Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 04.01.2014, 04:40   #1
FakeXero
 
Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



Hallo,

Seit ca 3 Tagen öffnet sich hin und wieder im Firefox ein neuer Tab mit der URL die im Titel steht. Ich habe hier auf dem Board auch schon ähnliche Probleme gesehen. Meins unterscheidet sich aber, zum Beispiel wie beim User "Pfannkuchen" sind bei mir keine Wörter auf Webseiten grün hervorgehoben oder unterstrichen. Die URL unterscheidet sich auch etwas. 2 Mal erschien jedoch nicht diese Seite, sondern eine Werbung für Star Wars: The old Republic. Ich weiß auch nicht wodurch das ausgelöst wird. Erst dachte ich, es wäre irgendwelche aggro Werbung, die ein neuen Tab öffnet sobald man mit dem Cursor drüber fährt. Ich kann auch lange surfen ohne dass irgendwas passiert. Heute hatte ich es 2 mal bei "surrenderat20" und bei "mmochampion"(Spielseiten). Ich kann auf den Seiten aber auch surfen und es passiert gar nichts.

Im nächsten Post poste ich schonmal die FRST-Logs.

Danke schonmal für eure Hilfe.

FRST-Log


FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by FakeXero (administrator) on FAKEXERO-PC on 04-01-2014 03:58:37
Running from C:\Users\FakeXero\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Xfire Inc.) C:\Program Files (x86)\Xfire\Xfire.exe
() C:\Program Files (x86)\Xfire\xfire64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Xfire\xfire64.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.64\deploy\LolClient.exe
(techPowerUp (www.techpowerup.com)) C:\Program Files (x86)\GPU-Z\GPU-Z.exe
() C:\Program Files (x86)\CoreTemp\Core Temp.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKCU\...\Run: [DisplayFusion] - C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7892864 2013-09-02] (Binary Fortress Software)
HKCU\...\Run: [Google Update] - C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-12] (Google Inc.)
MountPoints2: {75fcea1b-18ae-11e3-b22b-806e6f6e6963} - D:\autorun.exe
Startup: C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2963BC669DADCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default
FF Homepage: https://www.google.de/
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20((url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*'))%20%7B%20return%20'PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxMate - Proxy on steroids! - C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.twitch.tv/directory/following/live"
CHR Extension: (Google Docs) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Twitch.tv Europe Lag Fix) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoehmlkhjgaboegkondkciclminpjof\2.0_0
CHR Extension: (Google Wallet) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-12] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88424 2013-10-10] (Perfect World Entertainment Inc)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1315728 2013-09-02] (Binary Fortress Software)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-24] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG)
R3 HabuFltr; C:\Windows\System32\drivers\habu.sys [13696 2006-10-26] (Razer (Asia-Pacific) Pte Ltd)
R3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-08] (Guillemot Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] ()
R3 ALSysIO; \??\C:\Users\FakeXero\AppData\Local\Temp\ALSysIO64.sys [x]
R3 GPU-Z; \??\C:\Users\FakeXero\AppData\Local\Temp\GPU-Z.sys [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 03:58 - 2014-01-04 03:59 - 00014026 _____ C:\Users\FakeXero\Desktop\FRST.txt
2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST
2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe
2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-04 00:13 - 2014-01-04 00:13 - 23867560 _____ (Mozilla) C:\Users\FakeXero\Downloads\Firefox_Setup_26.0.exe
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2
2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD
2014-01-03 19:09 - 2014-01-03 23:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2
2014-01-03 06:16 - 2014-01-03 19:00 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url
2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url
2013-12-31 16:50 - 2013-12-31 16:55 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4
2013-12-31 16:41 - 2013-12-31 16:48 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4
2013-12-31 16:34 - 2013-12-31 16:41 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4
2013-12-31 15:50 - 2013-12-31 15:59 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4
2013-12-31 15:41 - 2013-12-31 15:50 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4
2013-12-31 15:33 - 2013-12-31 15:41 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4
2013-12-31 15:19 - 2013-12-31 15:27 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4
2013-12-31 14:52 - 2013-12-31 14:56 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4
2013-12-31 14:39 - 2013-12-31 14:43 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4
2013-12-31 14:34 - 2013-12-31 14:37 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4
2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice
2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url
2013-12-26 21:00 - 2013-12-26 23:11 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013]
2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url
2013-12-25 11:00 - 2013-12-26 13:25 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log
2013-12-24 22:51 - 2013-12-24 22:53 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4
2013-12-24 21:56 - 2013-12-24 21:58 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4
2013-12-24 21:46 - 2013-12-24 21:47 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4
2013-12-24 21:40 - 2013-12-24 21:42 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4
2013-12-24 21:37 - 2013-12-24 21:39 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4
2013-12-24 21:35 - 2013-12-24 21:37 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4
2013-12-24 21:31 - 2013-12-24 21:33 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4
2013-12-24 21:29 - 2013-12-24 21:31 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4
2013-12-24 21:27 - 2013-12-24 21:29 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4
2013-12-22 07:51 - 2013-12-22 07:55 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods
