 10:48:17 | 000,655,758 | ---- | M] () -- E:\Windows\System32\perfh009.dat
[2013.12.19 10:48:17 | 000,152,002 | ---- | M] () -- E:\Windows\System32\perfc007.dat
[2013.12.19 10:48:17 | 000,124,498 | ---- | M] () -- E:\Windows\System32\perfc009.dat
[2013.12.19 10:41:12 | 000,067,584 | --S- | M] () -- E:\Windows\bootstat.dat
[2013.12.19 10:41:05 | 2415,370,240 | -HS- | M] () -- E:\hiberfil.sys
[2013.12.18 22:40:47 | 000,001,293 | ---- | M] () -- E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
[2013.12.16 17:40:30 | 000,002,399 | ---- | M] () -- E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
[2013.12.16 14:04:08 | 000,138,464 | ---- | M] () -- E:\Windows\System32\drivers\PnkBstrK.sys
[2013.12.16 14:03:42 | 000,000,682 | ---- | M] () -- E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
[2013.12.16 13:32:05 | 000,022,328 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
[2013.12.16 13:31:47 | 000,682,280 | ---- | M] () -- E:\Windows\System32\pbsvc.exe
[2013.12.14 15:52:38 | 000,000,592 | ---- | M] () -- E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
[2013.12.12 10:58:31 | 000,135,648 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avipbb.sys
[2013.12.12 10:58:31 | 000,090,400 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avgntflt.sys
[2013.12.12 10:58:31 | 000,069,240 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avnetflt.sys
[2013.12.12 10:48:58 | 000,278,272 | ---- | M] () -- E:\Windows\System32\FNTCACHE.DAT
[2013.12.11 12:18:01 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerApp.exe
[2013.12.11 12:18:01 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.12.06 20:26:45 | 000,002,074 | ---- | M] () -- E:\Users\Public\Desktop\Medieval II Total War.lnk
[2013.11.26 10:23:02 | 002,724,864 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtml.tlb
[2013.11.26 10:22:11 | 000,004,096 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollectorres.dll
[2013.11.26 09:53:56 | 000,061,952 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iesetup.dll
[2013.11.26 09:52:26 | 000,051,200 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwproxystub.dll
[2013.11.26 09:38:07 | 000,043,008 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jsproxy.dll
[2013.11.26 09:36:52 | 000,032,768 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iernonce.dll
[2013.11.26 09:32:08 | 000,440,832 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieui.dll
[2013.11.26 09:29:55 | 000,112,128 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieUnatt.exe
[2013.11.26 09:29:52 | 000,108,032 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollector.exe
[2013.11.26 09:28:16 | 000,553,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jscript9diag.dll
[2013.11.26 09:16:12 | 004,243,968 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jscript9.dll
[2013.11.26 09:13:00 | 000,208,896 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ie4uinit.exe
[2013.11.26 08:32:06 | 001,928,192 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\inetcpl.cpl
[2013.11.26 07:34:55 | 000,703,488 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dll
[2013.11.21 20:33:38 | 000,002,022 | ---- | M] () -- E:\Users\Public\Desktop\Avira Control Center.lnk
[2013.11.19 22:20:14 | 000,646,144 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\MsSpellCheckingFacility.exe
[2013.11.19 22:20:14 | 000,645,120 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jsIntl.dll
[2013.11.19 22:20:14 | 000,194,048 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\elshyph.dll
[2013.11.19 22:20:14 | 000,071,680 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\RegisterIEPKEYs.exe
[2013.11.19 22:20:13 | 001,051,136 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtmlmedia.dll
[2013.11.19 22:20:13 | 000,616,104 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dat
[2013.11.19 22:20:13 | 000,523,776 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeeds.dll
[2013.11.19 22:20:13 | 000,367,104 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\dxtmsft.dll
[2013.11.19 22:20:13 | 000,337,408 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\html.iec
[2013.11.19 22:20:13 | 000,244,736 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\dxtrans.dll
[2013.11.19 22:20:13 | 000,238,288 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iedkcs32.dll
[2013.11.19 22:20:13 | 000,233,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\url.dll
[2013.11.19 22:20:13 | 000,182,272 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msls31.dll
[2013.11.19 22:20:13 | 000,164,864 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msrating.dll
[2013.11.19 22:20:13 | 000,151,552 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iexpress.exe
[2013.11.19 22:20:13 | 000,139,264 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\wextract.exe
[2013.11.19 22:20:13 | 000,083,456 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\inseng.dll
[2013.11.19 22:20:13 | 000,034,816 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\JavaScriptCollectionAgent.dll
[2013.11.19 22:20:13 | 000,024,576 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\licmgr10.dll
[2013.11.19 22:20:13 | 000,016,284 | ---- | M] () -- E:\Windows\System32\ieuinit.inf
[2013.11.19 22:20:12 | 000,116,736 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iepeers.dll
[2013.11.19 22:20:12 | 000,111,616 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\IEAdvpack.dll
[2013.11.19 22:20:12 | 000,086,016 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iesysprep.dll
[2013.11.19 22:20:12 | 000,074,240 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\SetIEInstalledDate.exe
[2013.11.19 22:20:12 | 000,061,952 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\MshtmlDac.dll
[2013.11.19 22:20:12 | 000,056,832 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\pngfilt.dll
[2013.11.19 22:20:12 | 000,048,640 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtmler.dll
[2013.11.19 22:20:12 | 000,043,008 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeedsbs.dll
[2013.11.19 22:20:12 | 000,036,352 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\imgutil.dll
[2013.11.19 22:20:12 | 000,012,800 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeedssync.exe
[2013.11.19 22:19:37 | 003,969,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ntkrnlpa.exe
[2013.11.19 22:19:37 | 003,914,176 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ntoskrnl.exe
[2013.11.19 22:19:37 | 000,619,520 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\tdh.dll
 
========== Files Created - No Company Name ==========
 
[2013.12.18 22:43:29 | 000,002,441 | ---- | C] () -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2013.12.18 22:40:47 | 000,001,293 | ---- | C] () -- E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
[2013.12.16 17:40:30 | 000,002,399 | ---- | C] () -- E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
[2013.12.16 14:03:42 | 000,000,682 | ---- | C] () -- E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
[2013.12.16 13:32:05 | 000,138,464 | ---- | C] () -- E:\Windows\System32\drivers\PnkBstrK.sys
[2013.12.16 13:32:05 | 000,022,328 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
[2013.12.16 13:31:49 | 000,111,928 | ---- | C] () -- E:\Windows\System32\PnkBstrB.exe
[2013.12.16 13:31:47 | 000,066,872 | ---- | C] () -- E:\Windows\System32\PnkBstrA.exe
[2013.12.16 13:31:46 | 000,682,280 | ---- | C] () -- E:\Windows\System32\pbsvc.exe
[2013.12.14 15:52:38 | 000,000,592 | ---- | C] () -- E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
[2013.12.06 20:26:45 | 000,002,074 | ---- | C] () -- E:\Users\Public\Desktop\Medieval II Total War.lnk
[2013.11.21 20:33:38 | 000,002,022 | ---- | C] () -- E:\Users\Public\Desktop\Avira Control Center.lnk
[2013.11.19 22:20:13 | 000,016,284 | ---- | C] () -- E:\Windows\System32\ieuinit.inf
[2013.10.30 19:02:16 | 000,000,006 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
[2013.10.30 19:02:15 | 000,000,109 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\WB.CFG
[2013.10.25 14:03:48 | 000,645,632 | ---- | C] () -- E:\Windows\System32\xvidcore.dll
[2013.10.25 14:03:48 | 000,240,640 | ---- | C] () -- E:\Windows\System32\xvidvfw.dll
[2013.10.25 14:03:48 | 000,178,688 | ---- | C] () -- E:\Windows\System32\unrar.dll
[2013.10.25 14:03:48 | 000,079,360 | ---- | C] () -- E:\Windows\System32\ff_vfw.dll
[2013.10.25 14:03:41 | 000,715,038 | ---- | C] () -- E:\Windows\unins000.exe
[2013.10.25 14:03:41 | 000,216,064 | ---- | C] ( ) -- E:\Windows\System32\lagarith.dll
[2013.10.25 14:03:41 | 000,001,780 | ---- | C] () -- E:\Windows\unins000.dat
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- E:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013.10.25 14:03:48 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
[2013.10.25 14:03:40 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\CDXReader
[2013.10.25 14:02:53 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\DigitalSite
[2013.10.25 14:03:42 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\LavFilters
[2013.10.25 14:03:02 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\mysearchdial
[2013.10.30 22:52:36 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\Systweak
 
========== Purity Check ==========
 
 

< End of report >

Code:

