| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunterWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
23.12.2013, 08:37
| #1 |
| |  Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunter Guten Tag, ich hoffe hier kann mir jemand helfen und mich durch diese ärgerliche Situation navigieren. Folgendes Problem, ich wurde über meinen Google Chrome permanent auf Redirect.ad-feed.net geleitet, dieser Zugriff wurde dann von meinem Virenprogramm Avast blockiert. Später öffnete sich dann auch noch eine Seite wo ich mir Spyhunter 4 ziehen soll, dies tat ich allerdings nicht! Ich benutze Windows 7 64, Avast freeware und Malwarebytes Anti-Malware. Ich habe danach Avast scannen lassen und die einzigen Funde wurden mit Fehler Archiv ist Kennwortgeschüzt tituliert, danach lies ich Malwarebytes durchlaufen und diese Funde wurden gelöscht. Nun werde ich zwar nicht mehr auf andere Seiten geleitete doch Aufbau beim surfen ist total verzögert und mehrmals am laden, es fühlt sich alles sehr merkwürdig an. Das ende vom Lied ist nun dass ich einen Bluescreen bekommen hab das sich Windows nun herunterfährt um Beschädigungen zu vermeiden. Ich lass alles momentan im abgesicherten Modus mit Netzwerkverbindung. Ich wäre wirklich sehr dankbar wenn sich jemand meinem Problem annehmen könnte und ich zukünftig wieder bedenkenlos online gehen kann. Gruß Dario Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 08:10 on 23/12/2013 (Dario)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-12-2013 01
Ran by Dario (administrator) on DARIO-PC on 23-12-2013 07:29:41
Running from C:\Users\Dario\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6846096 2012-11-19] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [kX Mixer] - C:\Program Files\kX Audio Driver\3550\kxmixer.exe [677896 2009-09-17] (Eugene Gavrilov)
HKLM\...\Run: [Cmaudio8788] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] - C:\Windows\SysWOW64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKCU\...\Run: [Remote Control Server] - C:\Program Files (x86)\Remote Control Server\Remote Control Server.exe
MountPoints2: {9cd3c3ca-27b3-11e3-aca0-806e6f6e6963} - D:\Player.exe
MountPoints2: {fc66464e-27af-11e3-980f-806e6f6e6963} - D:\Bin\ASSETUP.exe
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [PowerDVD13Agent] - "C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe"
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442200 2013-10-17] (Razer Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-29] (Advanced Micro Devices, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x57011A71C1BBCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-3.8 - C:\Users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\Extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR HomePage:
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Extension: (Google Docs) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (YouTube) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Plus-HD-3.8) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0
CHR Extension: (Gmail) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe [927232 2012-10-29] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-02] ()
==================== Drivers (Whitelisted) ====================
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-21] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [1257472 2009-10-19] (C-Media Inc)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 kxwdmdrv; C:\Windows\System32\drivers\kx.sys [765448 2009-09-17] (Eugene Gavrilov)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39080 2013-10-14] (Razer Inc)
S3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [38016 2013-05-31] (SteelSeries Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 ArcCtrl; system32\drivers\ArcCtrl.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-23 07:29 - 2013-12-23 07:30 - 00012024 _____ C:\Users\Dario\Desktop\FRST.txt
2013-12-23 07:29 - 2013-12-23 07:29 - 00000000 ____D C:\FRST
2013-12-23 07:22 - 2013-12-23 07:22 - 01928280 _____ (Farbar) C:\Users\Dario\Desktop\FRST64.exe
2013-12-23 07:19 - 2013-12-23 07:19 - 00000472 _____ C:\Users\Dario\Desktop\defogger_disable.log
2013-12-23 07:19 - 2013-12-23 07:19 - 00000000 _____ C:\Users\Dario\defogger_reenable
2013-12-23 07:16 - 2013-12-23 07:16 - 00050477 _____ C:\Users\Dario\Desktop\Defogger.exe
2013-12-23 06:57 - 2013-12-23 07:29 - 00014698 _____ C:\Users\Dario\Desktop\Unbenannt 1.odt
2013-12-22 16:55 - 2013-12-22 16:56 - 00000033 _____ C:\Users\Dario\Desktop\Hijacker.txt
2013-12-20 23:54 - 2013-12-20 23:54 - 00001123 _____ C:\Users\Public\Desktop\Audiograbber.lnk
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Users\Dario\AppData\Roaming\dlg
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Program Files (x86)\Audiograbber
2013-12-20 23:45 - 2013-12-20 23:45 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00000004 _____ C:\Windows\SysWOW64\('^w*dpw
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Users\Dario\AppData\Roaming\ASUS
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-12-20 23:44 - 2013-12-20 23:44 - 00046237 _____ C:\Windows\Cmicnfgp.ini.cfl
2013-12-20 23:44 - 2013-12-20 23:44 - 00001006 _____ C:\Windows\Cmicnfgp.ini.imi
2013-12-20 23:44 - 2013-12-20 23:44 - 00000945 _____ C:\Windows\system\Cmicnfgp.ini
2013-12-20 23:44 - 2013-12-20 23:44 - 00000142 _____ C:\Windows\system\Dlap.pfx
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\ASUS Xonar Essence STX Audio
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\7-Zip
2013-12-20 23:44 - 2009-11-11 15:03 - 00792064 ____N C:\Windows\system32\Cmeauoxy.exe
2013-12-20 23:44 - 2009-10-30 10:30 - 08151040 ____N (C-Media Corporation) C:\Windows\SysWOW64\CmiCnfgp.dll
2013-12-20 23:44 - 2009-10-19 17:10 - 01257472 _____ (C-Media Inc) C:\Windows\system32\Drivers\cmudaxp.sys
2013-12-20 23:44 - 2009-09-22 20:00 - 00000486 ____N C:\Windows\cmudaxp.ini
2013-12-20 23:44 - 2009-09-03 16:03 - 00120832 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv642.dll
2013-12-20 23:44 - 2009-09-03 16:03 - 00120832 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv64.dll
2013-12-20 23:44 - 2009-09-03 15:56 - 00208896 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv2.dll
2013-12-20 23:44 - 2009-09-03 15:56 - 00208896 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv.dll
2013-12-20 23:44 - 2009-08-19 16:00 - 00359424 ____N C:\Windows\system32\CmiInstallResAll64.dll
2013-12-20 23:44 - 2009-04-02 16:59 - 00143360 ____N C:\Windows\SysWOW64\VmixP8.dll
2013-12-20 23:44 - 2008-11-05 14:10 - 00457728 ____N (C-Media Electronics Inc.) C:\Windows\system32\cmasiopx.dll
2013-12-20 23:44 - 2008-11-05 12:28 - 00299008 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\cmasiop.dll
2013-12-20 23:44 - 2008-10-02 15:44 - 00005024 ____N C:\Windows\Cmicnfgp.ini.cfg
2013-12-20 23:44 - 2008-09-09 19:30 - 00000067 ____N C:\Windows\system32\cmasiopx.ini
2013-12-20 23:44 - 2008-09-09 19:30 - 00000062 ____N C:\Windows\SysWOW64\cmasiop.ini
2013-12-20 23:44 - 2008-07-23 18:59 - 00389120 ____N () C:\Windows\system32\CmiCnfgp.cpl
2013-12-20 23:44 - 2008-07-11 15:04 - 00200704 ____N C:\Windows\SysWOW64\HsMgr.exe
2013-12-20 23:44 - 2008-07-11 15:03 - 00282112 ____N C:\Windows\system\HsMgr64.exe
2013-12-20 23:44 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2013-12-20 23:44 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2013-12-20 23:44 - 2007-11-05 01:30 - 01144983 ____N C:\Windows\KB936225x64.msu
2013-12-20 23:44 - 2007-04-19 15:12 - 00032768 _____ (C-Media Electronics Inc.) C:\Windows\system32\cmudaxp.dll
2013-12-20 23:44 - 2006-10-06 05:45 - 00524768 _____ (Microsoft Corporation) C:\Windows\difxapi.dll
2013-12-20 23:44 - 2006-09-13 10:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\Cmpaoxy.dll
2013-12-20 23:44 - 2004-04-14 11:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\SysWOW64\CmiFltr.dll
2013-12-20 23:44 - 2004-04-14 11:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\CmiFltr.dll
2013-12-20 23:43 - 2013-12-20 23:43 - 01376768 _____ C:\Users\Dario\Downloads\7z920-x64.msi
2013-12-20 23:42 - 2013-12-20 23:42 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:41 - 00000000 ____D C:\Program Files\kX Audio Driver
2013-12-20 23:40 - 2013-12-20 23:41 - 10704856 _____ C:\Users\Dario\Downloads\PCI_STX_091126_7_12_8_1777_W73264.rar
2013-12-20 23:39 - 2013-12-20 23:40 - 06815648 _____ C:\Users\Dario\Downloads\kxdrv3550-x64-full.exe
2013-12-20 10:16 - 2013-12-20 11:22 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-20 10:16 - 2013-12-20 10:16 - 00000963 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-20 10:14 - 2013-12-20 10:15 - 01133552 _____ C:\Users\Dario\Downloads\SteamSetup.exe
2013-12-12 03:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 03:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 03:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 03:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-12 03:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 03:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 03:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 03:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 03:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 03:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-12 03:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 03:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 03:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 03:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 03:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 03:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-12 03:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-12 03:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 03:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-12 03:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-12 03:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-12 03:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 03:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 03:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-12 03:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 03:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 03:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 03:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 03:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-12 03:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-12 03:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 22:54 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 22:54 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 22:54 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 22:54 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 22:54 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 22:54 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 22:54 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 22:54 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 22:54 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 22:54 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 22:54 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 22:54 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 22:54 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 22:54 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 22:54 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 20:58 - 2013-12-11 20:58 - 00007625 _____ C:\Users\Dario\AppData\Local\Resmon.ResmonCfg
2013-12-11 13:53 - 2013-12-11 14:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-09 14:07 - 2013-12-23 07:29 - 00023552 ___SH C:\Users\Dario\Desktop\Thumbs.db
2013-12-08 15:37 - 2013-12-08 15:37 - 00000000 ____D C:\ProgramData\Sun
2013-12-06 09:22 - 2013-12-06 09:22 - 00000000 ____D C:\Users\Dario\Documents\Kontoauszüge
2013-12-04 15:11 - 2013-12-04 15:11 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 15:11 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-03 23:06 - 2013-12-03 23:06 - 00000000 ____D C:\ProgramData\ATI
2013-12-03 23:05 - 2013-12-03 23:48 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Raptr
2013-12-03 23:05 - 2013-12-03 23:05 - 00055445 _____ C:\Windows\SysWOW64\CCCInstall_201312032305432311.log
2013-12-03 23:05 - 2013-12-03 23:05 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-11-29 18:59 - 2013-11-29 18:59 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-11-29 18:59 - 2013-11-29 18:59 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:55 - 2013-11-29 18:55 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 09764088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
==================== One Month Modified Files and Folders =======
2013-12-23 07:30 - 2013-12-23 07:29 - 00012024 _____ C:\Users\Dario\Desktop\FRST.txt
2013-12-23 07:29 - 2013-12-23 07:29 - 00000000 ____D C:\FRST
2013-12-23 07:29 - 2013-12-23 06:57 - 00014698 _____ C:\Users\Dario\Desktop\Unbenannt 1.odt
2013-12-23 07:29 - 2013-12-09 14:07 - 00023552 ___SH C:\Users\Dario\Desktop\Thumbs.db
2013-12-23 07:22 - 2013-12-23 07:22 - 01928280 _____ (Farbar) C:\Users\Dario\Desktop\FRST64.exe
2013-12-23 07:19 - 2013-12-23 07:19 - 00000472 _____ C:\Users\Dario\Desktop\defogger_disable.log
2013-12-23 07:19 - 2013-12-23 07:19 - 00000000 _____ C:\Users\Dario\defogger_reenable
2013-12-23 07:19 - 2013-09-27 21:09 - 00000000 ____D C:\Users\Dario
2013-12-23 07:16 - 2013-12-23 07:16 - 00050477 _____ C:\Users\Dario\Desktop\Defogger.exe
2013-12-23 07:14 - 2013-11-10 10:00 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-23 07:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-23 06:54 - 2013-09-27 21:09 - 02036971 _____ C:\Windows\WindowsUpdate.log
2013-12-23 06:43 - 2013-09-27 22:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-23 06:39 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-23 06:39 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-23 06:36 - 2011-04-12 08:43 - 00700130 _____ C:\Windows\system32\perfh007.dat