2013-12-21 21:09 - 2013-12-22 07:21 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit
2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url
2013-12-20 14:50 - 2013-12-20 14:52 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4
2013-12-20 14:46 - 2013-12-20 14:50 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4
2013-12-20 14:43 - 2013-12-20 14:46 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4
2013-12-20 14:33 - 2013-12-20 14:35 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4
2013-12-20 14:28 - 2013-12-20 14:31 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4
2013-12-20 14:25 - 2013-12-20 14:28 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4
2013-12-17 14:10 - 2013-12-17 14:13 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi
2013-12-17 14:10 - 2013-12-17 14:13 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi
2013-12-17 14:07 - 2013-12-17 14:09 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi
2013-12-17 14:07 - 2013-12-17 14:09 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi
2013-12-17 13:21 - 2013-12-17 13:25 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi
2013-12-17 13:20 - 2013-12-17 13:25 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi
2013-12-17 13:20 - 2013-12-17 13:24 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi
2013-12-17 12:59 - 2013-12-17 13:00 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi
2013-12-17 12:55 - 2013-12-17 12:57 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi
2013-12-16 12:28 - 2013-12-16 12:30 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi
2013-12-16 12:25 - 2013-12-16 12:28 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi
2013-12-16 12:22 - 2013-12-16 12:24 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi
2013-12-16 12:19 - 2013-12-16 12:21 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi
2013-12-16 12:16 - 2013-12-16 12:18 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi
2013-12-16 12:14 - 2013-12-16 12:16 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi
2013-12-16 12:11 - 2013-12-16 12:13 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi
2013-12-16 12:09 - 2013-12-16 12:11 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi
2013-12-16 12:06 - 2013-12-16 12:08 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi
2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV
2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz
2013-12-11 03:01 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 03:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 03:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 03:01 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 03:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 03:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 03:01 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 03:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 03:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 03:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 03:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 03:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 03:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 03:01 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 03:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 03:01 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 03:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 03:01 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 03:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 03:01 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 03:01 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 03:01 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 03:01 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 03:01 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 03:01 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 03:01 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 03:01 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 03:01 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 03:01 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 03:01 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 03:01 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss
2013-12-11 00:40 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 00:40 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 00:40 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 00:35 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 00:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 00:35 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 00:35 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 00:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 00:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 00:35 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 00:35 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 00:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 00:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 00:35 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 00:35 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 18:51 - 2013-12-10 18:53 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4
2013-12-10 18:49 - 2013-12-10 18:51 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4
2013-12-10 18:38 - 2013-12-10 18:49 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4
2013-12-10 18:30 - 2013-12-10 18:42 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4
2013-12-10 17:52 - 2013-12-10 17:54 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4
2013-12-10 17:44 - 2013-12-10 17:55 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4
2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-10 17:25 - 2013-12-10 17:30 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4
2013-12-10 17:04 - 2013-12-10 17:06 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4
2013-12-10 17:03 - 2013-12-10 20:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium
2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk
2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk
2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios
2013-12-10 01:01 - 2013-12-10 01:07 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe
2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url