ATTFilter

OTL Extras logfile created on: 19.12.2013 11:32:08 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = E:\Users\Kai\Downloads
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16476)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,82 Gb Available Physical Memory | 60,67% Memory free
6,00 Gb Paging File | 4,31 Gb Available in Paging File | 71,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = E: | %SystemRoot% = E:\Windows | %ProgramFiles% = E:\Program Files
Drive C: | 146,48 Gb Total Space | 142,12 Gb Free Space | 97,03% Space Free | Partition Type: NTFS
Drive D: | 1,88 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 78,13 Gb Total Space | 8,07 Gb Free Space | 10,33% Space Free | Partition Type: NTFS
 
Computer Name: KAI-PC | User Name: Kai | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- E:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- E:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- E:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03F9CBD6-94A2-43E3-A5C5-7808FE32469D}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{0F1E07AE-A504-4F66-8074-D649F25F797F}" = lport=445 | protocol=6 | dir=in | app=system | 
"{1E9CBA90-EDA5-4145-9E8B-0AB81B7F4358}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{25CA41EE-292F-46FE-A19F-653A6DE3E3BC}" = lport=5353 | protocol=17 | dir=in | app=e:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | 
"{28966D9F-C6F1-4908-AB6B-090E50F51B54}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{2ADA8DE0-DBD6-4B1C-973E-8588C59082C2}" = lport=47991 | protocol=6 | dir=in | app=e:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{36081A05-FC48-4078-8DF2-BB807559EAC9}" = lport=48000 | protocol=17 | dir=in | app=e:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{489AA02B-5FBB-4BDC-8C46-91233CEB4033}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{578D609E-8E6B-4AD1-997F-462424479B2B}" = lport=138 | protocol=17 | dir=in | app=system | 
"{5CFDD733-3E2C-47DD-9973-45D1BB1FE8CA}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{6423B9A5-D308-452E-AD6F-5612907E1D31}" = lport=47987 | protocol=6 | dir=in | app=e:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | 
"{649AFF1A-40F9-41B3-8BD2-3C4286C756BC}" = rport=139 | protocol=6 | dir=out | app=system | 
"{6731FFF7-2532-4359-B5A8-852B51405ABE}" = lport=137 | protocol=17 | dir=in | app=system | 
"{67B76677-095E-469C-A978-74132443C255}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{7101DFC2-37E0-448C-A822-2D934E76F62C}" = lport=48000 | protocol=17 | dir=in | app=e:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{734DAC63-06FF-4B64-9A16-A95ED4F923A0}" = lport=139 | protocol=6 | dir=in | app=system | 
"{76A93CC9-F805-4C37-A3FA-5C92062559D0}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{7C9DE623-2235-48A5-AA96-56BF536FFEE9}" = lport=47987 | protocol=6 | dir=in | app=e:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | 
"{847328DA-B2C3-4914-B974-87283427E9E0}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{B12A3AF3-7024-4C69-A123-30BAD611F947}" = rport=445 | protocol=6 | dir=out | app=system | 
"{CE4BCC1C-E01C-4082-A775-42A9804B2904}" = rport=138 | protocol=17 | dir=out | app=system | 
"{D78B1D80-149D-4B0A-B140-5B7E4A9EEE01}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{D82AC599-2114-44C8-9BF6-91DA059517C0}" = lport=47991 | protocol=6 | dir=in | app=e:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{DD170D8F-A09A-44BC-9CD6-4C561520DA93}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{DE4CA733-2FAF-444A-A86A-81DF3ECE0440}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{E09EE1E1-792E-481B-B7EC-48FA815B04F2}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E4D173AB-1C18-4DE8-8506-CFDFDCAEC61D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{E84AC004-5439-4EF1-88DD-914C83E3BF53}" = rport=137 | protocol=17 | dir=out | app=system | 
"{E9618047-303B-4A6A-84B7-96400C4A90AF}" = lport=5353 | protocol=17 | dir=in | app=e:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01CF6B6C-6C2A-4021-B8C4-9E7A26377F89}" = protocol=6 | dir=in | app=e:\program files\landwirtschafts simulator 2013\farmingsimulator2013.exe | 
"{04C04F5D-F31D-46BA-ABAD-8BB8D35013BE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{092D750F-7B4E-4CB1-A19E-AA61CDA1D857}" = protocol=17 | dir=in | app=e:\program files\landwirtschafts simulator 2013\x86\farmingsimulator2013game.exe | 
"{0B5E5A2E-6E48-4D32-ABDD-DB9687CDDB7F}" = protocol=17 | dir=in | app=e:\program files\thq\company of heroes\reliccoh.exe | 
"{0C2BAC05-BCC3-4389-B671-DCFD37FE14E2}" = protocol=17 | dir=in | app=e:\program files\thq\company of heroes\relicdownloader\relicdownloader.exe | 
"{0C56CFCD-585F-45BC-96E4-A515090B93C1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{10799F2F-47F9-4C2C-B57D-2F5F4836A298}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{1FEE51B6-D1E4-485D-AF8B-B85738AD221D}" = protocol=6 | dir=in | app=e:\windows\system32\pnkbstrb.exe | 
"{23768F80-292C-40A6-8BC0-A63AAA0D73C1}" = protocol=6 | dir=in | app=e:\windows\system32\pnkbstra.exe | 
"{2DC5DF14-C12C-47B0-BA39-B24EFA1594F2}" = protocol=17 | dir=in | app=e:\program files\activision\call of duty - world at war\codwawmp.exe | 
"{2DFD5862-E40E-4F4B-8511-911C833C9918}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{3B871501-D432-4515-B7A9-D1489E20E004}" = protocol=6 | dir=in | app=e:\program files\activision\call of duty - world at war\codwawmp.exe | 
"{4025FC0D-A967-48BE-AFC6-93093E45DB11}" = protocol=6 | dir=out | app=system | 
"{4E3056A5-449C-401A-93D2-30279C16ADBB}" = protocol=17 | dir=in | app=e:\program files\activision\call of duty - world at war\codwaw.exe | 
"{559B896C-E232-40EB-B0C2-A7C1C609EA58}" = protocol=6 | dir=in | app=e:\program files\landwirtschafts simulator 2013\farmingsimulator2013game.exe | 
"{685B6651-6992-4AA5-B734-004CE748C9CC}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{738F692C-E944-460F-99FE-3A232378FA1C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{7B1A882B-892B-426F-B490-786647BCD642}" = protocol=6 | dir=in | app=e:\program files\thq\company of heroes\reliccoh.exe | 
"{7BB3E38D-BC5A-4FF9-8108-24DA53B8075C}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{85E8BE6E-1518-43BB-BCDB-FBEC48CD3068}" = protocol=17 | dir=in | app=e:\program files\landwirtschafts simulator 2013\farmingsimulator2013game.exe | 
"{89DEFCFD-51B5-442C-A1BE-63767952934E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{8DE6FDFA-438B-45FC-95E5-D1B868E7A4A6}" = protocol=6 | dir=in | app=e:\program files\landwirtschafts simulator 2013\x64\farmingsimulator2013game.exe | 
"{9A519A07-289C-4B56-A15D-0B683D13E4AF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{A414BF2D-9DBE-4520-BD1B-EB7061421444}" = protocol=17 | dir=in | app=e:\program files\landwirtschafts simulator 2013\farmingsimulator2013.exe | 
"{B4EB7FC4-DA1D-4A4D-8B90-639B69ADB2EA}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B760DFF1-1C5F-4DF9-833F-8DEB696A4CD0}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{B91210C7-ED32-4955-A891-CDEBA5170010}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{C02C326D-7D02-41F9-A024-B84473184630}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C8DFF83D-2C2A-4970-9411-9AFCF77A2523}" = protocol=17 | dir=in | app=e:\windows\system32\pnkbstrb.exe | 
"{D12DCF5A-3882-4CC8-BA96-DFC60E41CE3B}" = protocol=6 | dir=in | app=e:\program files\thq\company of heroes\relicdownloader\relicdownloader.exe | 
"{D6051CCE-B9F5-4A6F-AEB5-27C96EADE58B}" = protocol=17 | dir=in | app=e:\program files\steam\steam.exe | 
"{D8BBD53C-8682-4E27-9826-8AE6B3174276}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{E19470E4-DFAF-492F-A974-ABCB97B2AE8F}" = protocol=6 | dir=in | app=e:\program files\steam\steam.exe | 
"{E1DBAEFD-DE1A-407A-872F-EE7D75CEE392}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{EDA85102-5A97-4058-BE40-77465DD7D8C1}" = protocol=6 | dir=in | app=e:\program files\activision\call of duty - world at war\codwaw.exe | 
"{F03C4863-8E12-48D0-ACBB-755D02B58114}" = protocol=17 | dir=in | app=e:\program files\landwirtschafts simulator 2013\x64\farmingsimulator2013game.exe | 
"{F0ABAFB0-6D72-4867-84FC-B4D009039112}" = protocol=6 | dir=in | app=e:\program files\landwirtschafts simulator 2013\x86\farmingsimulator2013game.exe | 
"{F7726625-3EC7-4994-BB1B-AE8FAE8A27AE}" = protocol=17 | dir=in | app=e:\windows\system32\pnkbstra.exe | 
"TCP Query User{1DB364C9-B232-44D1-89A3-71C9FBCB63C6}E:\users\kai\desktop\cod 4\iw3mp.exe" = protocol=6 | dir=in | app=e:\users\kai\desktop\cod 4\iw3mp.exe | 
"TCP Query User{30CEA742-9365-4D81-8F7C-1312A42FCF30}E:\program files\1c company\men of war condemned heroes\condemned heroes.exe" = protocol=6 | dir=in | app=e:\program files\1c company\men of war condemned heroes\condemned heroes.exe | 
"TCP Query User{33D64144-0938-4A34-A1BA-897FB4B37B26}E:\program files\sega\medieval ii total war\medieval2.exe" = protocol=6 | dir=in | app=e:\program files\sega\medieval ii total war\medieval2.exe | 
"TCP Query User{B5FAEC21-A5EF-4689-9FA9-6DEC7F09B140}E:\program files\sega\medieval ii total war\medieval2.exe" = protocol=6 | dir=in | app=e:\program files\sega\medieval ii total war\medieval2.exe | 
"UDP Query User{0C287BD0-7218-4BC4-B26F-F97E1538702B}E:\users\kai\desktop\cod 4\iw3mp.exe" = protocol=17 | dir=in | app=e:\users\kai\desktop\cod 4\iw3mp.exe | 
"UDP Query User{185C3288-DDE6-43CF-B7C9-D1103045FEE1}E:\program files\sega\medieval ii total war\medieval2.exe" = protocol=17 | dir=in | app=e:\program files\sega\medieval ii total war\medieval2.exe | 
"UDP Query User{3BFA80BC-5F21-4D98-A8B5-B47A7BB166AE}E:\program files\1c company\men of war condemned heroes\condemned heroes.exe" = protocol=17 | dir=in | app=e:\program files\1c company\men of war condemned heroes\condemned heroes.exe | 
"UDP Query User{ADEBB3FF-F001-4DDD-8813-2769A0D1813F}E:\program files\sega\medieval ii total war\medieval2.exe" = protocol=17 | dir=in | app=e:\program files\sega\medieval ii total war\medieval2.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{14574B7F-75D1-4718-B7F2-EBF6E2862A35}" = Company of Heroes - FAKEMSI
"{199E6632-EB28-4F73-AECB-3E192EB92D18}" = Company of Heroes - FAKEMSI
"{25724802-CC14-4B90-9F3B-3D6955EE27B1}" = Company of Heroes - FAKEMSI
"{32C4A4EB-C97D-414E-99C5-38F8DFD31D5D}" = Company of Heroes - FAKEMSI
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{41564952-412D-5637-00A7-A758B70C0600}" = Avira SearchFree Toolbar
"{420DA6C7-EE34-4468-AE16-87205B7D24EF}_is1" = Gothic 3 Modkit v1.75.14
"{50193078-F553-4EBA-AA77-64C9FAA12F98}" = Company of Heroes - FAKEMSI
"{51D718D1-DA81-4FAD-919F-5C1CE3C33379}" = Company of Heroes - FAKEMSI
"{66F78C51-D108-4F0C-A93C-1CBE74CE338F}" = Company of Heroes - FAKEMSI
"{6890095D-D7FE-465A-9B1D-BE605B1F5FD9}_is1" = Gothic 3 Götterdämmerung Enhanced Edition
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}" = NVIDIA PhysX
"{7F4B1592-222F-4E5F-A100-E5AFD61A0BB3}" = Company of Heroes - FAKEMSI
"{80D03817-7943-4839-8E96-B9F924C5E67D}" = Company of Heroes - FAKEMSI
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{97E5205F-EA4F-438F-B211-F1846419F1C1}" = Company of Heroes - FAKEMSI
"{988160E4-6C30-49E0-A1F4-E66E7B1085A3}_is1" = Men of War Condemned Heroes (Nur entfernen)
"{99A7722D-9ACB-43F3-A222-ABC7133F159E}" = Company of Heroes - FAKEMSI
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.2) - Deutsch
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 331.82
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 331.82
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 331.82
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.7.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 331.82
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.13.0725
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 9.3.21
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamC" = GeForce Experience NvStream Client Components
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 9.3.21
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.9
"{BA801B94-C28D-46EE-B806-E1E021A3D519}" = Company of Heroes - FAKEMSI
"{C0698BDA-0D29-40EE-8570-A31106DF9AB1}" = Medieval II Total War
"{C28A686B-D439-4B83-B023-7402E982F69D}_is1" = Gothic 3 Enhanced Edition
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{D4D244D1-05E0-4D24-86A2-B2433C435671}" = Company of Heroes - FAKEMSI
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"{EAF636A9-F664-4703-A659-85A894DA264F}" = Company of Heroes - FAKEMSI
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F59AC46C-10C3-4023-882C-4212A92283B3}_is1" = Lagarith Lossless Codec (1.3.27)
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira Free Antivirus
"Company of Heroes" = Company of Heroes
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.67
"Diccuric" = Diccuric
"DivX Setup" = DivX-Setup
"FarmingSimulator2013DE_is1" = Landwirtschafts Simulator 2013
"ffdshow_is1" = ffdshow v1.1.4399 [2012-03-22]
"HaaliMkx" = Haali Media Splitter
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"LAME_is1" = LAME v3.99.3 (for Windows)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Mozilla Firefox 26.0 (x86 de)" = Mozilla Firefox 26.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MyPC Backup" = MyPC Backup 
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenSource Flash Video Splitter" = OpenSource Flash Video Splitter 1.0.0.5
"PunkBusterSvc" = PunkBuster Services
"Steam" = Steam
"vsfilter_is1" = DirectVobSub 2.40.4209
"WinRAR archiver" = WinRAR 5.00 (32-bit)
"Xvid Video Codec 1.3.2" = Xvid Video Codec
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Codec Pack Packages" = Codec Pack Packages
"DigitalSite" = Update for Codec Pack
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 15.12.2013 17:42:45 | Computer Name = Kai-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0,
 Zeitstempel: 0x46f5e102  Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version:
 0.0.0.0, Zeitstempel: 0x46f5e102  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00004b85
ID
 des fehlerhaften Prozesses: 0xfb8  Startzeit der fehlerhaften Anwendung: 0x01cef9de95ade32e
Pfad
 der fehlerhaften Anwendung: E:\Users\Kai\Downloads\de_100_2101_patch.exe  Pfad des
 fehlerhaften Moduls: E:\Users\Kai\Downloads\de_100_2101_patch.exe  Berichtskennung:
 d4d7e748-65d1-11e3-89dc-0019664221ef
 