2013-12-23 06:36 - 2011-04-12 08:43 - 00149768 _____ C:\Windows\system32\perfc007.dat
2013-12-23 06:36 - 2009-07-14 06:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-23 06:32 - 2013-11-10 10:00 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-23 06:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-23 06:32 - 2009-07-14 05:51 - 00072537 _____ C:\Windows\setupact.log
2013-12-22 16:56 - 2013-12-22 16:55 - 00000033 _____ C:\Users\Dario\Desktop\Hijacker.txt
2013-12-22 16:35 - 2010-11-21 04:47 - 00027016 _____ C:\Windows\PFRO.log
2013-12-22 12:27 - 2013-09-27 21:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-21 05:00 - 2013-10-11 18:47 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Spotify
2013-12-21 03:39 - 2013-09-27 21:58 - 00000000 ____D C:\Users\Dario\AppData\Roaming\vlc
2013-12-21 02:03 - 2013-09-27 21:33 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-20 23:55 - 2013-09-27 21:09 - 00000000 ____D C:\Users\Dario\AppData\Local\VirtualStore
2013-12-20 23:54 - 2013-12-20 23:54 - 00001123 _____ C:\Users\Public\Desktop\Audiograbber.lnk
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Users\Dario\AppData\Roaming\dlg
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Program Files (x86)\Audiograbber
2013-12-20 23:45 - 2013-12-20 23:45 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00000004 _____ C:\Windows\SysWOW64\('^w*dpw
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Users\Dario\AppData\Roaming\ASUS
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-12-20 23:45 - 2013-09-27 21:20 - 00064952 _____ C:\Users\Dario\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-20 23:45 - 2009-07-14 05:45 - 00320992 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-20 23:44 - 2013-12-20 23:44 - 00046237 _____ C:\Windows\Cmicnfgp.ini.cfl
2013-12-20 23:44 - 2013-12-20 23:44 - 00001006 _____ C:\Windows\Cmicnfgp.ini.imi
2013-12-20 23:44 - 2013-12-20 23:44 - 00000945 _____ C:\Windows\system\Cmicnfgp.ini
2013-12-20 23:44 - 2013-12-20 23:44 - 00000142 _____ C:\Windows\system\Dlap.pfx
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\ASUS Xonar Essence STX Audio
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\7-Zip
2013-12-20 23:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system
2013-12-20 23:43 - 2013-12-20 23:43 - 01376768 _____ C:\Users\Dario\Downloads\7z920-x64.msi
2013-12-20 23:42 - 2013-12-20 23:42 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:41 - 00000000 ____D C:\Program Files\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:40 - 10704856 _____ C:\Users\Dario\Downloads\PCI_STX_091126_7_12_8_1777_W73264.rar
2013-12-20 23:40 - 2013-12-20 23:39 - 06815648 _____ C:\Users\Dario\Downloads\kxdrv3550-x64-full.exe
2013-12-20 11:22 - 2013-12-20 10:16 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-20 10:16 - 2013-12-20 10:16 - 00000963 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-20 10:15 - 2013-12-20 10:14 - 01133552 _____ C:\Users\Dario\Downloads\SteamSetup.exe
2013-12-19 19:48 - 2013-10-11 18:48 - 00000000 ____D C:\Users\Dario\AppData\Local\Spotify
2013-12-19 00:34 - 2013-09-27 21:58 - 00000000 ____D C:\Users\Dario\AppData\Roaming\TS3Client
2013-12-19 00:01 - 2013-09-28 00:13 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-18 23:43 - 2013-09-28 00:13 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-15 09:53 - 2013-10-01 17:30 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 09:52 - 2013-09-28 16:45 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 03:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-12 03:16 - 2013-09-27 21:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-11 20:58 - 2013-12-11 20:58 - 00007625 _____ C:\Users\Dario\AppData\Local\Resmon.ResmonCfg
2013-12-11 14:40 - 2013-12-11 13:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-10 20:52 - 2013-09-27 22:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 20:52 - 2013-09-27 22:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 20:52 - 2013-09-27 22:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-08 23:03 - 2013-09-28 16:19 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-08 23:03 - 2013-09-27 21:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-08 15:37 - 2013-12-08 15:37 - 00000000 ____D C:\ProgramData\Sun
2013-12-08 15:37 - 2013-11-21 23:45 - 00000000 ____D C:\ProgramData\Oracle
2013-12-07 11:11 - 2013-11-11 15:19 - 00000000 ____D C:\Users\Dario\AppData\Local\Splashtop
2013-12-07 11:11 - 2013-11-11 15:18 - 00000000 ____D C:\ProgramData\Splashtop
2013-12-06 23:09 - 2013-11-10 10:00 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 23:09 - 2013-11-10 10:00 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-06 09:22 - 2013-12-06 09:22 - 00000000 ____D C:\Users\Dario\Documents\Kontoauszüge
2013-12-04 15:11 - 2013-12-04 15:11 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-03 23:48 - 2013-12-03 23:05 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Raptr
2013-12-03 23:48 - 2013-11-09 01:59 - 00000000 ____D C:\Program Files (x86)\Raptr
2013-12-03 23:48 - 2013-09-27 21:33 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-03 23:06 - 2013-12-03 23:06 - 00000000 ____D C:\ProgramData\ATI
2013-12-03 23:05 - 2013-12-03 23:05 - 00055445 _____ C:\Windows\SysWOW64\CCCInstall_201312032305432311.log
2013-12-03 23:05 - 2013-12-03 23:05 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-12-03 23:05 - 2013-09-27 22:28 - 00000000 ____D C:\ProgramData\AMD
2013-12-03 23:05 - 2013-09-27 22:24 - 00000000 ____D C:\Program Files\ATI Technologies
2013-12-03 23:04 - 2013-09-27 21:20 - 01596050 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-03 23:02 - 2013-09-27 22:23 - 00000000 ____D C:\AMD
2013-11-29 18:59 - 2013-11-29 18:59 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-11-29 18:59 - 2013-11-29 18:59 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:55 - 2013-11-29 18:55 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:53 - 2013-11-07 18:39 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-11-29 18:53 - 2013-09-21 10:45 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-11-29 18:52 - 2013-11-07 18:39 - 01319064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-11-29 18:51 - 2013-08-31 01:13 - 01100728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 09764088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:49 - 2013-09-21 10:44 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-11-29 18:48 - 2013-09-21 10:44 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-11-29 18:47 - 2013-11-07 18:39 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-11-29 18:46 - 2013-11-07 18:39 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:13 - 2013-11-07 18:02 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.25.18.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
2013-11-28 19:59 - 2013-09-28 00:01 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-11-27 01:07 - 2013-10-04 19:14 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2013-11-26 12:54 - 2013-12-12 03:00 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-12 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-12 03:00 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-12 03:00 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-12 03:00 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-12 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-12 03:00 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-12 03:00 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-12 03:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-12 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-12 03:00 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-12 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-12 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-12 03:00 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-12 03:00 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-12 03:00 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-26 09:38 - 2013-12-12 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-26 09:35 - 2013-12-12 03:00 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-12 03:00 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-12 03:00 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 03:00 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-12 03:00 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-12 03:00 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-12 03:00 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 03:00 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-12 03:00 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-12 03:00 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-12 03:00 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-12 03:00 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 03:00 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-12 03:00 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
Some content of TEMP:
====================
C:\Users\Dario\AppData\Local\Temp\COMAP.EXE
C:\Users\Dario\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Dario\AppData\Local\Temp\installerdll148044.dll
C:\Users\Dario\AppData\Local\Temp\installerdll175641.dll
C:\Users\Dario\AppData\Local\Temp\install_reader11_de_mssd_aaa_aih.exe
C:\Users\Dario\AppData\Local\Temp\raptrpatch.exe
C:\Users\Dario\AppData\Local\Temp\raptr_stub.exe
C:\Users\Dario\AppData\Local\Temp\rootsupd.exe
C:\Users\Dario\AppData\Local\Temp\Setup.exe
C:\Users\Dario\AppData\Local\Temp\sonarinst.exe
C:\Users\Dario\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Dario\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Dario\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe
C:\Users\Dario\AppData\Local\Temp\x2blapi.dll
C:\Users\Dario\AppData\Local\Temp\_is3439.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-20 00:02
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-12-2013 01
Ran by Dario at 2013-12-23 07:31:01
Running from C:\Users\Dario\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
AMD Accelerated Video Transcoding (Version: 13.20.100.31129)
AMD Catalyst Control Center (x32 Version: 2013.1129.1143.20969)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.81129.1203)
AMD Wireless Display v3.0 (Version: 1.0.0.14)
ASUS Xonar Essence STX Audio Driver
Audiograbber 1.83 SE (x32 Version: 1.83 SE )
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Battlefield 4™ (x32 Version: 1.0.0.1)
Battlefield 4™ Beta (x32 Version: 1.0.0.0)
Battlelog Web Plugins (x32 Version: 2.3.2)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1129.1143.20969)
Catalyst Control Center InstallProxy (x32 Version: 2013.1129.1143.20969)
Catalyst Control Center Localization All (x32 Version: 2013.1129.1143.20969)
CCC Help Chinese Standard (x32 Version: 2013.1129.1142.20969)
CCC Help Chinese Traditional (x32 Version: 2013.1129.1142.20969)
CCC Help Czech (x32 Version: 2013.1129.1142.20969)
CCC Help Danish (x32 Version: 2013.1129.1142.20969)
CCC Help Dutch (x32 Version: 2013.1129.1142.20969)
CCC Help English (x32 Version: 2013.1129.1142.20969)
CCC Help Finnish (x32 Version: 2013.1129.1142.20969)
CCC Help French (x32 Version: 2013.1129.1142.20969)
CCC Help German (x32 Version: 2013.1129.1142.20969)
CCC Help Greek (x32 Version: 2013.1129.1142.20969)
CCC Help Hungarian (x32 Version: 2013.1129.1142.20969)
CCC Help Italian (x32 Version: 2013.1129.1142.20969)
CCC Help Japanese (x32 Version: 2013.1129.1142.20969)
CCC Help Korean (x32 Version: 2013.1129.1142.20969)
CCC Help Norwegian (x32 Version: 2013.1129.1142.20969)
CCC Help Polish (x32 Version: 2013.1129.1142.20969)
CCC Help Portuguese (x32 Version: 2013.1129.1142.20969)
CCC Help Russian (x32 Version: 2013.1129.1142.20969)
CCC Help Spanish (x32 Version: 2013.1129.1142.20969)
CCC Help Swedish (x32 Version: 2013.1129.1142.20969)
CCC Help Thai (x32 Version: 2013.1129.1142.20969)
CCC Help Turkish (x32 Version: 2013.1129.1142.20969)
ccc-utility64 (Version: 2013.1129.1143.20969)
ESN Sonar (x32 Version: 0.70.4)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.22.3)
Intel(R) Management Engine Components (x32 Version: 9.0.0.1323)
Intel(R) Rapid Storage Technology (Version: 12.0.0.1083)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 2.5.0.19)
Intel® Trusted Connect Service Client (Version: 1.27.798.1)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0)
Mozilla Maintenance Service (x32 Version: 24.2.0)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0)
OpenAL (x32)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
Origin (x32 Version: 9.2.1.4399)
PunkBuster Services (x32 Version: 0.993)
Razer Synapse 2.0 (x32 Version: 1.15.4)
Realtek Ethernet Controller Driver (x32 Version: 7.67.1226.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6782)
Skype™ 6.9 (x32 Version: 6.9.106)
Splashtop Software Updater (x32 Version: 1.5.6.14)
Splashtop Streamer (x32 Version: 2.4.5.2)
Spotify (HKCU Version: 0.9.6.81.gd359a796)
Steam (x32)
TeamSpeak 3 Client (Version: 3.0.13.1)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
VLC media player 2.1.0 (x32 Version: 2.1.0)
World of Warcraft (x32)
==================== Restore Points =========================
11-12-2013 21:53:31 Windows Update
12-12-2013 02:00:22 Windows Update
15-12-2013 08:52:30 Windows Update
20-12-2013 22:40:05 Windows Update
20-12-2013 22:41:32 Gerätetreiber-Paketinstallation: Eugene Gavrilov Audio-, Video- und Gamecontroller
20-12-2013 22:43:46 Installed 7-Zip 9.20 (x64 edition)
20-12-2013 22:44:43 Gerätetreiber-Paketinstallation: ASUSTeK Audio-, Video- und Gamecontroller
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {5614B73F-FCE1-4A58-ADA5-2044A925A3A7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {D9A91528-CCF3-4CD5-B3E5-89C3E301923F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-10] (Google Inc.)