==================== One Month Modified Files and Folders =======

2014-01-04 03:59 - 2014-01-04 03:58 - 00014026 _____ C:\Users\FakeXero\Desktop\FRST.txt
2014-01-04 03:59 - 2013-09-08 21:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\NetSpeedMonitor
2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST
2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe
2014-01-04 03:49 - 2013-09-08 18:52 - 01389738 _____ C:\Windows\WindowsUpdate.log
2014-01-04 03:44 - 2013-11-12 23:28 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA.job
2014-01-04 03:39 - 2013-09-17 21:43 - 00000000 ____D C:\Users\FakeXero\AppData\Local\PMB Files
2014-01-04 02:44 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 02:44 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 01:07 - 2013-11-26 03:52 - 00000403 _____ C:\Users\FakeXero\Desktop\To Do.txt
2014-01-04 00:34 - 2013-09-17 21:43 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-04 00:13 - 2014-01-04 00:13 - 23867560 _____ (Mozilla) C:\Users\FakeXero\Downloads\Firefox_Setup_26.0.exe
2014-01-04 00:13 - 2013-09-09 00:30 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-04 00:13 - 2013-09-08 22:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\TS3Client
2014-01-03 23:07 - 2014-01-03 19:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2
2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD
2014-01-03 19:00 - 2014-01-03 06:16 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url
2014-01-03 10:44 - 2013-11-12 23:28 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core.job
2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url
2014-01-03 06:16 - 2013-09-09 15:00 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url
2014-01-02 18:00 - 2013-09-08 18:52 - 00000000 ____D C:\Users\FakeXero
2014-01-02 17:58 - 2013-09-08 19:44 - 00000000 ____D C:\Windows\Panther
2014-01-02 10:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-02 08:06 - 2013-09-09 10:26 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Xfire
2014-01-01 05:13 - 2013-09-13 14:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\InfiniteCrisis
2014-01-01 05:06 - 2013-09-09 09:14 - 00000000 ____D C:\Program Files (x86)\InfiniteCrisis
2013-12-31 17:27 - 2013-09-09 09:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\vlc
2013-12-31 16:55 - 2013-12-31 16:50 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4
2013-12-31 16:48 - 2013-12-31 16:41 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4
2013-12-31 16:41 - 2013-12-31 16:34 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4
2013-12-31 15:59 - 2013-12-31 15:50 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4
2013-12-31 15:50 - 2013-12-31 15:41 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4
2013-12-31 15:41 - 2013-12-31 15:33 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4
2013-12-31 15:27 - 2013-12-31 15:19 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4
2013-12-31 14:56 - 2013-12-31 14:52 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4
2013-12-31 14:43 - 2013-12-31 14:39 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4
2013-12-31 14:37 - 2013-12-31 14:34 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4
2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice
2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url
2013-12-26 23:11 - 2013-12-26 21:00 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013]
2013-12-26 13:25 - 2013-12-25 11:00 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log
2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url
2013-12-24 22:53 - 2013-12-24 22:51 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4
2013-12-24 21:58 - 2013-12-24 21:56 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4
2013-12-24 21:47 - 2013-12-24 21:46 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4
2013-12-24 21:42 - 2013-12-24 21:40 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4
2013-12-24 21:39 - 2013-12-24 21:37 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4
2013-12-24 21:37 - 2013-12-24 21:35 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4
2013-12-24 21:33 - 2013-12-24 21:31 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4
2013-12-24 21:31 - 2013-12-24 21:29 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4
2013-12-24 21:29 - 2013-12-24 21:27 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4
2013-12-23 22:30 - 2013-12-03 19:12 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Battle.net
2013-12-22 07:55 - 2013-12-22 07:51 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods
2013-12-22 07:21 - 2013-12-21 21:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit
2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url
2013-12-21 12:35 - 2013-12-03 19:15 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-12-21 12:24 - 2013-12-03 19:12 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-12-20 14:52 - 2013-12-20 14:50 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4
2013-12-20 14:50 - 2013-12-20 14:46 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4
2013-12-20 14:46 - 2013-12-20 14:43 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4
2013-12-20 14:35 - 2013-12-20 14:33 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4