Error - 15.12.2013 17:48:39 | Computer Name = Kai-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0,
 Zeitstempel: 0x46f5e102  Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version:
 0.0.0.0, Zeitstempel: 0x46f5e102  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00004b85
ID
 des fehlerhaften Prozesses: 0x68c  Startzeit der fehlerhaften Anwendung: 0x01cef9df69ccd91a
Pfad
 der fehlerhaften Anwendung: E:\Users\Kai\Downloads\de_100_2101_patch.exe  Pfad des
 fehlerhaften Moduls: E:\Users\Kai\Downloads\de_100_2101_patch.exe  Berichtskennung:
 a7e9bfc5-65d2-11e3-89dc-0019664221ef
 
Error - 15.12.2013 18:00:41 | Computer Name = Kai-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0,
 Zeitstempel: 0x46f5e102  Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version:
 0.0.0.0, Zeitstempel: 0x46f5e102  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00004b85
ID
 des fehlerhaften Prozesses: 0x5e4  Startzeit der fehlerhaften Anwendung: 0x01cef9e11783080c
Pfad
 der fehlerhaften Anwendung: E:\Users\Kai\Desktop\de_100_2101_patch.exe  Pfad des 
fehlerhaften Moduls: E:\Users\Kai\Desktop\de_100_2101_patch.exe  Berichtskennung: 
563111de-65d4-11e3-89dc-0019664221ef
 
Error - 15.12.2013 18:59:50 | Computer Name = Kai-PC | Source = Application Hang | ID = 1002
Description = Programm RelicCOH.exe, Version 2.500.0.127 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: ea4    Startzeit: 
01cef9e237294ab3    Endzeit: 671    Anwendungspfad: E:\Program Files\THQ\Company of Heroes\RelicCOH.exe