Task: {DB4802EE-D475-4E6C-B628-062A5EDFC67C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {F89EECDB-D380-461C-B8F8-4E890360DF0D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-10] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-12-23 06:54 - 2013-12-22 17:59 - 02246144 _____ () C:\Program Files\AVAST Software\Avast\defs\13122201\algo.dll
2013-09-27 21:12 - 2013-12-23 06:32 - 00025600 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.01\PEbiosinterface32.dll
2013-09-27 21:12 - 2012-05-07 17:04 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.01\ATKEX.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/23/2013 06:34:19 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/22/2013 04:37:45 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/22/2013 00:28:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/20/2013 11:47:23 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/20/2013 11:44:08 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/20/2013 11:36:23 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/19/2013 07:46:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/17/2013 07:54:37 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/17/2013 09:51:18 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/16/2013 06:17:19 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (12/23/2013 07:29:20 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:22:43 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:21:55 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:21:42 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:21:38 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:21:23 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:21:18 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:20:12 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:20:09 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Error: (12/23/2013 07:20:08 AM) (Source: DCOM) (User: Dario-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Dario-PCDarioS-1-5-21-430033498-3639492437-679756840-1000LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (12/23/2013 06:34:19 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/22/2013 04:37:45 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/22/2013 00:28:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/20/2013 11:47:23 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/20/2013 11:44:08 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/20/2013 11:36:23 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/19/2013 07:46:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/17/2013 07:54:37 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/17/2013 09:51:18 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/16/2013 06:17:19 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2013-09-28 17:45:24.830
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.798
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.740
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.675
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.625
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.589
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.558
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.511
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.439
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-28 17:45:24.371
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 10%
Total physical RAM: 16322.26 MB
Available physical RAM: 14569.6 MB
Total Pagefile: 32642.7 MB
Available Pagefile: 30752.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.79 GB) (Free:123.46 GB) NTFS
Drive f: (Hotel) (Fixed) (Total:1863.01 GB) (Free:1855.64 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: E7BDFE66)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 6E1BD8BE)
Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.16.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Dario :: DARIO-PC [Administrator] 22.12.2013 12:52:48 mbam-log-2013-12-22 (12-52-48).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|F:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 325633 Laufzeit: 22 Minute(n), 40 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 13 HKCR\CrossriderApp0039030.BHO (PUP.Optional.CrossRider) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0039030.Sandbox.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0039030.Sandbox (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{44444444-4444-4444-4444-440344904430} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{55555555-5555-5555-5555-550355905530} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{11111111-1111-1111-1111-110311901130} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311901130} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311901130} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0039030.BHO.1 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311901130} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstalledBrowserExtensions\Plus HD (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 1 C:\Program Files (x86)\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 26 C:\Users\Dario\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QKLEWXK6\plus-hd-3-8[1].exe (PUP.Optional.CrossRider) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bg.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil64.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-firefoxinstaller.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\utils.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Temp\39030_updater.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-enabler.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-updater.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-chromeinstaller.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\39030.crx (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\39030.xpi (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\background.html (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Installer.log (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil64.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-helper.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8.ico (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Uninstall.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
|
23.12.2013, 09:28
| #2 | |
| /// the machine /// TB-Ausbilder    | Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunter hi,
__________________Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
23.12.2013, 10:44
| #3 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunter Vielen Dank für deine schnelle Antwort, hier das Log
__________________Code:
ATTFilter ComboFix 13-12-21.01 - Dario 23.12.2013 10:35:47.1.4 - x64 NETWORK
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.16322.15112 [GMT 1:00]
ausgeführt von:: c:\users\Dario\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_ofjgnhihlklpobkaloamkankaaoclfjh_0
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_ofjgnhihlklpobkaloamkankaaoclfjh_0\11
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\background.html
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\crossriderManifest.json
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\manifest.xml
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins.json
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\1_base.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\101_cortica_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\102_dealply_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\103_intext_5_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\104_jollywallet_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\105_corticas_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\107_coupish_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\108_icm_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\116_ads_only_5_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\117_coupons_intext_ads_5_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\119_similar_web_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\120_luck_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\123_intext_adv_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\125_arcadi2_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\126_revizer_ws_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\127_revizer_p_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\128_superfish_pricora_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\129_widdit_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\135_arcadi3_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\138_getdeal_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\14_CrossriderUtils.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\141_corticas_ru_m.js.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\142_intext_fa_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\155_ibario_pops_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\17_jQuery.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\19_CHAppAPIWrapper.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\21_debug.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\22_resources.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\28_initializer.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\4_jquery_1_7_1.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\47_resources_background.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\64_appApiMessage.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\72_appApiValidation.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\78_CrossriderInfo.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\80_CHPopupAppAPI.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\87_ginyas_wrapper.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\91_monetizationLoader.js.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\92_superfish_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\plugins\97_resourceApiWrapper.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\userCode\background.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\extensionData\userCode\extension.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\icons\actions\1.png
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\icons\icon128.png
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\icons\icon16.png
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\icons\icon48.png
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\api\chrome.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\api\cookie.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\api\message.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\api\pageAction.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\api\pageActionBG.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\background.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\app_api.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\bg_app_api.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\consts.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\cookie_store.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\crossriderAPI.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\delegate.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\events.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\extensionDataStore.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\installer.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\logFile.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\logging.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\onBGDocumentLoad.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\popupResource\newPopup.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\popupResource\popup.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\reports.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\storageWrapper.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\updateManager.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\util.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\lib\xhr.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\js\main.js
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\manifest.json
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0\popup.html
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\000040.ldb
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\000058.log
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\CURRENT
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\LOCK
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\LOG
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\LOG.old
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\MANIFEST-000057
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ofjgnhihlklpobkaloamkankaaoclfjh_0.localstorage-journal
c:\users\Dario\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ofjgnhihlklpobkaloamkankaaoclfjh_0.localstorage
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome.manifest
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\asyncDB.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\background.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\browserAction.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\contextMenu.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\dbManager.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\dom_bg.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\fileManager.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\firefox.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\firefoxNotifications.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\firefoxOmnibox.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\message.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\pageAction.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\request.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\tabs.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\api\webRequest.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\background.html
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\baseObject.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\browser.xul
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\console.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\consts.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\delegate.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\httpObserver.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\IDBWrapper.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\installer.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\pluginsManager.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\prefs.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\progressListenerObserver.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\registry.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\reloadObserver.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\reports.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\requestObject.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\searchSettings.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\uninstallObserver.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\updateManager.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\utils.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\core\xhr.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\dialog.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\extensionCode\backgroundCode.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\extensionCode\pageCode.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\main.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\options.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\options.xul
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\chrome\content\search_dialog.xul
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\defaults\preferences\prefs.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\manifest.xml
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins.json
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\1_base.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\101_cortica_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\102_dealply_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\103_intext_5_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\104_jollywallet_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\105_corticas_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\107_coupish_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\108_icm_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\116_ads_only_5_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\117_coupons_intext_ads_5_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\119_similar_web_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\120_luck_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\123_intext_adv_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\125_arcadi2_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\126_revizer_ws_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\127_revizer_p_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\128_superfish_pricora_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\129_widdit_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\135_arcadi3_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\138_getdeal_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\14_CrossriderUtils.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\141_corticas_ru_m.js.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\142_intext_fa_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\155_ibario_pops_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\16_FFAppAPIWrapper.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\17_jQuery.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\21_debug.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\22_resources.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\28_initializer.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\4_jquery_1_7_1.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\47_resources_background.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\64_appApiMessage.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\72_appApiValidation.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\78_CrossriderInfo.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\87_ginyas_wrapper.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\91_monetizationLoader.js.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\92_superfish_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\98_omniCommands.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\userCode\background.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\userCode\extension.js
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\install.rdf
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\locale\en-US\translations.dtd