Berichts-ID:
   
 
Error - 16.12.2013 08:18:41 | Computer Name = Kai-PC | Source = VSS | ID = 8194
Description = 
 
Error - 16.12.2013 09:13:18 | Computer Name = Kai-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: CoDWaW.exe, Version: 1.0.0.1, Zeitstempel:
 0x48f7898c  Name des fehlerhaften Moduls: CoDWaW.exe, Version: 1.0.0.1, Zeitstempel:
 0x48f7898c  Ausnahmecode: 0xc0000005  Fehleroffset: 0x002f25e7  ID des fehlerhaften Prozesses:
 0x17e4  Startzeit der fehlerhaften Anwendung: 0x01cefa5f3feca0f4  Pfad der fehlerhaften
 Anwendung: E:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe  Pfad
 des fehlerhaften Moduls: E:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe
Berichtskennung:
 d40d2d3a-6653-11e3-82b4-0019664221ef
 
Error - 16.12.2013 09:13:23 | Computer Name = Kai-PC | Source =   | ID = 0
Description = 
 
Error - 16.12.2013 09:13:23 | Computer Name = Kai-PC | Source =   | ID = 0
Description = 
 
Error - 18.12.2013 17:40:54 | Computer Name = Kai-PC | Source = VSS | ID = 8194
Description = 
 
Error - 18.12.2013 18:45:49 | Computer Name = Kai-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Condemned Heroes.exe, Version: 1.0.0.0,
 Zeitstempel: 0x4f6c1012  Name des fehlerhaften Moduls: Condemned Heroes.exe, Version:
 1.0.0.0, Zeitstempel: 0x4f6c1012  Ausnahmecode: 0xc000000d  Fehleroffset: 0x00524e84
ID
 des fehlerhaften Prozesses: 0xf3c  Startzeit der fehlerhaften Anwendung: 0x01cefc3cec7c33a6
Pfad
 der fehlerhaften Anwendung: E:\Program Files\1C Company\Men of War Condemned Heroes\Condemned
 Heroes.exe  Pfad des fehlerhaften Moduls: E:\Program Files\1C Company\Men of War 
Condemned Heroes\Condemned Heroes.exe  Berichtskennung: 23c2d38a-6836-11e3-812b-0019664221ef
 
[ System Events ]
Error - 19.12.2013 05:41:04 | Computer Name = Kai-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden 
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
 an den Computerhersteller, um aktualisierte Firmware zu erhalten.
 
Error - 19.12.2013 05:42:06 | Computer Name = Kai-PC | Source = PNRPSvc | ID = 102
Description = 
 
Error - 19.12.2013 05:42:06 | Computer Name = Kai-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
Error - 19.12.2013 05:42:06 | Computer Name = Kai-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:   %%-2140993535
 
Error - 19.12.2013 05:42:15 | Computer Name = Kai-PC | Source = PNRPSvc | ID = 102
Description = 
 
Error - 19.12.2013 05:42:15 | Computer Name = Kai-PC | Source = PNRPSvc | ID = 102
Description = 
 
Error - 19.12.2013 05:42:15 | Computer Name = Kai-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:   %%-2140993535
 
Error - 19.12.2013 05:42:15 | Computer Name = Kai-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
Error - 19.12.2013 05:42:15 | Computer Name = Kai-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:   %%-2140993535
 
Error - 19.12.2013 05:42:15 | Computer Name = Kai-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
 
< End of report >

schrauber · 20.12.2013, 09:26

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Grandpakai · 22.12.2013, 21:08

Der Malwarebytes Bericht, danke

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.22.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16476
Kai :: KAI-PC [Administrator]

Schutz: Aktiviert

22.12.2013 20:35:22
mbam-log-2013-12-22 (20-35-22).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 217672
Laufzeit: 5 Minute(n), 53 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 7
HKCR\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0} (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\esrv.mysearchdialESrvc.1 (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\esrv.mysearchdialESrvc (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DigitalSite (PUP.Optional.DigitalSites.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\MYSEARCHDIAL (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 2
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0X2O1C0R2R1R -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\mysearchdial|TM (PUP.Optional.MySearchDial.A) -> Daten: 0103 -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.MySearchDial.A) -> Bösartig: (hxxp://start.mysearchdial.com/?f=1&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 4
E:\Users\Kai\AppData\Roaming\DigitalSite\UpdateProc (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial\icons_2.2.5.1070 (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial\UpdateProc (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 14
E:\Users\Kai\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe (PUP.Optional.DigitalSites.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Local\Temp\is357113909\50024_stp\rcpsetup_adppi_adppi.exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\DigitalSite\UpdateProc\config.dat (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\DigitalSite\UpdateProc\prod.dat (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\DigitalSite\UpdateProc\STTL.DAT (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\DigitalSite\UpdateProc\TTL.DAT (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Windows\System32\roboot.exe (PUP.Optional.PCPerformer.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage (PUP.Optional.FunMoods.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial\icons_2.2.5.1070\59.ico (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial\icons_2.2.5.1070\60.ico (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial\UpdateProc\config.dat (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial\UpdateProc\STTL.DAT (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
E:\Users\Kai\AppData\Roaming\mysearchdial\UpdateProc\TTL.DAT (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Code:

ATTFilter

# AdwCleaner v3.015 - Bericht erstellt am 22/12/2013 um 20:53:28
# Updated 10/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Kai - KAI-PC
# Gestartet von : E:\Users\Kai\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : BackupStack

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : E:\Program Files\MyPC Backup
Ordner Gelöscht : E:\Users\Kai\AppData\Local\Temp\OCS
Ordner Gelöscht : E:\Users\Kai\AppData\LocalLow\Mysearchdial
Ordner Gelöscht : E:\Users\Kai\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gelöscht : E:\Users\Kai\AppData\Roaming\digitalsite
Ordner Gelöscht : E:\Users\Kai\AppData\Roaming\Systweak
Ordner Gelöscht : E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Datei Gelöscht : E:\Windows\Tasks\digitalsite.job
Datei Gelöscht : E:\Windows\System32\Tasks\digitalsite
Datei Gelöscht : E:\Windows\Tasks\MySearchDial.job
Datei Gelöscht : E:\Windows\System32\Tasks\MySearchDial

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F65FF708-241D-4706-8747-138F2A0BB4DE}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F65FF708-241D-4706-8747-138F2A0BB4DE}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E04E00F7-35E8-4E89-A01A-865728BDE37E}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E04E00F7-35E8-4E89-A01A-865728BDE37E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\Software\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schlüssel Gelöscht : HKLM\Software\mysearchdial
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : E:\Users\Kai\AppData\Roaming\Mozilla\Firefox\Profiles\2dvsrxks.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [3184 octets] - [22/12/2013 20:51:38]
AdwCleaner[S0].txt - [3188 octets] - [22/12/2013 20:53:28]

########## EOF - E:\AdwCleaner\AdwCleaner[S0].txt - [3248 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x86
Ran by Kai on 22.12.2013 at 21:01:39,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\backupstack_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\backupstack_rasmancs



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "E:\ProgramData\apn"
Successfully deleted: [Folder] "E:\Program Files\mypc backup"



~~~ FireFox

Emptied folder: E:\Users\Kai\AppData\Roaming\mozilla\firefox\profiles\2dvsrxks.default\minidumps [26 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.12.2013 at 21:04:36,72
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Und ein neues FRST

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-12-2013 01
Ran by Kai (administrator) on KAI-PC on 22-12-2013 21:07:24
Running from E:\Users\Kai\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) E:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) E:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) E:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
() E:\Program Files\DivX\DivX Update\DivXUpdate.exe
(APN) E:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Malwarebytes Corporation) E:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) E:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) E:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() E:\Windows\System32\PnkBstrA.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corporation) E:\Windows\System32\wuauclt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [DivXMediaServer] - E:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] - E:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [Nvtmru] - E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [avgnt] - E:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ShadowPlay] - E:\Windows\system32\rundll32.exe E:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Adobe ARM] - E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
MountPoints2: F - F:\LaunchU3.exe -a
MountPoints2: {720aaa0f-3d63-11e3-8a43-806e6f6e6963} - D:\Autorun.exe
MountPoints2: {8468eced-40ce-11e3-b37b-0019664221ef} - F:\LaunchU3.exe -a

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3FCEDE4E71D1CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: E:\Users\Kai\AppData\Roaming\Mozilla\Firefox\Profiles\2dvsrxks.default
FF Plugin: @adobe.com/FlashPlayer - E:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - E:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - E:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @nvidia.com/3DVision - E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader - E:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; E:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; E:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; E:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 APNMCP; E:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 MBAMScheduler; E:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; E:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvStreamSvc; E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14652704 2013-11-14] (NVIDIA Corporation)
R2 PnkBstrA; E:\Windows\system32\PnkBstrA.exe [66872 2013-12-16] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; E:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; E:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; E:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; E:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-12] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; E:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; E:\Windows\System32\drivers\nvvad32v.sys [33568 2013-09-28] (NVIDIA Corporation)
R1 ssmdrv; E:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-31] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-22 21:07 - 2013-12-22 21:07 - 00007013 _____ E:\Users\Kai\Downloads\FRST.txt
2013-12-22 21:07 - 2013-12-22 21:07 - 00000000 ____D E:\Users\Kai\Downloads\FRST-OlderVersion
2013-12-22 21:04 - 2013-12-22 21:04 - 00001615 _____ E:\Users\Kai\Desktop\JRT.txt
2013-12-22 21:01 - 2013-12-22 21:01 - 00000000 ____D E:\Windows\ERUNT
2013-12-22 20:58 - 2013-12-22 20:59 - 01034531 _____ (Thisisu) E:\Users\Kai\Downloads\JRT.exe
2013-12-22 20:51 - 2013-12-22 20:53 - 00000000 ____D E:\AdwCleaner
2013-12-22 20:50 - 2013-12-22 20:50 - 01226750 _____ E:\Users\Kai\Downloads\adwcleaner.exe
2013-12-22 20:30 - 2013-12-22 20:30 - 00001077 _____ E:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-22 20:30 - 2013-12-22 20:30 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Malwarebytes
2013-12-22 20:30 - 2013-12-22 20:30 - 00000000 ____D E:\ProgramData\Malwarebytes
2013-12-22 20:30 - 2013-12-22 20:30 - 00000000 ____D E:\Program Files\Malwarebytes' Anti-Malware
2013-12-22 20:30 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) E:\Windows\system32\Drivers\mbam.sys
2013-12-22 14:44 - 2013-12-22 14:45 - 10285040 _____ (Malwarebytes Corporation                                    ) E:\Users\Kai\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-21 11:04 - 2013-12-21 11:13 - 00000598 _____ E:\Users\Kai\Desktop\Kegeln.txt
2013-12-19 21:52 - 2013-12-19 21:52 - 00000000 ____D E:\Program Files\THQ
2013-12-19 12:46 - 2013-12-19 12:46 - 00030687 _____ E:\Users\Kai\Desktop\Logs.rar
2013-12-19 12:25 - 2013-12-19 12:25 - 00001531 _____ E:\Users\Kai\Desktop\GMER.txt
2013-12-19 11:52 - 2013-12-19 11:52 - 00377856 _____ E:\Users\Kai\Downloads\gmer_2.1.19163.exe
2013-12-19 11:48 - 2013-12-22 21:07 - 00000000 ____D E:\FRST
2013-12-19 11:48 - 2013-12-19 11:49 - 00050504 _____ E:\Users\Kai\Desktop\FRST.txt
2013-12-19 11:48 - 2013-12-19 11:49 - 00016486 _____ E:\Users\Kai\Desktop\Addition.txt
2013-12-19 11:47 - 2013-12-22 21:07 - 01061231 _____ (Farbar) E:\Users\Kai\Downloads\FRST.exe
2013-12-19 11:42 - 2013-12-19 11:42 - 00092652 _____ E:\Users\Kai\Desktop\OTL.Txt
2013-12-19 11:42 - 2013-12-19 11:42 - 00053722 _____ E:\Users\Kai\Desktop\Extras.Txt
2013-12-19 11:41 - 2013-12-19 11:41 - 00002972 _____ E:\Users\Kai\Desktop\EreignisseAvira.txt
2013-12-19 11:31 - 2013-12-19 11:31 - 00602112 _____ (OldTimer Tools) E:\Users\Kai\Downloads\OTL.exe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Common Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Adobe
2013-12-18 22:42 - 2013-12-18 22:43 - 00000000 ____D E:\ProgramData\Adobe
2013-12-18 22:40 - 2013-12-18 22:40 - 00001293 _____ E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
2013-12-18 22:37 - 2013-12-18 22:37 - 00000000 ____D E:\Program Files\1C Company
2013-12-16 17:43 - 2013-12-18 16:09 - 00000000 ____D E:\Users\Kai\Documents\Gothic3ForsakenGods
2013-12-16 17:40 - 2013-12-16 17:40 - 00002399 _____ E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
2013-12-16 14:03 - 2013-12-16 14:03 - 00000682 _____ E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\PunkBuster
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\Activision
2013-12-16 13:32 - 2013-12-16 14:04 - 00138464 _____ E:\Windows\system32\Drivers\PnkBstrK.sys
2013-12-16 13:32 - 2013-12-16 13:32 - 00022328 _____ E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
2013-12-16 13:31 - 2013-12-16 14:04 - 00111928 _____ E:\Windows\system32\PnkBstrB.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00682280 _____ E:\Windows\system32\pbsvc.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00066872 _____ E:\Windows\system32\PnkBstrA.exe
2013-12-16 13:19 - 2013-12-16 13:19 - 00000000 ____D E:\Program Files\Activision
2013-12-14 15:55 - 2013-12-14 16:14 - 00000000 ____D E:\Program Files\Steam
2013-12-14 15:55 - 2013-12-14 16:06 - 00000000 ____D E:\Program Files\Common Files\Steam
2013-12-14 15:52 - 2013-12-14 15:52 - 00000592 _____ E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
2013-12-14 15:33 - 2013-12-14 15:33 - 00000000 __SHD E:\Windows\ftpcache
2013-12-12 12:31 - 2013-12-12 12:31 - 00000000 ____D E:\Program Files\Mozilla Firefox
2013-12-11 23:59 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.dll
2013-12-11 23:59 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.tlb
2013-12-11 23:59 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollectorres.dll
2013-12-11 23:59 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\iesetup.dll
2013-12-11 23:59 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) E:\Windows\system32\ieetwproxystub.dll
2013-12-11 23:59 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) E:\Windows\system32\iertutil.dll
2013-12-11 23:59 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\jsproxy.dll
2013-12-11 23:59 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) E:\Windows\system32\iernonce.dll
2013-12-11 23:59 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) E:\Windows\system32\ieui.dll
2013-12-11 23:59 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) E:\Windows\system32\ieUnatt.exe
2013-12-11 23:59 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollector.exe
2013-12-11 23:59 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) E:\Windows\system32\jscript9diag.dll
2013-12-11 23:59 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) E:\Windows\system32\jscript9.dll
2013-12-11 23:59 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) E:\Windows\system32\ie4uinit.exe
2013-12-11 23:59 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) E:\Windows\system32\inetcpl.cpl
2013-12-11 23:59 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) E:\Windows\system32\ieframe.dll
2013-12-11 23:59 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dll
2013-12-11 23:59 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) E:\Windows\system32\wininet.dll
2013-12-11 23:59 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) E:\Windows\system32\urlmon.dll
2013-12-11 22:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) E:\Windows\system32\tzres.dll
2013-12-11 22:35 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) E:\Windows\system32\imagehlp.dll
2013-12-11 22:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) E:\Windows\system32\wshom.ocx
2013-12-11 22:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) E:\Windows\system32\scrrun.dll
2013-12-11 22:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) E:\Windows\system32\wscript.exe
2013-12-11 22:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) E:\Windows\system32\cscript.exe
2013-12-11 22:34 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) E:\Windows\system32\win32k.sys