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\button1.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\button2.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\button3.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\button4.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\button5.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\crossrider_statusbar.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\icon128.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\icon16.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\icon24.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\icon48.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\panelarrow-up.png
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\popup.html
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\skin.css
c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\update.css
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-11-23 bis 2013-12-23 ))))))))))))))))))))))))))))))
.
.
2013-12-23 09:37 . 2013-12-23 09:37 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-23 07:26 . 2013-12-23 07:26 -------- d-----w- c:\program files (x86)\7-Zip
2013-12-23 06:29 . 2013-12-23 06:29 -------- d-----w- C:\FRST
2013-12-23 06:08 . 2013-12-23 06:08 -------- d-----w- c:\users\Dario\AppData\Local\Diagnostics
2013-12-20 22:54 . 2013-12-20 22:54 -------- d-----w- c:\users\Dario\AppData\Roaming\dlg
2013-12-20 22:54 . 2013-12-20 22:54 -------- d-----w- c:\program files (x86)\Audiograbber
2013-12-20 22:45 . 2013-12-20 22:45 -------- d-----w- c:\users\Dario\AppData\Roaming\ASUS
2013-12-20 22:45 . 2013-12-20 22:45 419840 ----a-w- c:\windows\system32\wrap_oal.dll
2013-12-20 22:45 . 2013-12-20 22:45 413696 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2013-12-20 22:45 . 2013-12-20 22:45 111616 ----a-w- c:\windows\system32\OpenAL32.dll
2013-12-20 22:45 . 2013-12-20 22:45 102400 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2013-12-20 22:45 . 2013-12-20 22:45 -------- d-----w- c:\program files (x86)\OpenAL
2013-12-20 22:41 . 2013-12-20 22:41 -------- d-----w- c:\program files\kX Audio Driver
2013-12-20 22:40 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BFD2BC8C-DE63-4B48-8FCE-D0A4598D20FF}\mpengine.dll
2013-12-20 09:16 . 2013-12-20 09:17 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-12-20 09:16 . 2013-12-20 10:22 -------- d-----w- c:\program files (x86)\Steam
2013-12-11 21:54 . 2013-11-12 02:23 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-11 12:53 . 2013-12-11 13:40 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2013-12-04 14:11 . 2013-12-04 14:11 -------- d-----w- c:\users\Dario\AppData\Roaming\Malwarebytes
2013-12-04 14:11 . 2013-12-04 14:11 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-12-04 14:11 . 2013-12-04 14:11 -------- d-----w- c:\programdata\Malwarebytes
2013-12-04 14:11 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-12-04 14:11 . 2013-12-04 14:11 -------- d-----w- c:\users\Dario\AppData\Local\Programs
2013-12-03 22:06 . 2013-12-03 22:06 -------- d-----w- c:\programdata\ATI
2013-12-03 22:05 . 2013-12-03 22:48 -------- d-----w- c:\users\Dario\AppData\Roaming\Raptr
2013-12-03 22:05 . 2013-12-03 22:05 -------- d-----w- c:\program files (x86)\AMD AVT
2013-11-29 17:59 . 2013-11-29 17:59 157736 ----a-w- c:\windows\system32\amdhcp64.dll
2013-11-29 17:59 . 2013-11-29 17:59 142304 ----a-w- c:\windows\SysWow64\amdhcp32.dll
2013-11-29 17:58 . 2013-11-29 17:58 78432 ----a-w- c:\windows\system32\atimpc64.dll
2013-11-29 17:58 . 2013-11-29 17:58 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2013-11-29 17:58 . 2013-11-29 17:58 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-11-29 17:58 . 2013-11-29 17:58 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-11-29 17:55 . 2013-11-29 17:55 143304 ----a-w- c:\windows\system32\atiuxp64.dll
2013-11-29 17:54 . 2013-11-29 17:54 126336 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-11-29 17:50 . 2013-11-29 17:50 9764088 ----a-w- c:\windows\system32\atidxx64.dll
2013-11-29 17:50 . 2013-11-29 17:50 8412680 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-11-29 17:39 . 2013-11-29 17:39 13201920 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2013-11-29 17:24 . 2013-11-29 17:24 230912 ----a-w- c:\windows\system32\clinfo.exe
2013-11-29 17:24 . 2013-11-29 17:24 100352 ----a-w- c:\windows\system32\OpenVideo64.dll
2013-11-29 17:23 . 2013-11-29 17:23 83968 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2013-11-29 17:23 . 2013-11-29 17:23 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2013-11-29 17:23 . 2013-11-29 17:23 73728 ----a-w- c:\windows\SysWow64\OVDecode.dll
2013-11-29 17:23 . 2013-11-29 17:23 29363712 ----a-w- c:\windows\system32\amdocl64.dll
2013-11-29 17:21 . 2013-11-29 17:21 24846848 ----a-w- c:\windows\SysWow64\amdocl.dll
2013-11-29 17:18 . 2013-11-29 17:18 63488 ----a-w- c:\windows\system32\OpenCL.dll
2013-11-29 17:18 . 2013-11-29 17:18 57344 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-11-29 17:00 . 2013-11-29 17:00 26350592 ----a-w- c:\windows\system32\atio6axx.dll
2013-11-29 16:55 . 2013-11-29 16:55 368640 ----a-w- c:\windows\system32\atiapfxx.exe
2013-11-29 16:55 . 2013-11-29 16:55 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2013-11-29 16:55 . 2013-11-29 16:55 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2013-11-29 16:55 . 2013-11-29 16:55 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2013-11-29 16:55 . 2013-11-29 16:55 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2013-11-29 16:54 . 2013-11-29 16:54 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2013-11-29 16:51 . 2013-11-29 16:51 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2013-11-29 16:42 . 2013-11-29 16:42 22156288 ----a-w- c:\windows\SysWow64\atioglxx.dll
2013-11-29 16:35 . 2013-11-29 16:35 442368 ----a-w- c:\windows\system32\atidemgy.dll
2013-11-29 16:35 . 2013-11-29 16:35 31232 ----a-w- c:\windows\system32\atimuixx.dll
2013-11-29 16:35 . 2013-11-29 16:35 585216 ----a-w- c:\windows\system32\atieclxx.exe
2013-11-29 16:34 . 2013-11-29 16:34 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2013-11-29 16:33 . 2013-11-29 16:33 190976 ----a-w- c:\windows\system32\atitmm64.dll
2013-11-29 16:05 . 2013-11-29 16:05 1145344 ----a-w- c:\windows\system32\atiadlxx.dll
2013-11-29 16:04 . 2013-11-29 16:04 825856 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2013-11-29 16:04 . 2013-11-29 16:04 74752 ----a-w- c:\windows\system32\atig6pxx.dll
2013-11-29 16:04 . 2013-11-29 16:04 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2013-11-29 16:04 . 2013-11-29 16:04 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2013-11-29 16:04 . 2013-11-29 16:04 100352 ----a-w- c:\windows\system32\atig6txx.dll
2013-11-29 16:04 . 2013-11-29 16:04 96768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2013-11-29 16:04 . 2013-11-29 16:04 624128 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2013-11-29 16:02 . 2013-11-29 16:02 96256 ----a-w- c:\windows\system32\amdave64.dll
2013-11-29 16:02 . 2013-11-29 16:02 90112 ----a-w- c:\windows\SysWow64\amdave32.dll
2013-11-29 16:02 . 2013-11-29 16:02 89088 ----a-w- c:\windows\system32\atisamu64.dll
2013-11-29 16:02 . 2013-11-29 16:02 80896 ----a-w- c:\windows\SysWow64\atisamu32.dll
2013-11-29 16:00 . 2013-11-29 16:00 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2013-11-29 11:34 . 2013-11-29 11:34 51200 ----a-w- c:\windows\system32\kdbsdk64.dll
2013-11-29 11:29 . 2013-11-29 11:29 38912 ----a-w- c:\windows\SysWow64\kdbsdk32.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-18 23:01 . 2013-09-27 23:13 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-12-18 22:43 . 2013-09-27 23:13 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-12-15 08:52 . 2013-09-28 15:45 90708896 ----a-w- c:\windows\system32\MRT.exe
2013-12-10 19:52 . 2013-09-27 21:00 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-10 19:52 . 2013-09-27 21:00 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-11-29 17:53 . 2013-11-07 17:39 115512 ----a-w- c:\windows\system32\atiu9p64.dll
2013-11-29 17:53 . 2013-09-21 09:45 98496 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-11-29 17:52 . 2013-11-07 17:39 1319064 ----a-w- c:\windows\system32\aticfx64.dll
2013-11-29 17:51 . 2013-08-31 00:13 1100728 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-11-29 17:49 . 2013-09-21 09:44 8287008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-11-29 17:48 . 2013-09-21 09:44 6630232 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-11-29 17:47 . 2013-11-07 17:39 8927704 ----a-w- c:\windows\system32\atiumd6a.dll
2013-11-29 17:46 . 2013-11-07 17:39 7751920 ----a-w- c:\windows\system32\atiumd64.dll
2013-11-29 17:13 . 2013-11-07 17:02 129536 ----a-w- c:\windows\system32\coinst_13.25.18.dll
2013-11-19 02:33 . 2010-11-21 03:27 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-11-15 02:00 . 2013-11-15 02:00 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-15 02:00 . 2013-11-15 02:00 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-11-15 02:00 . 2013-11-15 02:00 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-11-15 02:00 . 2013-11-15 02:00 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-11-15 02:00 . 2013-11-15 02:00 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-11-15 02:00 . 2013-11-15 02:00 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-11-15 02:00 . 2013-11-15 02:00 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-11-15 02:00 . 2013-11-15 02:00 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-11-15 02:00 . 2013-11-15 02:00 81408 ----a-w- c:\windows\system32\icardie.dll
2013-11-15 02:00 . 2013-11-15 02:00 774144 ----a-w- c:\windows\system32\jscript.dll
2013-11-15 02:00 . 2013-11-15 02:00 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-11-15 02:00 . 2013-11-15 02:00 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-15 02:00 . 2013-11-15 02:00 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-15 02:00 . 2013-11-15 02:00 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-11-15 02:00 . 2013-11-15 02:00 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-11-15 02:00 . 2013-11-15 02:00 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-11-15 02:00 . 2013-11-15 02:00 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-11-15 02:00 . 2013-11-15 02:00 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-11-15 02:00 . 2013-11-15 02:00 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-11-15 02:00 . 2013-11-15 02:00 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-11-15 02:00 . 2013-11-15 02:00 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-11-15 02:00 . 2013-11-15 02:00 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-11-15 02:00 . 2013-11-15 02:00 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-11-15 02:00 . 2013-11-15 02:00 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-11-15 02:00 . 2013-11-15 02:00 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-11-15 02:00 . 2013-11-15 02:00 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-11-15 02:00 . 2013-11-15 02:00 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-11-15 02:00 . 2013-11-15 02:00 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-11-15 02:00 . 2013-11-15 02:00 413696 ----a-w- c:\windows\system32\html.iec
2013-11-15 02:00 . 2013-11-15 02:00 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 02:00 . 2013-11-15 02:00 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-11-15 02:00 . 2013-11-15 02:00 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-15 02:00 . 2013-11-15 02:00 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-11-15 02:00 . 2013-11-15 02:00 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-11-15 02:00 . 2013-11-15 02:00 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-11-15 02:00 . 2013-11-15 02:00 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-11-15 02:00 . 2013-11-15 02:00 247808 ----a-w- c:\windows\system32\msls31.dll
2013-11-15 02:00 . 2013-11-15 02:00 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-11-15 02:00 . 2013-11-15 02:00 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-11-15 02:00 . 2013-11-15 02:00 235520 ----a-w- c:\windows\system32\url.dll
2013-11-15 02:00 . 2013-11-15 02:00 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-11-15 02:00 . 2013-11-15 02:00 195584 ----a-w- c:\windows\system32\msrating.dll
2013-11-15 02:00 . 2013-11-15 02:00 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-11-15 02:00 . 2013-11-15 02:00 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-11-15 02:00 . 2013-11-15 02:00 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-11-15 02:00 . 2013-11-15 02:00 147968 ----a-w- c:\windows\system32\occache.dll
2013-11-15 02:00 . 2013-11-15 02:00 143872 ----a-w- c:\windows\system32\wextract.exe
2013-11-15 02:00 . 2013-11-15 02:00 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-11-15 02:00 . 2013-11-15 02:00 13824 ----a-w- c:\windows\system32\mshta.exe
2013-11-15 02:00 . 2013-11-15 02:00 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-11-15 02:00 . 2013-11-15 02:00 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-11-15 02:00 . 2013-11-15 02:00 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-11-15 02:00 . 2013-11-15 02:00 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-11-15 02:00 . 2013-11-15 02:00 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-11-15 02:00 . 2013-11-15 02:00 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-11-15 02:00 . 2013-11-15 02:00 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-11-15 02:00 . 2013-11-15 02:00 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-11-15 02:00 . 2013-11-15 02:00 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-11-15 02:00 . 2013-11-15 02:00 101376 ----a-w- c:\windows\system32\inseng.dll
2013-11-15 02:00 . 2013-11-15 02:00 878080 ----a-w- c:\windows\system32\advapi32.dll
2013-11-15 02:00 . 2013-11-15 02:00 859648 ----a-w- c:\windows\system32\tdh.dll
2013-11-15 02:00 . 2013-11-15 02:00 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-11-15 02:00 . 2013-11-15 02:00 640512 ----a-w- c:\windows\SysWow64\advapi32.dll
2013-11-15 02:00 . 2013-11-15 02:00 619520 ----a-w- c:\windows\SysWow64\tdh.dll
2013-11-15 02:00 . 2013-11-15 02:00 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-11-15 02:00 . 2013-11-15 02:00 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-11-15 02:00 . 2013-11-15 02:00 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-11-15 02:00 . 2013-11-15 02:00 3969472 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-11-15 02:00 . 2013-11-15 02:00 3914176 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-11-15 02:00 . 2013-11-15 02:00 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-11-15 02:00 . 2013-11-15 02:00 243712 ----a-w- c:\windows\system32\wow64.dll
2013-11-15 02:00 . 2013-11-15 02:00 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-11-15 02:00 . 2013-11-15 02:00 1732032 ----a-w- c:\windows\system32\ntdll.dll
2013-11-15 02:00 . 2013-11-15 02:00 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-11-15 02:00 . 2013-11-15 02:00 1292192 ----a-w- c:\windows\SysWow64\ntdll.dll
2013-11-15 02:00 . 2013-11-15 02:00 327168 ----a-w- c:\windows\system32\mswsock.dll
2013-11-15 02:00 . 2013-11-15 02:00 231424 ----a-w- c:\windows\SysWow64\mswsock.dll
2013-11-15 02:00 . 2013-11-15 02:00 1903552 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-11-02 10:09 . 2013-09-27 23:13 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-10-30 16:15 . 2013-10-30 16:15 140800 ----a-w- c:\windows\system32\drivers\SteelBus64.sys
2013-10-27 12:31 . 2013-09-27 23:14 290184 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-10-23 08:37 . 2013-10-23 08:37 823296 ----a-w- c:\windows\SysWow64\rzdevicedll.dll
2013-10-18 02:28 . 2013-10-18 02:28 154112 ----a-w- c:\windows\SysWow64\rztouchdll.dll
2013-10-18 02:28 . 2013-10-18 02:28 57344 ----a-w- c:\windows\SysWow64\rzdevinfo.dll
2013-10-18 02:28 . 2013-10-18 02:28 117248 ----a-w- c:\windows\SysWow64\rzdisplaydll.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmazonMP3DownloaderHelper"="c:\users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe" [2013-05-22 400704]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2013-04-26 292848]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-08-30 4858968]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-09-05 958576]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2013-10-17 442200]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-11-29 766208]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R0 aswRvrt;aswRvrt; [x]
R0 aswVmm;aswVmm; [x]
R1 ArcCtrl;ArcCtrl;c:\windows\system32\drivers\ArcCtrl.sys;c:\windows\SYSNATIVE\drivers\ArcCtrl.sys [x]
R1 aswSnx;aswSnx; [x]
R1 aswSP;aswSP; [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe [x]
R2 aswFsBlk;aswFsBlk; [x]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R2 regi;regi;c:\windows\system32\drivers\regi.sys;c:\windows\SYSNATIVE\drivers\regi.sys [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 SplashtopRemoteService;Splashtop® Remote Service;c:\program files (x86)\Splashtop\Splashtop Remote\SERVER\SRService.exe;c:\program files (x86)\Splashtop\Splashtop Remote\SERVER\SRService.exe [x]
R2 SSUService;Splashtop Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe;c:\program files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 busenum;SteelBusSvc;c:\windows\system32\DRIVERS\SteelBus64.sys;c:\windows\SYSNATIVE\DRIVERS\SteelBus64.sys [x]
R3 cmudaxp;ASUS Xonar Essence STX Audio Interface;c:\windows\system32\drivers\cmudaxp.sys;c:\windows\SYSNATIVE\drivers\cmudaxp.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 kxwdmdrv;kX WDM Driver Service;c:\windows\system32\drivers\kx.sys;c:\windows\SYSNATIVE\drivers\kx.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SAlphamHid;SteelHIDSvc;c:\windows\system32\DRIVERS\SAlpham64.sys;c:\windows\SYSNATIVE\DRIVERS\SAlpham64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 rzendpt;rzendpt;c:\windows\system32\DRIVERS\rzendpt.sys;c:\windows\SYSNATIVE\DRIVERS\rzendpt.sys [x]
S3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-05 19:05 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-27 19:52]
.
2013-12-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-10 09:00]
.
2013-12-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-10 09:00]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-08-30 07:47 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-11-19 6846096]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2013-01-31 36352]
"kX Mixer"="c:\program files\kX Audio Driver\3550\kxmixer.exe" [2009-09-17 677896]
"Cmaudio8788"="c:\windows\Syswow64\cmicnfgp.dll" [2009-10-30 8151040]
"Cmaudio8788GX"="c:\windows\syswow64\HsMgr.exe" [2008-07-11 200704]
"Cmaudio8788GX64"="c:\windows\system\HsMgr64.exe" [2008-07-11 282112]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-Remote Control Server - c:\program files (x86)\Remote Control Server\Remote Control Server.exe
Wow6432Node-HKLM-Run-PowerDVD13Agent - c:\program files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-12-23 10:38:16
ComboFix-quarantined-files.txt 2013-12-23 09:38
.