2013-12-11 22:34 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\drmk.sys
2013-12-11 22:34 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\portcls.sys
2013-12-06 20:26 - 2013-12-19 21:53 - 00170679 _____ E:\Windows\DirectX.log
2013-12-06 20:26 - 2013-12-06 20:26 - 00002074 _____ E:\Users\Public\Desktop\Medieval II Total War.lnk
2013-12-06 20:16 - 2013-12-16 13:31 - 00000000 ___HD E:\Program Files\InstallShield Installation Information
2013-12-06 20:16 - 2013-12-06 20:16 - 00000000 ____D E:\Program Files\SEGA
2013-12-06 20:14 - 2013-12-06 20:14 - 00000000 ____D E:\Users\Kai\AppData\Roaming\InstallShield
2013-12-02 19:10 - 2013-11-14 12:57 - 00955168 _____ (NVIDIA Corporation) E:\Windows\system32\nvspcap.dll
2013-12-02 19:08 - 2013-12-02 19:08 - 00000020 ___SH E:\Users\UpdatusUser\ntuser.ini
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Startmenü
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Netzwerkumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Druckumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-02 19:08 - 2009-07-14 05:42 - 00000000 ___RD E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-02 19:08 - 2009-07-14 05:37 - 00000000 ___RD E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-02 19:06 - 2013-11-14 12:57 - 22951200 _____ (NVIDIA Corporation) E:\Windows\system32\nvoglv32.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 17560352 _____ (NVIDIA Corporation) E:\Windows\system32\nvcompiler.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 15218504 _____ (NVIDIA Corporation) E:\Windows\system32\nvd3dum.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 10446112 _____ (NVIDIA Corporation) E:\Windows\system32\Drivers\nvlddmkm.sys
2013-12-02 19:06 - 2013-11-14 12:57 - 09663656 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuda.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 09619872 _____ (NVIDIA Corporation) E:\Windows\system32\nvopencl.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 02947872 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuvid.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 02747680 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuvenc.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 01049888 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispco3233182.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00893728 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispgenco3233182.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00609568 _____ (NVIDIA Corporation) E:\Windows\system32\NvFBC.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00562464 _____ (NVIDIA Corporation) E:\Windows\system32\NvIFR.dll
2013-12-02 18:11 - 2013-12-02 18:30 - 199358496 _____ (NVIDIA Corporation) E:\Users\Kai\Downloads\331.82-desktop-win8-win7-winvista-32bit-international-whql.exe
2013-12-01 17:45 - 2013-12-01 17:45 - 00000000 ____D E:\Users\Public\Desktop\Gothic 3 Modkit
2013-12-01 17:31 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_7.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) E:\Windows\system32\d3dcsx_43.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_43.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) E:\Windows\system32\d3dx11_43.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_6.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_6.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_4.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_5.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_5.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_3.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) E:\Windows\system32\d3dcsx_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) E:\Windows\system32\d3dx11_42.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_4.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_4.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_6.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_41.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_41.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_41.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_3.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_3.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_2.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_5.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_40.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_40.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_40.dll
2013-12-01 17:31 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_2.dll
2013-12-01 17:31 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_1.dll
2013-12-01 17:31 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_2.dll
2013-12-01 17:31 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_39.dll
2013-12-01 17:31 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_39.dll
2013-12-01 17:31 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_39.dll
2013-12-01 17:31 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_1.dll
2013-12-01 17:31 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_1.dll
2013-12-01 17:31 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_0.dll
2013-12-01 17:31 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_4.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_38.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_38.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_38.dll
2013-12-01 17:31 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_0.dll
2013-12-01 17:31 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_0.dll
2013-12-01 17:31 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_3.dll
2013-12-01 17:31 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_37.dll
2013-12-01 17:31 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_37.dll
2013-12-01 17:31 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_37.dll
2013-12-01 17:31 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_10.dll
2013-12-01 17:31 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_2.dll
2013-12-01 17:31 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_36.dll
2013-12-01 17:31 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_36.dll
2013-12-01 17:31 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_36.dll
2013-12-01 17:31 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_9.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_35.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_35.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_35.dll
2013-12-01 17:31 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_8.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_34.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_34.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_34.dll
2013-12-01 17:31 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_7.dll
2013-12-01 17:31 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_33.dll
2013-12-01 17:31 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_33.dll
2013-12-01 17:31 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_33.dll
2013-12-01 17:31 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) E:\Windows\system32\x3daudio1_1.dll
2013-12-01 17:31 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_6.dll
2013-12-01 17:31 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_5.dll
2013-12-01 17:31 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_32.dll
2013-12-01 17:31 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10.dll
2013-12-01 17:31 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_31.dll
2013-12-01 17:31 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_4.dll
2013-12-01 17:31 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_3.dll
2013-12-01 17:31 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) E:\Windows\system32\xinput1_2.dll
2013-12-01 17:31 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_2.dll
2013-12-01 17:31 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_30.dll
2013-12-01 17:31 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_1.dll
2013-12-01 17:31 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) E:\Windows\system32\xinput1_1.dll
2013-12-01 17:31 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_29.dll
2013-12-01 17:31 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_0.dll
2013-12-01 17:31 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) E:\Windows\system32\x3daudio1_0.dll
2013-12-01 17:31 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_28.dll
2013-12-01 17:31 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_27.dll
2013-12-01 17:31 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_26.dll
2013-12-01 17:31 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_25.dll
2013-12-01 17:31 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_24.dll
2013-12-01 17:29 - 2013-12-14 18:34 - 00000000 ____D E:\Users\Kai\Documents\Gothic3
2013-12-01 17:24 - 2013-12-16 17:34 - 00000000 ____D E:\Program Files\Nordic Games

==================== One Month Modified Files and Folders =======

2013-12-22 21:07 - 2013-12-22 21:07 - 00007013 _____ E:\Users\Kai\Downloads\FRST.txt
2013-12-22 21:07 - 2013-12-22 21:07 - 00000000 ____D E:\Users\Kai\Downloads\FRST-OlderVersion
2013-12-22 21:07 - 2013-12-19 11:48 - 00000000 ____D E:\FRST
2013-12-22 21:07 - 2013-12-19 11:47 - 01061231 _____ (Farbar) E:\Users\Kai\Downloads\FRST.exe
2013-12-22 21:04 - 2013-12-22 21:04 - 00001615 _____ E:\Users\Kai\Desktop\JRT.txt
2013-12-22 21:03 - 2009-07-14 05:34 - 00022576 ____H E:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-22 21:03 - 2009-07-14 05:34 - 00022576 ____H E:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-22 21:01 - 2013-12-22 21:01 - 00000000 ____D E:\Windows\ERUNT
2013-12-22 21:00 - 2013-10-25 13:15 - 01638780 _____ E:\Windows\system32\PerfStringBackup.INI
2013-12-22 20:59 - 2013-12-22 20:58 - 01034531 _____ (Thisisu) E:\Users\Kai\Downloads\JRT.exe
2013-12-22 20:55 - 2013-10-30 20:22 - 00000000 ____D E:\ProgramData\NVIDIA
2013-12-22 20:55 - 2009-07-14 05:53 - 00000006 ____H E:\Windows\Tasks\SA.DAT
2013-12-22 20:55 - 2009-07-14 05:39 - 00037539 _____ E:\Windows\setupact.log
2013-12-22 20:54 - 2013-10-25 11:55 - 01961854 _____ E:\Windows\WindowsUpdate.log