Vor Suchlauf: 10 Verzeichnis(se), 132.710.649.856 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 133.512.601.600 Bytes frei
.
- - End Of File - - 16EFE5B56865A31CDE947DFC6E6CF559
A36C5E4F47E84449FF07ED3517B43A31
|
|
24.12.2013, 10:19
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunter Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.12.2013, 16:12
| #5 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunterCode:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.24.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Dario :: DARIO-PC [Administrator] 24.12.2013 14:40:23 mbam-log-2013-12-24 (14-40-23).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|F:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 335266 Laufzeit: 25 Minute(n), 52 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 24/12/2013 um 15:33:51
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Dario - DARIO-PC
# Gestartet von : C:\Users\Dario\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : splashtopremoteservice
Dienst Gelöscht : SSUService
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Splashtop
Ordner Gelöscht : C:\Program Files (x86)\Splashtop
Ordner Gelöscht : C:\Users\Dario\AppData\Local\Splashtop
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322902230}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366906630}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366906630}
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\Splashtop Inc.
Schlüssel Gelöscht : HKLM\Software\Splashtop Inc.
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B7C5EA94-B96A-41F5-BE95-25D78B486678}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Splashtop Software Updater
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\49AE5C7BA69B5F14EB59527DB8846687
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\49AE5C7BA69B5F14EB59527DB8846687
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v25.0 (de)
[ Datei : C:\Users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default\prefs.js ]
-\\ Google Chrome v31.0.1650.63
[ Datei : C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [2138 octets] - [24/12/2013 15:32:30]
AdwCleaner[S0].txt - [1935 octets] - [24/12/2013 15:33:51]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1995 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Dario on 24.12.2013 at 15:38:31,90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\plus-hd-3.8
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\Dario\AppData\Roaming\mozilla\firefox\profiles\xl82jkab.default\minidumps [2 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.12.2013 at 15:52:42,61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-12-2013
Ran by Dario (administrator) on DARIO-PC on 24-12-2013 16:18:20
Running from C:\Users\Dario\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
() C:\Users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6846096 2012-11-19] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [kX Mixer] - C:\Program Files\kX Audio Driver\3550\kxmixer.exe [677896 2009-09-17] (Eugene Gavrilov)
HKLM\...\Run: [Cmaudio8788] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] - C:\Windows\SysWOW64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442200 2013-10-17] (Razer Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-29] (Advanced Micro Devices, Inc.)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x57011A71C1BBCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR HomePage:
CHR Extension: (Google Docs) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (YouTube) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe [927232 2012-10-29] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-02] ()
==================== Drivers (Whitelisted) ====================
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-21] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [1257472 2009-10-19] (C-Media Inc)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 kxwdmdrv; C:\Windows\System32\drivers\kx.sys [765448 2009-09-17] (Eugene Gavrilov)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39080 2013-10-14] (Razer Inc)
S3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [38016 2013-05-31] (SteelSeries Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 ArcCtrl; system32\drivers\ArcCtrl.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-24 16:13 - 2013-12-24 16:13 - 00000000 ____D C:\Users\Dario\Desktop\FRST-OlderVersion
2013-12-24 15:52 - 2013-12-24 15:52 - 00000855 _____ C:\Users\Dario\Desktop\JRT.txt
2013-12-24 15:38 - 2013-12-24 15:38 - 00000000 ____D C:\Windows\ERUNT
2013-12-24 15:36 - 2013-12-24 15:36 - 01034531 _____ (Thisisu) C:\Users\Dario\Desktop\JRT.exe
2013-12-24 15:35 - 2013-12-24 15:35 - 00002079 _____ C:\Users\Dario\Desktop\AdwCleaner[S0].txt
2013-12-24 15:32 - 2013-12-24 15:34 - 00000000 ____D C:\AdwCleaner
2013-12-24 15:31 - 2013-12-24 15:31 - 01233962 _____ C:\Users\Dario\Desktop\adwcleaner.exe
2013-12-23 13:35 - 2013-12-23 13:35 - 00001483 _____ C:\Users\Dario\Desktop\Internet Explorer (No Add-ons).lnk
2013-12-23 10:38 - 2013-12-23 10:38 - 00064564 _____ C:\ComboFix.txt
2013-12-23 10:35 - 2013-12-23 10:38 - 00000000 ____D C:\Qoobox
2013-12-23 10:35 - 2013-12-23 10:37 - 00000000 ____D C:\Windows\erdnt
2013-12-23 10:35 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-23 10:35 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-23 10:35 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-23 10:33 - 2013-12-23 10:33 - 05156441 ____R (Swearware) C:\Users\Dario\Desktop\ComboFix.exe
2013-12-23 08:33 - 2013-12-23 08:33 - 00020947 _____ C:\Users\Dario\Desktop\Gmer.zip
2013-12-23 08:26 - 2013-12-23 08:26 - 01110476 _____ C:\Users\Dario\Desktop\7z920.exe
2013-12-23 08:26 - 2013-12-23 08:26 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-12-23 07:53 - 2013-12-23 07:53 - 00276632 _____ C:\Windows\Minidump\122313-2714-01.dmp
2013-12-23 07:45 - 2013-12-23 07:45 - 00430997 _____ C:\Users\Dario\Desktop\Gmer.txt
2013-12-23 07:34 - 2013-12-23 07:34 - 00377856 _____ C:\Users\Dario\Desktop\gmer_2.1.19163.exe
2013-12-23 07:29 - 2013-12-24 16:18 - 00010986 _____ C:\Users\Dario\Desktop\FRST.txt
2013-12-23 07:29 - 2013-12-24 16:13 - 00000000 ____D C:\FRST
2013-12-23 07:22 - 2013-12-24 16:13 - 01928604 _____ (Farbar) C:\Users\Dario\Desktop\FRST64.exe
2013-12-23 07:19 - 2013-12-23 08:10 - 00000472 _____ C:\Users\Dario\Desktop\defogger_disable.log
2013-12-23 07:19 - 2013-12-23 07:19 - 00000000 _____ C:\Users\Dario\defogger_reenable
2013-12-23 07:16 - 2013-12-23 07:16 - 00050477 _____ C:\Users\Dario\Desktop\Defogger.exe
2013-12-23 06:57 - 2013-12-23 07:29 - 00014698 _____ C:\Users\Dario\Desktop\Unbenannt 1.odt
2013-12-22 16:55 - 2013-12-23 08:38 - 00000147 _____ C:\Users\Dario\Desktop\Hijacker.txt
2013-12-20 23:54 - 2013-12-20 23:54 - 00001123 _____ C:\Users\Public\Desktop\Audiograbber.lnk
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Users\Dario\AppData\Roaming\dlg
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Program Files (x86)\Audiograbber
2013-12-20 23:45 - 2013-12-20 23:45 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00000004 _____ C:\Windows\SysWOW64\('^w*dpw
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Users\Dario\AppData\Roaming\ASUS
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-12-20 23:44 - 2013-12-20 23:44 - 00046237 _____ C:\Windows\Cmicnfgp.ini.cfl
2013-12-20 23:44 - 2013-12-20 23:44 - 00001006 _____ C:\Windows\Cmicnfgp.ini.imi
2013-12-20 23:44 - 2013-12-20 23:44 - 00000945 _____ C:\Windows\system\Cmicnfgp.ini
2013-12-20 23:44 - 2013-12-20 23:44 - 00000142 _____ C:\Windows\system\Dlap.pfx
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\ASUS Xonar Essence STX Audio
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\7-Zip
2013-12-20 23:44 - 2009-11-11 15:03 - 00792064 ____N C:\Windows\system32\Cmeauoxy.exe
2013-12-20 23:44 - 2009-10-30 10:30 - 08151040 ____N (C-Media Corporation) C:\Windows\SysWOW64\CmiCnfgp.dll
2013-12-20 23:44 - 2009-10-19 17:10 - 01257472 _____ (C-Media Inc) C:\Windows\system32\Drivers\cmudaxp.sys
2013-12-20 23:44 - 2009-09-22 20:00 - 00000486 ____N C:\Windows\cmudaxp.ini
2013-12-20 23:44 - 2009-09-03 16:03 - 00120832 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv642.dll
2013-12-20 23:44 - 2009-09-03 16:03 - 00120832 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv64.dll
2013-12-20 23:44 - 2009-09-03 15:56 - 00208896 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv2.dll
2013-12-20 23:44 - 2009-09-03 15:56 - 00208896 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv.dll
2013-12-20 23:44 - 2009-08-19 16:00 - 00359424 ____N C:\Windows\system32\CmiInstallResAll64.dll
2013-12-20 23:44 - 2009-04-02 16:59 - 00143360 ____N C:\Windows\SysWOW64\VmixP8.dll
2013-12-20 23:44 - 2008-11-05 14:10 - 00457728 ____N (C-Media Electronics Inc.) C:\Windows\system32\cmasiopx.dll
2013-12-20 23:44 - 2008-11-05 12:28 - 00299008 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\cmasiop.dll
2013-12-20 23:44 - 2008-10-02 15:44 - 00005024 ____N C:\Windows\Cmicnfgp.ini.cfg
2013-12-20 23:44 - 2008-09-09 19:30 - 00000067 ____N C:\Windows\system32\cmasiopx.ini
2013-12-20 23:44 - 2008-09-09 19:30 - 00000062 ____N C:\Windows\SysWOW64\cmasiop.ini
2013-12-20 23:44 - 2008-07-23 18:59 - 00389120 ____N () C:\Windows\system32\CmiCnfgp.cpl
2013-12-20 23:44 - 2008-07-11 15:04 - 00200704 ____N C:\Windows\SysWOW64\HsMgr.exe
2013-12-20 23:44 - 2008-07-11 15:03 - 00282112 ____N C:\Windows\system\HsMgr64.exe
2013-12-20 23:44 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2013-12-20 23:44 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2013-12-20 23:44 - 2007-11-05 01:30 - 01144983 ____N C:\Windows\KB936225x64.msu
2013-12-20 23:44 - 2007-04-19 15:12 - 00032768 _____ (C-Media Electronics Inc.) C:\Windows\system32\cmudaxp.dll
2013-12-20 23:44 - 2006-10-06 05:45 - 00524768 _____ (Microsoft Corporation) C:\Windows\difxapi.dll
2013-12-20 23:44 - 2006-09-13 10:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\Cmpaoxy.dll
2013-12-20 23:44 - 2004-04-14 11:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\SysWOW64\CmiFltr.dll
2013-12-20 23:44 - 2004-04-14 11:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\CmiFltr.dll
2013-12-20 23:43 - 2013-12-20 23:43 - 01376768 _____ C:\Users\Dario\Downloads\7z920-x64.msi
2013-12-20 23:42 - 2013-12-20 23:42 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:41 - 00000000 ____D C:\Program Files\kX Audio Driver
2013-12-20 23:40 - 2013-12-20 23:41 - 10704856 _____ C:\Users\Dario\Downloads\PCI_STX_091126_7_12_8_1777_W73264.rar
2013-12-20 23:39 - 2013-12-20 23:40 - 06815648 _____ C:\Users\Dario\Downloads\kxdrv3550-x64-full.exe
2013-12-20 10:16 - 2013-12-20 11:22 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-20 10:16 - 2013-12-20 10:16 - 00000963 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-20 10:14 - 2013-12-20 10:15 - 01133552 _____ C:\Users\Dario\Downloads\SteamSetup.exe
2013-12-12 03:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 03:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 03:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 03:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-12 03:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 03:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 03:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 03:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 03:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 03:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-12 03:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 03:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 03:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 03:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 03:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 03:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-12 03:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-12 03:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 03:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-12 03:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-12 03:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-12 03:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 03:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 03:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-12 03:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 03:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 03:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 03:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 03:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-12 03:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-12 03:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 22:54 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 22:54 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 22:54 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 22:54 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 22:54 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 22:54 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 22:54 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 22:54 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 22:54 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 22:54 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 22:54 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 22:54 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 22:54 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 22:54 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 22:54 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 20:58 - 2013-12-11 20:58 - 00007625 _____ C:\Users\Dario\AppData\Local\Resmon.ResmonCfg