2013-12-22 20:53 - 2013-12-22 20:51 - 00000000 ____D E:\AdwCleaner
2013-12-22 20:50 - 2013-12-22 20:50 - 01226750 _____ E:\Users\Kai\Downloads\adwcleaner.exe
2013-12-22 20:47 - 2013-10-25 15:10 - 00300986 _____ E:\Windows\PFRO.log
2013-12-22 20:30 - 2013-12-22 20:30 - 00001077 _____ E:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-22 20:30 - 2013-12-22 20:30 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Malwarebytes
2013-12-22 20:30 - 2013-12-22 20:30 - 00000000 ____D E:\ProgramData\Malwarebytes
2013-12-22 20:30 - 2013-12-22 20:30 - 00000000 ____D E:\Program Files\Malwarebytes' Anti-Malware
2013-12-22 14:45 - 2013-12-22 14:44 - 10285040 _____ (Malwarebytes Corporation                                    ) E:\Users\Kai\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-22 14:17 - 2013-10-29 20:37 - 00000884 _____ E:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-22 14:02 - 2013-10-30 19:02 - 00000102 _____ E:\Users\Kai\AppData\Roaming\WB.CFG
2013-12-22 14:02 - 2013-10-30 19:02 - 00000006 _____ E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
2013-12-21 11:13 - 2013-12-21 11:04 - 00000598 _____ E:\Users\Kai\Desktop\Kegeln.txt
2013-12-19 22:07 - 2013-10-30 19:08 - 00000000 ____D E:\Users\Kai\Documents\My Games
2013-12-19 21:53 - 2013-12-06 20:26 - 00170679 _____ E:\Windows\DirectX.log
2013-12-19 21:52 - 2013-12-19 21:52 - 00000000 ____D E:\Program Files\THQ
2013-12-19 12:46 - 2013-12-19 12:46 - 00030687 _____ E:\Users\Kai\Desktop\Logs.rar
2013-12-19 12:25 - 2013-12-19 12:25 - 00001531 _____ E:\Users\Kai\Desktop\GMER.txt
2013-12-19 11:52 - 2013-12-19 11:52 - 00377856 _____ E:\Users\Kai\Downloads\gmer_2.1.19163.exe
2013-12-19 11:49 - 2013-12-19 11:48 - 00050504 _____ E:\Users\Kai\Desktop\FRST.txt
2013-12-19 11:49 - 2013-12-19 11:48 - 00016486 _____ E:\Users\Kai\Desktop\Addition.txt
2013-12-19 11:42 - 2013-12-19 11:42 - 00092652 _____ E:\Users\Kai\Desktop\OTL.Txt
2013-12-19 11:42 - 2013-12-19 11:42 - 00053722 _____ E:\Users\Kai\Desktop\Extras.Txt
2013-12-19 11:41 - 2013-12-19 11:41 - 00002972 _____ E:\Users\Kai\Desktop\EreignisseAvira.txt
2013-12-19 11:31 - 2013-12-19 11:31 - 00602112 _____ (OldTimer Tools) E:\Users\Kai\Downloads\OTL.exe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Common Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:42 - 00000000 ____D E:\ProgramData\Adobe
2013-12-18 22:40 - 2013-12-18 22:40 - 00001293 _____ E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
2013-12-18 22:37 - 2013-12-18 22:37 - 00000000 ____D E:\Program Files\1C Company
2013-12-18 16:09 - 2013-12-16 17:43 - 00000000 ____D E:\Users\Kai\Documents\Gothic3ForsakenGods
2013-12-16 17:43 - 2013-10-29 20:26 - 00000000 ____D E:\Users\Kai\Desktop\DiesDas
2013-12-16 17:40 - 2013-12-16 17:40 - 00002399 _____ E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
2013-12-16 17:34 - 2013-12-01 17:24 - 00000000 ____D E:\Program Files\Nordic Games
2013-12-16 14:04 - 2013-12-16 13:32 - 00138464 _____ E:\Windows\system32\Drivers\PnkBstrK.sys
2013-12-16 14:04 - 2013-12-16 13:31 - 00111928 _____ E:\Windows\system32\PnkBstrB.exe
2013-12-16 14:03 - 2013-12-16 14:03 - 00000682 _____ E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\PunkBuster
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\Activision
2013-12-16 13:32 - 2013-12-16 13:32 - 00022328 _____ E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
2013-12-16 13:31 - 2013-12-16 13:31 - 00682280 _____ E:\Windows\system32\pbsvc.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00066872 _____ E:\Windows\system32\PnkBstrA.exe
2013-12-16 13:31 - 2013-12-06 20:16 - 00000000 ___HD E:\Program Files\InstallShield Installation Information
2013-12-16 13:31 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\system32\LogFiles
2013-12-16 13:19 - 2013-12-16 13:19 - 00000000 ____D E:\Program Files\Activision
2013-12-15 10:09 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\rescache
2013-12-14 18:34 - 2013-12-01 17:29 - 00000000 ____D E:\Users\Kai\Documents\Gothic3
2013-12-14 16:14 - 2013-12-14 15:55 - 00000000 ____D E:\Program Files\Steam
2013-12-14 16:06 - 2013-12-14 15:55 - 00000000 ____D E:\Program Files\Common Files\Steam
2013-12-14 15:52 - 2013-12-14 15:52 - 00000592 _____ E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
2013-12-14 15:33 - 2013-12-14 15:33 - 00000000 __SHD E:\Windows\ftpcache
2013-12-12 21:08 - 2013-10-29 20:29 - 00000000 ____D E:\Program Files\Mozilla Maintenance Service
2013-12-12 12:31 - 2013-12-12 12:31 - 00000000 ____D E:\Program Files\Mozilla Firefox
2013-12-12 10:58 - 2013-11-21 20:33 - 00135648 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avipbb.sys
2013-12-12 10:58 - 2013-11-21 20:33 - 00090400 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avgntflt.sys
2013-12-12 10:58 - 2013-11-21 20:33 - 00069240 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avnetflt.sys
2013-12-12 10:48 - 2009-07-14 05:33 - 00278272 _____ E:\Windows\system32\FNTCACHE.DAT
2013-12-12 10:47 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\system32\de-DE
2013-12-11 12:18 - 2013-10-29 20:37 - 00692616 _____ (Adobe Systems Incorporated) E:\Windows\system32\FlashPlayerApp.exe
2013-12-11 12:18 - 2013-10-29 20:37 - 00071048 _____ (Adobe Systems Incorporated) E:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-06 20:26 - 2013-12-06 20:26 - 00002074 _____ E:\Users\Public\Desktop\Medieval II Total War.lnk
2013-12-06 20:16 - 2013-12-06 20:16 - 00000000 ____D E:\Program Files\SEGA
2013-12-06 20:14 - 2013-12-06 20:14 - 00000000 ____D E:\Users\Kai\AppData\Roaming\InstallShield
2013-12-03 21:43 - 2013-10-30 20:21 - 00000000 ____D E:\ProgramData\NVIDIA Corporation
2013-12-02 19:10 - 2013-10-30 20:12 - 00000000 ____D E:\Program Files\NVIDIA Corporation
2013-12-02 19:08 - 2013-12-02 19:08 - 00000020 ___SH E:\Users\UpdatusUser\ntuser.ini
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Startmenü
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Netzwerkumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Druckumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-02 18:30 - 2013-12-02 18:11 - 199358496 _____ (NVIDIA Corporation) E:\Users\Kai\Downloads\331.82-desktop-win8-win7-winvista-32bit-international-whql.exe
2013-12-01 21:06 - 2013-11-20 19:06 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-01 21:06 - 2013-10-25 11:58 - 00000000 ____D E:\Users\Kai\AppData\Local\VirtualStore
2013-12-01 17:45 - 2013-12-01 17:45 - 00000000 ____D E:\Users\Public\Desktop\Gothic 3 Modkit
2013-12-01 17:31 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\Microsoft.NET
2013-11-26 11:11 - 2013-12-11 23:59 - 17112576 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-11 23:59 - 02724864 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-11 23:59 - 00004096 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-11 23:59 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-11 23:59 - 00051200 _____ (Microsoft Corporation) E:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-11 23:59 - 02166784 _____ (Microsoft Corporation) E:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-11 23:59 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-11 23:59 - 00032768 _____ (Microsoft Corporation) E:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-11 23:59 - 00440832 _____ (Microsoft Corporation) E:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-11 23:59 - 00112128 _____ (Microsoft Corporation) E:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-11 23:59 - 00108032 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-11 23:59 - 00553472 _____ (Microsoft Corporation) E:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-11 23:59 - 04243968 _____ (Microsoft Corporation) E:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-11 23:59 - 00208896 _____ (Microsoft Corporation) E:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-11 23:59 - 01928192 _____ (Microsoft Corporation) E:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-11 23:59 - 11221504 _____ (Microsoft Corporation) E:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-11 23:59 - 00703488 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-11 23:59 - 01820160 _____ (Microsoft Corporation) E:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-11 23:59 - 01157632 _____ (Microsoft Corporation) E:\Windows\system32\urlmon.dll

Some content of TEMP:
====================
E:\Users\Kai\AppData\Local\Temp\36260uninstall.exe
E:\Users\Kai\AppData\Local\Temp\avgnt.exe
E:\Users\Kai\AppData\Local\Temp\BackupSetup.exe
E:\Users\Kai\AppData\Local\Temp\drm_dyndata_7350008.dll
E:\Users\Kai\AppData\Local\Temp\nv3DVStreaming.dll
E:\Users\Kai\AppData\Local\Temp\nvSCPAPI.dll
E:\Users\Kai\AppData\Local\Temp\nvStereoApiI.dll
E:\Users\Kai\AppData\Local\Temp\nvStInst.exe
E:\Users\Kai\AppData\Local\Temp\Quarantine.exe
E:\Users\Kai\AppData\Local\Temp\Sqlite3.dll
E:\Users\Kai\AppData\Local\Temp\vcredist_x86.exe
E:\Users\Kai\AppData\Local\Temp\_is4E14.exe
E:\Users\Kai\AppData\Local\Temp\_is795.exe


==================== Bamital & volsnap Check =================

E:\Windows\explorer.exe => MD5 is legit
E:\Windows\System32\winlogon.exe => MD5 is legit
E:\Windows\System32\wininit.exe => MD5 is legit
E:\Windows\System32\svchost.exe => MD5 is legit
E:\Windows\System32\services.exe => MD5 is legit
E:\Windows\System32\User32.dll => MD5 is legit
E:\Windows\System32\userinit.exe => MD5 is legit
E:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 06:54

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 23.12.2013, 19:40

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Grandpakai · 27.12.2013, 16:48

Beim eset scann hängt er sich trotz mehrerer Versuche bei 76% auf, Firewall und Antivieren programm sind ausgeschaltet

schrauber · 28.12.2013, 12:46

Lass ESET weg und mach nen Vollscan mit deinem AV Programm.

Grandpakai · 28.12.2013, 16:56

ok danke, hier die Berichte

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.77  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Adobe Flash Player 	11.9.900.170  
 Adobe Reader 10.1.2 Adobe Reader out of Date!  
 Mozilla Firefox (26.0) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive E:  
````````````````````End of Log``````````````````````