2013-12-11 13:53 - 2013-12-11 14:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-09 14:07 - 2013-12-23 08:35 - 00023552 ___SH C:\Users\Dario\Desktop\Thumbs.db
2013-12-08 15:37 - 2013-12-08 15:37 - 00000000 ____D C:\ProgramData\Sun
2013-12-06 09:22 - 2013-12-06 09:22 - 00000000 ____D C:\Users\Dario\Documents\Kontoauszüge
2013-12-04 15:11 - 2013-12-04 15:11 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 15:11 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-03 23:06 - 2013-12-03 23:06 - 00000000 ____D C:\ProgramData\ATI
2013-12-03 23:05 - 2013-12-03 23:48 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Raptr
2013-12-03 23:05 - 2013-12-03 23:05 - 00055445 _____ C:\Windows\SysWOW64\CCCInstall_201312032305432311.log
2013-12-03 23:05 - 2013-12-03 23:05 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-11-29 18:59 - 2013-11-29 18:59 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-11-29 18:59 - 2013-11-29 18:59 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:55 - 2013-11-29 18:55 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 09764088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
==================== One Month Modified Files and Folders =======
2013-12-24 16:19 - 2013-12-23 07:29 - 00010986 _____ C:\Users\Dario\Desktop\FRST.txt
2013-12-24 16:14 - 2013-11-10 10:00 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-24 16:13 - 2013-12-24 16:13 - 00000000 ____D C:\Users\Dario\Desktop\FRST-OlderVersion
2013-12-24 16:13 - 2013-12-23 07:29 - 00000000 ____D C:\FRST
2013-12-24 16:13 - 2013-12-23 07:22 - 01928604 _____ (Farbar) C:\Users\Dario\Desktop\FRST64.exe
2013-12-24 16:07 - 2013-09-27 21:09 - 02092015 _____ C:\Windows\WindowsUpdate.log
2013-12-24 15:52 - 2013-12-24 15:52 - 00000855 _____ C:\Users\Dario\Desktop\JRT.txt
2013-12-24 15:43 - 2013-09-27 22:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-24 15:41 - 2011-04-12 08:43 - 00700130 _____ C:\Windows\system32\perfh007.dat
2013-12-24 15:41 - 2011-04-12 08:43 - 00149768 _____ C:\Windows\system32\perfc007.dat
2013-12-24 15:41 - 2009-07-14 06:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-24 15:41 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-24 15:41 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-24 15:38 - 2013-12-24 15:38 - 00000000 ____D C:\Windows\ERUNT
2013-12-24 15:36 - 2013-12-24 15:36 - 01034531 _____ (Thisisu) C:\Users\Dario\Desktop\JRT.exe
2013-12-24 15:35 - 2013-12-24 15:35 - 00002079 _____ C:\Users\Dario\Desktop\AdwCleaner[S0].txt
2013-12-24 15:34 - 2013-12-24 15:32 - 00000000 ____D C:\AdwCleaner
2013-12-24 15:34 - 2013-11-10 10:00 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-24 15:34 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-24 15:34 - 2009-07-14 05:51 - 00073041 _____ C:\Windows\setupact.log
2013-12-24 15:31 - 2013-12-24 15:31 - 01233962 _____ C:\Users\Dario\Desktop\adwcleaner.exe
2013-12-24 14:34 - 2013-09-27 21:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-23 20:49 - 2013-09-27 21:58 - 00000000 ____D C:\Users\Dario\AppData\Roaming\TS3Client
2013-12-23 13:35 - 2013-12-23 13:35 - 00001483 _____ C:\Users\Dario\Desktop\Internet Explorer (No Add-ons).lnk
2013-12-23 10:41 - 2010-11-21 04:47 - 00027574 _____ C:\Windows\PFRO.log
2013-12-23 10:38 - 2013-12-23 10:38 - 00064564 _____ C:\ComboFix.txt
2013-12-23 10:38 - 2013-12-23 10:35 - 00000000 ____D C:\Qoobox
2013-12-23 10:37 - 2013-12-23 10:35 - 00000000 ____D C:\Windows\erdnt
2013-12-23 10:37 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-23 10:33 - 2013-12-23 10:33 - 05156441 ____R (Swearware) C:\Users\Dario\Desktop\ComboFix.exe
2013-12-23 08:38 - 2013-12-22 16:55 - 00000147 _____ C:\Users\Dario\Desktop\Hijacker.txt
2013-12-23 08:35 - 2013-12-09 14:07 - 00023552 ___SH C:\Users\Dario\Desktop\Thumbs.db
2013-12-23 08:33 - 2013-12-23 08:33 - 00020947 _____ C:\Users\Dario\Desktop\Gmer.zip
2013-12-23 08:26 - 2013-12-23 08:26 - 01110476 _____ C:\Users\Dario\Desktop\7z920.exe
2013-12-23 08:26 - 2013-12-23 08:26 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-12-23 08:10 - 2013-12-23 07:19 - 00000472 _____ C:\Users\Dario\Desktop\defogger_disable.log
2013-12-23 07:53 - 2013-12-23 07:53 - 00276632 _____ C:\Windows\Minidump\122313-2714-01.dmp
2013-12-23 07:53 - 2013-10-28 09:46 - 773429533 _____ C:\Windows\MEMORY.DMP
2013-12-23 07:53 - 2013-10-28 09:46 - 00000000 ____D C:\Windows\Minidump
2013-12-23 07:45 - 2013-12-23 07:45 - 00430997 _____ C:\Users\Dario\Desktop\Gmer.txt
2013-12-23 07:34 - 2013-12-23 07:34 - 00377856 _____ C:\Users\Dario\Desktop\gmer_2.1.19163.exe
2013-12-23 07:29 - 2013-12-23 06:57 - 00014698 _____ C:\Users\Dario\Desktop\Unbenannt 1.odt
2013-12-23 07:19 - 2013-12-23 07:19 - 00000000 _____ C:\Users\Dario\defogger_reenable
2013-12-23 07:19 - 2013-09-27 21:09 - 00000000 ____D C:\Users\Dario
2013-12-23 07:16 - 2013-12-23 07:16 - 00050477 _____ C:\Users\Dario\Desktop\Defogger.exe
2013-12-23 07:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-21 05:00 - 2013-10-11 18:47 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Spotify
2013-12-21 03:39 - 2013-09-27 21:58 - 00000000 ____D C:\Users\Dario\AppData\Roaming\vlc
2013-12-21 02:03 - 2013-09-27 21:33 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-20 23:55 - 2013-09-27 21:09 - 00000000 ____D C:\Users\Dario\AppData\Local\VirtualStore
2013-12-20 23:54 - 2013-12-20 23:54 - 00001123 _____ C:\Users\Public\Desktop\Audiograbber.lnk
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Users\Dario\AppData\Roaming\dlg
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Program Files (x86)\Audiograbber
2013-12-20 23:45 - 2013-12-20 23:45 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00000004 _____ C:\Windows\SysWOW64\('^w*dpw
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Users\Dario\AppData\Roaming\ASUS
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-12-20 23:45 - 2013-09-27 21:20 - 00064952 _____ C:\Users\Dario\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-20 23:45 - 2009-07-14 05:45 - 00320992 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-20 23:44 - 2013-12-20 23:44 - 00046237 _____ C:\Windows\Cmicnfgp.ini.cfl
2013-12-20 23:44 - 2013-12-20 23:44 - 00001006 _____ C:\Windows\Cmicnfgp.ini.imi
2013-12-20 23:44 - 2013-12-20 23:44 - 00000945 _____ C:\Windows\system\Cmicnfgp.ini
2013-12-20 23:44 - 2013-12-20 23:44 - 00000142 _____ C:\Windows\system\Dlap.pfx
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\ASUS Xonar Essence STX Audio
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\7-Zip
2013-12-20 23:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system
2013-12-20 23:43 - 2013-12-20 23:43 - 01376768 _____ C:\Users\Dario\Downloads\7z920-x64.msi
2013-12-20 23:42 - 2013-12-20 23:42 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:41 - 00000000 ____D C:\Program Files\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:40 - 10704856 _____ C:\Users\Dario\Downloads\PCI_STX_091126_7_12_8_1777_W73264.rar
2013-12-20 23:40 - 2013-12-20 23:39 - 06815648 _____ C:\Users\Dario\Downloads\kxdrv3550-x64-full.exe
2013-12-20 11:22 - 2013-12-20 10:16 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-20 10:16 - 2013-12-20 10:16 - 00000963 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-20 10:15 - 2013-12-20 10:14 - 01133552 _____ C:\Users\Dario\Downloads\SteamSetup.exe
2013-12-19 19:48 - 2013-10-11 18:48 - 00000000 ____D C:\Users\Dario\AppData\Local\Spotify
2013-12-19 00:01 - 2013-09-28 00:13 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-18 23:43 - 2013-09-28 00:13 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-15 09:53 - 2013-10-01 17:30 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 09:52 - 2013-09-28 16:45 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 03:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-12 03:16 - 2013-09-27 21:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-11 20:58 - 2013-12-11 20:58 - 00007625 _____ C:\Users\Dario\AppData\Local\Resmon.ResmonCfg
2013-12-11 14:40 - 2013-12-11 13:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-10 20:52 - 2013-09-27 22:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 20:52 - 2013-09-27 22:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 20:52 - 2013-09-27 22:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-08 23:03 - 2013-09-28 16:19 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-08 23:03 - 2013-09-27 21:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-08 15:37 - 2013-12-08 15:37 - 00000000 ____D C:\ProgramData\Sun
2013-12-08 15:37 - 2013-11-21 23:45 - 00000000 ____D C:\ProgramData\Oracle
2013-12-06 23:09 - 2013-11-10 10:00 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 23:09 - 2013-11-10 10:00 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-06 09:22 - 2013-12-06 09:22 - 00000000 ____D C:\Users\Dario\Documents\Kontoauszüge
2013-12-04 15:11 - 2013-12-04 15:11 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-03 23:48 - 2013-12-03 23:05 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Raptr
2013-12-03 23:48 - 2013-11-09 01:59 - 00000000 ____D C:\Program Files (x86)\Raptr
2013-12-03 23:48 - 2013-09-27 21:33 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-03 23:06 - 2013-12-03 23:06 - 00000000 ____D C:\ProgramData\ATI
2013-12-03 23:05 - 2013-12-03 23:05 - 00055445 _____ C:\Windows\SysWOW64\CCCInstall_201312032305432311.log
2013-12-03 23:05 - 2013-12-03 23:05 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-12-03 23:05 - 2013-09-27 22:28 - 00000000 ____D C:\ProgramData\AMD
2013-12-03 23:05 - 2013-09-27 22:24 - 00000000 ____D C:\Program Files\ATI Technologies
2013-12-03 23:04 - 2013-09-27 21:20 - 01596050 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-03 23:02 - 2013-09-27 22:23 - 00000000 ____D C:\AMD
2013-11-29 18:59 - 2013-11-29 18:59 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-11-29 18:59 - 2013-11-29 18:59 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:55 - 2013-11-29 18:55 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:53 - 2013-11-07 18:39 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-11-29 18:53 - 2013-09-21 10:45 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-11-29 18:52 - 2013-11-07 18:39 - 01319064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-11-29 18:51 - 2013-08-31 01:13 - 01100728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 09764088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:49 - 2013-09-21 10:44 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-11-29 18:48 - 2013-09-21 10:44 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-11-29 18:47 - 2013-11-07 18:39 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-11-29 18:46 - 2013-11-07 18:39 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:13 - 2013-11-07 18:02 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.25.18.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
2013-11-28 19:59 - 2013-09-28 00:01 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-11-27 01:07 - 2013-10-04 19:14 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2013-11-26 12:54 - 2013-12-12 03:00 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-12 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-12 03:00 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-12 03:00 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-12 03:00 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-12 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-12 03:00 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-12 03:00 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-12 03:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-12 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-12 03:00 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-12 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-12 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-12 03:00 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-12 03:00 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-12 03:00 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-26 09:38 - 2013-12-12 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-26 09:35 - 2013-12-12 03:00 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-12 03:00 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-12 03:00 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 03:00 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-12 03:00 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-12 03:00 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-12 03:00 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 03:00 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-12 03:00 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-12 03:00 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-12 03:00 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-12 03:00 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 03:00 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-12 03:00 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
Some content of TEMP:
====================
C:\Users\Dario\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-20 00:02
==================== End Of Log ============================
Geändert von Nethenity (24.12.2013 um 16:21 Uhr) |
|
25.12.2013, 14:43
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunterESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunter |
|
25.12.2013, 18:54
| #7 |
| | Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunterCode:
ATTFilter ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=fc19c08033afdf4b9c1368b7b1610fbe
# engine=16400
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-25 05:37:10
# local_time=2013-12-25 06:37:10 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 7678203 164702902 0 0
# compatibility_mode=5893 16776573 100 94 122478 139622880 0 0
# scanned=135785
# found=0
# cleaned=0
# scan_time=4203
Code:
ATTFilter Results of screen317's Security Check version 0.99.77 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus out of date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 11.9.900.170 Adobe Reader XI Mozilla Firefox (25.0) Mozilla Thunderbird (24.2.0) Google Chrome 31.0.1650.57 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes' Anti-Malware mbamscheduler.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013
Ran by Dario (administrator) on DARIO-PC on 25-12-2013 18:51:42
Running from C:\Users\Dario\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
() C:\Users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6846096 2012-11-19] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [kX Mixer] - C:\Program Files\kX Audio Driver\3550\kxmixer.exe [677896 2009-09-17] (Eugene Gavrilov)
HKLM\...\Run: [Cmaudio8788] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] - C:\Windows\SysWOW64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442200 2013-10-17] (Razer Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-29] (Advanced Micro Devices, Inc.)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x57011A71C1BBCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\xl82jkab.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Dario\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR HomePage:
CHR Extension: (Google Docs) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (YouTube) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Dario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe [927232 2012-10-29] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-02] ()
==================== Drivers (Whitelisted) ====================
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-21] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [1257472 2009-10-19] (C-Media Inc)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 kxwdmdrv; C:\Windows\System32\drivers\kx.sys [765448 2009-09-17] (Eugene Gavrilov)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39080 2013-10-14] (Razer Inc)
S3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [38016 2013-05-31] (SteelSeries Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 ArcCtrl; system32\drivers\ArcCtrl.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-25 18:51 - 2013-12-25 18:51 - 00010994 _____ C:\Users\Dario\Desktop\FRST.txt
2013-12-25 18:46 - 2013-12-25 18:46 - 00000944 _____ C:\Users\Dario\Desktop\checkup.txt
2013-12-25 17:19 - 2013-12-25 17:19 - 02347384 _____ (ESET) C:\Users\Dario\Desktop\esetsmartinstaller_enu.exe
2013-12-25 17:19 - 2013-12-25 17:19 - 00891200 _____ C:\Users\Dario\Desktop\SecurityCheck.exe
2013-12-25 17:18 - 2013-12-25 17:18 - 02347384 _____ (ESET) C:\Users\Dario\Downloads\esetsmartinstaller_enu.exe
2013-12-24 16:13 - 2013-12-25 18:51 - 00000000 ____D C:\Users\Dario\Desktop\FRST-OlderVersion
2013-12-24 15:52 - 2013-12-24 15:52 - 00000855 _____ C:\Users\Dario\Desktop\JRT.txt
2013-12-24 15:38 - 2013-12-24 15:38 - 00000000 ____D C:\Windows\ERUNT
2013-12-24 15:36 - 2013-12-24 15:36 - 01034531 _____ (Thisisu) C:\Users\Dario\Desktop\JRT.exe
2013-12-24 15:35 - 2013-12-24 15:35 - 00002079 _____ C:\Users\Dario\Desktop\AdwCleaner[S0].txt
2013-12-24 15:32 - 2013-12-24 15:34 - 00000000 ____D C:\AdwCleaner
2013-12-24 15:31 - 2013-12-24 15:31 - 01233962 _____ C:\Users\Dario\Desktop\adwcleaner.exe
2013-12-23 13:35 - 2013-12-23 13:35 - 00001483 _____ C:\Users\Dario\Desktop\Internet Explorer (No Add-ons).lnk
2013-12-23 10:38 - 2013-12-23 10:38 - 00064564 _____ C:\ComboFix.txt
2013-12-23 10:35 - 2013-12-23 10:38 - 00000000 ____D C:\Qoobox
2013-12-23 10:35 - 2013-12-23 10:37 - 00000000 ____D C:\Windows\erdnt
2013-12-23 10:35 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-23 10:35 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-23 10:35 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-23 10:35 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-23 10:33 - 2013-12-23 10:33 - 05156441 ____R (Swearware) C:\Users\Dario\Desktop\ComboFix.exe
2013-12-23 08:33 - 2013-12-23 08:33 - 00020947 _____ C:\Users\Dario\Desktop\Gmer.zip
2013-12-23 08:26 - 2013-12-23 08:26 - 01110476 _____ C:\Users\Dario\Desktop\7z920.exe
2013-12-23 08:26 - 2013-12-23 08:26 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-12-23 07:53 - 2013-12-23 07:53 - 00276632 _____ C:\Windows\Minidump\122313-2714-01.dmp
2013-12-23 07:45 - 2013-12-23 07:45 - 00430997 _____ C:\Users\Dario\Desktop\Gmer.txt
2013-12-23 07:34 - 2013-12-23 07:34 - 00377856 _____ C:\Users\Dario\Desktop\gmer_2.1.19163.exe
2013-12-23 07:29 - 2013-12-25 18:51 - 00000000 ____D C:\FRST
2013-12-23 07:22 - 2013-12-25 18:51 - 01928716 _____ (Farbar) C:\Users\Dario\Desktop\FRST64.exe
2013-12-23 07:19 - 2013-12-23 08:10 - 00000472 _____ C:\Users\Dario\Desktop\defogger_disable.log
2013-12-23 07:19 - 2013-12-23 07:19 - 00000000 _____ C:\Users\Dario\defogger_reenable
2013-12-23 07:16 - 2013-12-23 07:16 - 00050477 _____ C:\Users\Dario\Desktop\Defogger.exe
2013-12-23 06:57 - 2013-12-23 07:29 - 00014698 _____ C:\Users\Dario\Desktop\Unbenannt 1.odt
2013-12-22 16:55 - 2013-12-25 18:43 - 00002240 _____ C:\Users\Dario\Desktop\Hijacker.txt
2013-12-20 23:54 - 2013-12-20 23:54 - 00001123 _____ C:\Users\Public\Desktop\Audiograbber.lnk
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Users\Dario\AppData\Roaming\dlg
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Program Files (x86)\Audiograbber
2013-12-20 23:45 - 2013-12-20 23:45 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00000004 _____ C:\Windows\SysWOW64\('^w*dpw
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Users\Dario\AppData\Roaming\ASUS
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-12-20 23:44 - 2013-12-20 23:44 - 00046237 _____ C:\Windows\Cmicnfgp.ini.cfl
2013-12-20 23:44 - 2013-12-20 23:44 - 00001006 _____ C:\Windows\Cmicnfgp.ini.imi
2013-12-20 23:44 - 2013-12-20 23:44 - 00000945 _____ C:\Windows\system\Cmicnfgp.ini
2013-12-20 23:44 - 2013-12-20 23:44 - 00000142 _____ C:\Windows\system\Dlap.pfx
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\ASUS Xonar Essence STX Audio
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\7-Zip
2013-12-20 23:44 - 2009-11-11 15:03 - 00792064 ____N C:\Windows\system32\Cmeauoxy.exe
2013-12-20 23:44 - 2009-10-30 10:30 - 08151040 ____N (C-Media Corporation) C:\Windows\SysWOW64\CmiCnfgp.dll
2013-12-20 23:44 - 2009-10-19 17:10 - 01257472 _____ (C-Media Inc) C:\Windows\system32\Drivers\cmudaxp.sys
2013-12-20 23:44 - 2009-09-22 20:00 - 00000486 ____N C:\Windows\cmudaxp.ini
2013-12-20 23:44 - 2009-09-03 16:03 - 00120832 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv642.dll
2013-12-20 23:44 - 2009-09-03 16:03 - 00120832 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv64.dll
2013-12-20 23:44 - 2009-09-03 15:56 - 00208896 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv2.dll
2013-12-20 23:44 - 2009-09-03 15:56 - 00208896 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv.dll
2013-12-20 23:44 - 2009-08-19 16:00 - 00359424 ____N C:\Windows\system32\CmiInstallResAll64.dll
2013-12-20 23:44 - 2009-04-02 16:59 - 00143360 ____N C:\Windows\SysWOW64\VmixP8.dll
2013-12-20 23:44 - 2008-11-05 14:10 - 00457728 ____N (C-Media Electronics Inc.) C:\Windows\system32\cmasiopx.dll
2013-12-20 23:44 - 2008-11-05 12:28 - 00299008 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\cmasiop.dll
2013-12-20 23:44 - 2008-10-02 15:44 - 00005024 ____N C:\Windows\Cmicnfgp.ini.cfg
2013-12-20 23:44 - 2008-09-09 19:30 - 00000067 ____N C:\Windows\system32\cmasiopx.ini
2013-12-20 23:44 - 2008-09-09 19:30 - 00000062 ____N C:\Windows\SysWOW64\cmasiop.ini
2013-12-20 23:44 - 2008-07-23 18:59 - 00389120 ____N () C:\Windows\system32\CmiCnfgp.cpl
2013-12-20 23:44 - 2008-07-11 15:04 - 00200704 ____N C:\Windows\SysWOW64\HsMgr.exe
2013-12-20 23:44 - 2008-07-11 15:03 - 00282112 ____N C:\Windows\system\HsMgr64.exe
2013-12-20 23:44 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2013-12-20 23:44 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2013-12-20 23:44 - 2007-11-05 01:30 - 01144983 ____N C:\Windows\KB936225x64.msu
2013-12-20 23:44 - 2007-04-19 15:12 - 00032768 _____ (C-Media Electronics Inc.) C:\Windows\system32\cmudaxp.dll
2013-12-20 23:44 - 2006-10-06 05:45 - 00524768 _____ (Microsoft Corporation) C:\Windows\difxapi.dll
2013-12-20 23:44 - 2006-09-13 10:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\Cmpaoxy.dll
2013-12-20 23:44 - 2004-04-14 11:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\SysWOW64\CmiFltr.dll
2013-12-20 23:44 - 2004-04-14 11:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\CmiFltr.dll
2013-12-20 23:43 - 2013-12-20 23:43 - 01376768 _____ C:\Users\Dario\Downloads\7z920-x64.msi
2013-12-20 23:42 - 2013-12-20 23:42 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:41 - 00000000 ____D C:\Program Files\kX Audio Driver
2013-12-20 23:40 - 2013-12-20 23:41 - 10704856 _____ C:\Users\Dario\Downloads\PCI_STX_091126_7_12_8_1777_W73264.rar
2013-12-20 23:39 - 2013-12-20 23:40 - 06815648 _____ C:\Users\Dario\Downloads\kxdrv3550-x64-full.exe
2013-12-20 10:16 - 2013-12-20 11:22 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-20 10:16 - 2013-12-20 10:16 - 00000963 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-20 10:14 - 2013-12-20 10:15 - 01133552 _____ C:\Users\Dario\Downloads\SteamSetup.exe
2013-12-12 03:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 03:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 03:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 03:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-12 03:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 03:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 03:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 03:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 03:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 03:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-12 03:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 03:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 03:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 03:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 03:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 03:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-12 03:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-12 03:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 03:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-12 03:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-12 03:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-12 03:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 03:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 03:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-12 03:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 03:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 03:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 03:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 03:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-12 03:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-12 03:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 22:54 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 22:54 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 22:54 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 22:54 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 22:54 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 22:54 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 22:54 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 22:54 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 22:54 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 22:54 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 22:54 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 22:54 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 22:54 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 22:54 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 22:54 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 20:58 - 2013-12-11 20:58 - 00007625 _____ C:\Users\Dario\AppData\Local\Resmon.ResmonCfg
2013-12-11 13:53 - 2013-12-11 14:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-09 14:07 - 2013-12-23 08:35 - 00023552 ___SH C:\Users\Dario\Desktop\Thumbs.db
2013-12-08 15:37 - 2013-12-08 15:37 - 00000000 ____D C:\ProgramData\Sun
2013-12-06 09:22 - 2013-12-06 09:22 - 00000000 ____D C:\Users\Dario\Documents\Kontoauszüge
2013-12-04 15:11 - 2013-12-04 15:11 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 15:11 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-03 23:06 - 2013-12-03 23:06 - 00000000 ____D C:\ProgramData\ATI
2013-12-03 23:05 - 2013-12-03 23:48 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Raptr
2013-12-03 23:05 - 2013-12-03 23:05 - 00055445 _____ C:\Windows\SysWOW64\CCCInstall_201312032305432311.log
2013-12-03 23:05 - 2013-12-03 23:05 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-11-29 18:59 - 2013-11-29 18:59 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-11-29 18:59 - 2013-11-29 18:59 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:55 - 2013-11-29 18:55 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 09764088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