Code:

ATTFilter

Avira Free Antivirus
Erstellungsdatum der Reportdatei: Samstag, 28. Dezember 2013  16:55


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : Avira Free Antivirus
Seriennummer   : 0000149996-ADJIE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (Service Pack 1)  [6.1.7601]
Boot Modus     : Normal gebootet
Benutzername   : SYSTEM
Computername   : KAI-PC

Versionsinformationen:
BUILD.DAT      : 14.0.2.286     55547 Bytes  09.12.2013 11:37:00
AVSCAN.EXE     : 14.0.2.254   1032760 Bytes  12.12.2013 09:55:27
AVSCANRC.DLL   : 14.0.2.180     62008 Bytes  12.12.2013 09:55:27
LUKE.DLL       : 14.0.2.234     65592 Bytes  12.12.2013 09:56:40
AVSCPLR.DLL    : 14.0.2.254    124472 Bytes  12.12.2013 09:55:28
AVREG.DLL      : 14.0.2.212    250424 Bytes  12.12.2013 09:55:25
avlode.dll     : 14.0.2.254    540216 Bytes  12.12.2013 09:55:19
avlode.rdf     : 13.0.1.62      56973 Bytes  09.12.2013 20:45:19
VBASE000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 18:25:41
VBASE001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 18:25:41
VBASE002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 18:25:41
VBASE003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 18:25:41
VBASE004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 18:25:41
VBASE005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 18:25:41
VBASE006.VDF   : 7.11.103.230  2293248 Bytes  24.09.2013 18:25:41
VBASE007.VDF   : 7.11.116.38  5485568 Bytes  28.11.2013 23:22:19
VBASE008.VDF   : 7.11.120.140  1154560 Bytes  19.12.2013 17:03:24
VBASE009.VDF   : 7.11.120.141     2048 Bytes  19.12.2013 17:03:24
VBASE010.VDF   : 7.11.120.142     2048 Bytes  19.12.2013 17:03:24
VBASE011.VDF   : 7.11.120.143     2048 Bytes  19.12.2013 17:03:25
VBASE012.VDF   : 7.11.120.144     2048 Bytes  19.12.2013 17:03:25
VBASE013.VDF   : 7.11.120.145     2048 Bytes  19.12.2013 17:03:25
VBASE014.VDF   : 7.11.121.19   126976 Bytes  21.12.2013 16:01:45
VBASE015.VDF   : 7.11.121.147   122880 Bytes  24.12.2013 06:44:00
VBASE016.VDF   : 7.11.121.233   115712 Bytes  25.12.2013 19:49:15
VBASE017.VDF   : 7.11.122.57   325120 Bytes  27.12.2013 10:46:40
VBASE018.VDF   : 7.11.122.123   199680 Bytes  28.12.2013 14:13:23
VBASE019.VDF   : 7.11.122.124     2048 Bytes  28.12.2013 14:13:23
VBASE020.VDF   : 7.11.122.125     2048 Bytes  28.12.2013 14:13:23
VBASE021.VDF   : 7.11.122.126     2048 Bytes  28.12.2013 14:13:23
VBASE022.VDF   : 7.11.122.127     2048 Bytes  28.12.2013 14:13:23
VBASE023.VDF   : 7.11.122.128     2048 Bytes  28.12.2013 14:13:23
VBASE024.VDF   : 7.11.122.129     2048 Bytes  28.12.2013 14:13:23
VBASE025.VDF   : 7.11.122.130     2048 Bytes  28.12.2013 14:13:23
VBASE026.VDF   : 7.11.122.131     2048 Bytes  28.12.2013 14:13:23
VBASE027.VDF   : 7.11.122.132     2048 Bytes  28.12.2013 14:13:24
VBASE028.VDF   : 7.11.122.133     2048 Bytes  28.12.2013 14:13:24
VBASE029.VDF   : 7.11.122.134     2048 Bytes  28.12.2013 14:13:24
VBASE030.VDF   : 7.11.122.135     2048 Bytes  28.12.2013 14:13:24
VBASE031.VDF   : 7.11.122.136    98816 Bytes  28.12.2013 14:13:25
Engineversion  : 8.2.12.166
AEVDF.DLL      : 8.1.3.4       102774 Bytes  31.10.2013 18:25:18
AESCRIPT.DLL   : 8.1.4.176     520574 Bytes  19.12.2013 17:03:55
AESCN.DLL      : 8.1.10.6      131447 Bytes  11.12.2013 21:26:57
AESBX.DLL      : 8.2.16.26    1245560 Bytes  31.10.2013 18:25:18
AERDL.DLL      : 8.2.0.138     704888 Bytes  02.12.2013 17:18:09
AEPACK.DLL     : 8.3.3.8       762232 Bytes  19.12.2013 17:03:54
AEOFFICE.DLL   : 8.1.2.76      205181 Bytes  31.10.2013 18:25:18
AEHEUR.DLL     : 8.1.4.830    6386042 Bytes  19.12.2013 17:03:50
AEHELP.DLL     : 8.1.27.10     266618 Bytes  24.11.2013 10:31:26
AEGEN.DLL      : 8.1.7.20      446839 Bytes  24.11.2013 10:31:25
AEEXP.DLL      : 8.4.1.138     418168 Bytes  13.12.2013 15:55:20
AEEMU.DLL      : 8.1.3.2       393587 Bytes  31.10.2013 18:25:18
AECORE.DLL     : 8.1.33.0      225657 Bytes  11.12.2013 21:26:56
AEBB.DLL       : 8.1.1.4        53619 Bytes  31.10.2013 18:25:18
AVWINLL.DLL    : 14.0.2.180     23608 Bytes  12.12.2013 09:55:02
AVPREF.DLL     : 14.0.2.180     48696 Bytes  12.12.2013 09:55:24
AVREP.DLL      : 14.0.2.180    175672 Bytes  12.12.2013 09:55:25
AVARKT.DLL     : 14.0.2.254    256056 Bytes  12.12.2013 09:55:05
AVEVTLOG.DLL   : 14.0.2.180    165944 Bytes  12.12.2013 09:55:15
SQLITE3.DLL    : 3.7.0.1       394808 Bytes  31.10.2013 18:25:40
AVSMTP.DLL     : 14.0.2.180     60472 Bytes  12.12.2013 09:55:29
NETNT.DLL      : 14.0.2.180     13368 Bytes  12.12.2013 09:56:41
RCIMAGE.DLL    : 14.0.2.180   4786744 Bytes  12.12.2013 09:55:02
RCTEXT.DLL     : 14.0.2.270     73272 Bytes  12.12.2013 09:55:02

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: E:\Program Files\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, E:, 
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Samstag, 28. Dezember 2013  16:55

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, E:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'TrustedInstaller.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '119' Modul(e) wurden durchsucht
Durchsuche Prozess 'FlashPlayerPlugin_11_9_900_170.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'FlashPlayerPlugin_11_9_900_170.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'plugin-container.exe' - '79' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '128' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'wuauclt.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '116' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'avwebg7.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvstreamsvc.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvtray.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'PnkBstrA.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'daemonu.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamgui.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvstreamsvc.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'AdobeARM.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '96' Modul(e) wurden durchsucht
Durchsuche Prozess 'NvTmru.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'DivXUpdate.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamservice.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamscheduler.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'apnmcp.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '101' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '200' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvxdsync.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '143' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '98' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvSCPAPISvr.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '1619' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
Beginne mit der Suche in 'E:\' <Volume>


Ende des Suchlaufs: Samstag, 28. Dezember 2013  17:46
Benötigte Zeit: 51:00 Minute(n)

Der Suchlauf wurde vollständig durchgeführt.

  22382 Verzeichnisse wurden überprüft
 577657 Dateien wurden geprüft
      0 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      0 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 577657 Dateien ohne Befall
   4204 Archive wurden durchsucht
      0 Warnungen
      0 Hinweise
 426251 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden

schrauber · 29.12.2013, 12:28

Adobe updaten.

Fertig

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Grandpakai · 29.12.2013, 12:42

Vielen Dank für die gute und verständliche Hilfe, ich bin dir super dankbar!
Ich werde die Tipps befolgen und mir Mühe geben es einzuhalten

Danke mfg Kai

schrauber · 30.12.2013, 10:44

Gern Geschehen

28.12.2013, 12:46	#9
schrauber /// the machine /// TB-Ausbilder	Windows 7 32 bit, Firefox (australianbrewingcompany meldung) Lass ESET weg und mach nen Vollscan mit deinem AV Programm. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

30.12.2013, 10:44	#13
schrauber /// the machine /// TB-Ausbilder	Windows 7 32 bit, Firefox (australianbrewingcompany meldung) Gern Geschehen __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Windows 7 32 bit, Firefox (australianbrewingcompany meldung)

Log-Analyse und Auswertung: Windows 7 32 bit, Firefox (australianbrewingcompany meldung)