==================== One Month Modified Files and Folders =======
2013-12-25 18:52 - 2013-12-25 18:51 - 00010994 _____ C:\Users\Dario\Desktop\FRST.txt
2013-12-25 18:51 - 2013-12-24 16:13 - 00000000 ____D C:\Users\Dario\Desktop\FRST-OlderVersion
2013-12-25 18:51 - 2013-12-23 07:29 - 00000000 ____D C:\FRST
2013-12-25 18:51 - 2013-12-23 07:22 - 01928716 _____ (Farbar) C:\Users\Dario\Desktop\FRST64.exe
2013-12-25 18:46 - 2013-12-25 18:46 - 00000944 _____ C:\Users\Dario\Desktop\checkup.txt
2013-12-25 18:43 - 2013-12-22 16:55 - 00002240 _____ C:\Users\Dario\Desktop\Hijacker.txt
2013-12-25 18:43 - 2013-09-27 22:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-25 18:32 - 2013-11-10 10:00 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-25 18:31 - 2013-09-27 21:09 - 01073898 _____ C:\Windows\WindowsUpdate.log
2013-12-25 17:22 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-25 17:22 - 2009-07-14 05:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-25 17:19 - 2013-12-25 17:19 - 02347384 _____ (ESET) C:\Users\Dario\Desktop\esetsmartinstaller_enu.exe
2013-12-25 17:19 - 2013-12-25 17:19 - 00891200 _____ C:\Users\Dario\Desktop\SecurityCheck.exe
2013-12-25 17:19 - 2011-04-12 08:43 - 00700130 _____ C:\Windows\system32\perfh007.dat
2013-12-25 17:19 - 2011-04-12 08:43 - 00149768 _____ C:\Windows\system32\perfc007.dat
2013-12-25 17:19 - 2009-07-14 06:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-25 17:18 - 2013-12-25 17:18 - 02347384 _____ (ESET) C:\Users\Dario\Downloads\esetsmartinstaller_enu.exe
2013-12-25 17:15 - 2013-11-10 10:00 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-25 17:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-25 17:15 - 2009-07-14 05:51 - 00073265 _____ C:\Windows\setupact.log
2013-12-25 08:59 - 2013-09-27 21:58 - 00000000 ____D C:\Users\Dario\AppData\Roaming\TS3Client
2013-12-24 15:52 - 2013-12-24 15:52 - 00000855 _____ C:\Users\Dario\Desktop\JRT.txt
2013-12-24 15:38 - 2013-12-24 15:38 - 00000000 ____D C:\Windows\ERUNT
2013-12-24 15:36 - 2013-12-24 15:36 - 01034531 _____ (Thisisu) C:\Users\Dario\Desktop\JRT.exe
2013-12-24 15:35 - 2013-12-24 15:35 - 00002079 _____ C:\Users\Dario\Desktop\AdwCleaner[S0].txt
2013-12-24 15:34 - 2013-12-24 15:32 - 00000000 ____D C:\AdwCleaner
2013-12-24 15:31 - 2013-12-24 15:31 - 01233962 _____ C:\Users\Dario\Desktop\adwcleaner.exe
2013-12-24 14:34 - 2013-09-27 21:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-23 13:35 - 2013-12-23 13:35 - 00001483 _____ C:\Users\Dario\Desktop\Internet Explorer (No Add-ons).lnk
2013-12-23 10:41 - 2010-11-21 04:47 - 00027574 _____ C:\Windows\PFRO.log
2013-12-23 10:38 - 2013-12-23 10:38 - 00064564 _____ C:\ComboFix.txt
2013-12-23 10:38 - 2013-12-23 10:35 - 00000000 ____D C:\Qoobox
2013-12-23 10:37 - 2013-12-23 10:35 - 00000000 ____D C:\Windows\erdnt
2013-12-23 10:37 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-23 10:33 - 2013-12-23 10:33 - 05156441 ____R (Swearware) C:\Users\Dario\Desktop\ComboFix.exe
2013-12-23 08:35 - 2013-12-09 14:07 - 00023552 ___SH C:\Users\Dario\Desktop\Thumbs.db
2013-12-23 08:33 - 2013-12-23 08:33 - 00020947 _____ C:\Users\Dario\Desktop\Gmer.zip
2013-12-23 08:26 - 2013-12-23 08:26 - 01110476 _____ C:\Users\Dario\Desktop\7z920.exe
2013-12-23 08:26 - 2013-12-23 08:26 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-12-23 08:10 - 2013-12-23 07:19 - 00000472 _____ C:\Users\Dario\Desktop\defogger_disable.log
2013-12-23 07:53 - 2013-12-23 07:53 - 00276632 _____ C:\Windows\Minidump\122313-2714-01.dmp
2013-12-23 07:53 - 2013-10-28 09:46 - 773429533 _____ C:\Windows\MEMORY.DMP
2013-12-23 07:53 - 2013-10-28 09:46 - 00000000 ____D C:\Windows\Minidump
2013-12-23 07:45 - 2013-12-23 07:45 - 00430997 _____ C:\Users\Dario\Desktop\Gmer.txt
2013-12-23 07:34 - 2013-12-23 07:34 - 00377856 _____ C:\Users\Dario\Desktop\gmer_2.1.19163.exe
2013-12-23 07:29 - 2013-12-23 06:57 - 00014698 _____ C:\Users\Dario\Desktop\Unbenannt 1.odt
2013-12-23 07:19 - 2013-12-23 07:19 - 00000000 _____ C:\Users\Dario\defogger_reenable
2013-12-23 07:19 - 2013-09-27 21:09 - 00000000 ____D C:\Users\Dario
2013-12-23 07:16 - 2013-12-23 07:16 - 00050477 _____ C:\Users\Dario\Desktop\Defogger.exe
2013-12-23 07:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-21 05:00 - 2013-10-11 18:47 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Spotify
2013-12-21 03:39 - 2013-09-27 21:58 - 00000000 ____D C:\Users\Dario\AppData\Roaming\vlc
2013-12-21 02:03 - 2013-09-27 21:33 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-20 23:55 - 2013-09-27 21:09 - 00000000 ____D C:\Users\Dario\AppData\Local\VirtualStore
2013-12-20 23:54 - 2013-12-20 23:54 - 00001123 _____ C:\Users\Public\Desktop\Audiograbber.lnk
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Users\Dario\AppData\Roaming\dlg
2013-12-20 23:54 - 2013-12-20 23:54 - 00000000 ____D C:\Program Files (x86)\Audiograbber
2013-12-20 23:45 - 2013-12-20 23:45 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-12-20 23:45 - 2013-12-20 23:45 - 00000004 _____ C:\Windows\SysWOW64\('^w*dpw
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Users\Dario\AppData\Roaming\ASUS
2013-12-20 23:45 - 2013-12-20 23:45 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-12-20 23:45 - 2013-09-27 21:20 - 00064952 _____ C:\Users\Dario\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-20 23:45 - 2009-07-14 05:45 - 00320992 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-20 23:44 - 2013-12-20 23:44 - 00046237 _____ C:\Windows\Cmicnfgp.ini.cfl
2013-12-20 23:44 - 2013-12-20 23:44 - 00001006 _____ C:\Windows\Cmicnfgp.ini.imi
2013-12-20 23:44 - 2013-12-20 23:44 - 00000945 _____ C:\Windows\system\Cmicnfgp.ini
2013-12-20 23:44 - 2013-12-20 23:44 - 00000142 _____ C:\Windows\system\Dlap.pfx
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\ASUS Xonar Essence STX Audio
2013-12-20 23:44 - 2013-12-20 23:44 - 00000000 ____D C:\Program Files\7-Zip
2013-12-20 23:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system
2013-12-20 23:43 - 2013-12-20 23:43 - 01376768 _____ C:\Users\Dario\Downloads\7z920-x64.msi
2013-12-20 23:42 - 2013-12-20 23:42 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:41 - 00000000 ____D C:\Program Files\kX Audio Driver
2013-12-20 23:41 - 2013-12-20 23:40 - 10704856 _____ C:\Users\Dario\Downloads\PCI_STX_091126_7_12_8_1777_W73264.rar
2013-12-20 23:40 - 2013-12-20 23:39 - 06815648 _____ C:\Users\Dario\Downloads\kxdrv3550-x64-full.exe
2013-12-20 11:22 - 2013-12-20 10:16 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-20 10:16 - 2013-12-20 10:16 - 00000963 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-20 10:15 - 2013-12-20 10:14 - 01133552 _____ C:\Users\Dario\Downloads\SteamSetup.exe
2013-12-19 19:48 - 2013-10-11 18:48 - 00000000 ____D C:\Users\Dario\AppData\Local\Spotify
2013-12-19 00:01 - 2013-09-28 00:13 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-18 23:43 - 2013-09-28 00:13 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-15 09:53 - 2013-10-01 17:30 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 09:52 - 2013-09-28 16:45 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 03:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-12 03:16 - 2013-09-27 21:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-11 20:58 - 2013-12-11 20:58 - 00007625 _____ C:\Users\Dario\AppData\Local\Resmon.ResmonCfg
2013-12-11 14:40 - 2013-12-11 13:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-10 20:52 - 2013-09-27 22:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 20:52 - 2013-09-27 22:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 20:52 - 2013-09-27 22:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-08 23:03 - 2013-09-28 16:19 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-08 23:03 - 2013-09-27 21:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-08 15:37 - 2013-12-08 15:37 - 00000000 ____D C:\ProgramData\Sun
2013-12-08 15:37 - 2013-11-21 23:45 - 00000000 ____D C:\ProgramData\Oracle
2013-12-06 23:09 - 2013-11-10 10:00 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 23:09 - 2013-11-10 10:00 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-06 09:22 - 2013-12-06 09:22 - 00000000 ____D C:\Users\Dario\Documents\Kontoauszüge
2013-12-04 15:11 - 2013-12-04 15:11 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 15:11 - 2013-12-04 15:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-03 23:48 - 2013-12-03 23:05 - 00000000 ____D C:\Users\Dario\AppData\Roaming\Raptr
2013-12-03 23:48 - 2013-11-09 01:59 - 00000000 ____D C:\Program Files (x86)\Raptr
2013-12-03 23:48 - 2013-09-27 21:33 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-03 23:06 - 2013-12-03 23:06 - 00000000 ____D C:\ProgramData\ATI
2013-12-03 23:05 - 2013-12-03 23:05 - 00055445 _____ C:\Windows\SysWOW64\CCCInstall_201312032305432311.log
2013-12-03 23:05 - 2013-12-03 23:05 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-12-03 23:05 - 2013-09-27 22:28 - 00000000 ____D C:\ProgramData\AMD
2013-12-03 23:05 - 2013-09-27 22:24 - 00000000 ____D C:\Program Files\ATI Technologies
2013-12-03 23:04 - 2013-09-27 21:20 - 01596050 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-03 23:02 - 2013-09-27 22:23 - 00000000 ____D C:\AMD
2013-11-29 18:59 - 2013-11-29 18:59 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-11-29 18:59 - 2013-11-29 18:59 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:55 - 2013-11-29 18:55 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:53 - 2013-11-07 18:39 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-11-29 18:53 - 2013-09-21 10:45 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-11-29 18:52 - 2013-11-07 18:39 - 01319064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-11-29 18:51 - 2013-08-31 01:13 - 01100728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 09764088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:49 - 2013-09-21 10:44 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-11-29 18:48 - 2013-09-21 10:44 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-11-29 18:47 - 2013-11-07 18:39 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-11-29 18:46 - 2013-11-07 18:39 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:13 - 2013-11-07 18:02 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.25.18.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-11-29 17:02 - 2013-11-29 17:02 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
2013-11-28 19:59 - 2013-09-28 00:01 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-11-27 01:07 - 2013-10-04 19:14 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2013-11-26 12:54 - 2013-12-12 03:00 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-12 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-12 03:00 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-12 03:00 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-12 03:00 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-12 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-12 03:00 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-12 03:00 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-12 03:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-12 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-12 03:00 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-12 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-12 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-12 03:00 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-12 03:00 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-12 03:00 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-26 09:38 - 2013-12-12 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-26 09:35 - 2013-12-12 03:00 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-12 03:00 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-12 03:00 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 03:00 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-12 03:00 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-12 03:00 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-12 03:00 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 03:00 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-12 03:00 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-12 03:00 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-12 03:00 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-12 03:00 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 03:00 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-12 03:00 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-20 00:02
==================== End Of Log ============================
Vielen Danke für deine Hilf/Zeit, ich weiß das wirklich zu schätzen. Hoffentlich ist der Rechner bald wieder clean, der Browser fühlt sich noch immer etwas langsam an, aber vielleicht auch Einbildung. Geändert von Nethenity (25.12.2013 um 19:02 Uhr) |
|
26.12.2013, 14:43
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunter Clean. Welcher BRowser?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7: Webseiten werden auf Werbung umgeleitet. Pc fährt sich herunter |
| antivirus, bluescreen, branding, browser, defender, flash player, google, install.exe, installation, mozilla, programm, pup.optional.crossrider, pup.optional.crossrider.a, pup.optional.plushd.a, remote control, rundll, services.exe, software, svchost.exe, system, vcredist, webseiten werden auf werbung umgeleitet., windows |
Linear-Darstellung