2013-12-20 14:31 - 2013-12-20 14:28 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4
2013-12-20 14:28 - 2013-12-20 14:25 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4
2013-12-18 17:57 - 2013-09-09 10:26 - 00000000 ____D C:\ProgramData\Xfire
2013-12-17 14:13 - 2013-12-17 14:10 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi
2013-12-17 14:13 - 2013-12-17 14:10 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi
2013-12-17 14:09 - 2013-12-17 14:07 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi
2013-12-17 14:09 - 2013-12-17 14:07 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi
2013-12-17 13:25 - 2013-12-17 13:21 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi
2013-12-17 13:25 - 2013-12-17 13:20 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi
2013-12-17 13:24 - 2013-12-17 13:20 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi
2013-12-17 13:00 - 2013-12-17 12:59 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi
2013-12-17 12:57 - 2013-12-17 12:55 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi
2013-12-16 12:30 - 2013-12-16 12:28 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi
2013-12-16 12:28 - 2013-12-16 12:25 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi
2013-12-16 12:24 - 2013-12-16 12:22 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi
2013-12-16 12:21 - 2013-12-16 12:19 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi
2013-12-16 12:18 - 2013-12-16 12:16 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi
2013-12-16 12:16 - 2013-12-16 12:14 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi
2013-12-16 12:13 - 2013-12-16 12:11 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi
2013-12-16 12:11 - 2013-12-16 12:09 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi
2013-12-16 12:08 - 2013-12-16 12:06 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi
2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV
2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-12 12:48 - 2013-09-08 21:56 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-12 12:48 - 2013-09-08 21:55 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-12 12:48 - 2013-09-08 21:55 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz
2013-12-11 08:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-11 04:26 - 2009-07-14 18:58 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-12-11 04:26 - 2009-07-14 18:58 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-12-11 04:26 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-11 04:19 - 2009-07-14 05:45 - 00293320 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss
2013-12-10 20:35 - 2013-12-10 17:03 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium
2013-12-10 18:53 - 2013-12-10 18:51 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4
2013-12-10 18:51 - 2013-12-10 18:49 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4
2013-12-10 18:49 - 2013-12-10 18:38 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4
2013-12-10 18:42 - 2013-12-10 18:30 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4
2013-12-10 17:55 - 2013-12-10 17:44 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4
2013-12-10 17:54 - 2013-12-10 17:52 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4
2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-10 17:30 - 2013-12-10 17:25 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4
2013-12-10 17:06 - 2013-12-10 17:04 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4
2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-10 16:59 - 2013-09-08 21:23 - 01591896 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk
2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk
2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios
2013-12-10 01:07 - 2013-12-10 01:01 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe
2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url
2013-12-06 10:39 - 2013-11-12 23:28 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA
2013-12-06 10:39 - 2013-11-12 23:28 - 00003712 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core
2013-12-05 18:01 - 2013-11-22 02:59 - 00000000 ____D C:\Users\FakeXero\Downloads\ReferatZeugz

Some content of TEMP:
====================
C:\Users\FakeXero\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-03 06:58

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---

--- --- ---

Und hier das Addition-Logfile

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-01-2014
Ran by FakeXero at 2014-01-04 04:00:05
Running from C:\Users\FakeXero\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
AION Free-to-Play (x32 Version:  - Gameforge)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.80328.2204 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden
Arc (x32 Version: 1.0.0.5510 - Perfect World Entertainment)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Bastion (x32 Version:  - Supergiant Games)
Batman: Arkham City GOTY (x32 Version:  - Rocksteady Studios)
Battle.net (x32 Version:  - Blizzard Entertainment)
Borderlands 2 (x32 Version:  - Gearbox Software)
Call of Duty: Black Ops II - Multiplayer (x32 Version:  - )
Call of Duty: Black Ops II - Zombies (x32 Version:  - )
Call of Duty: Black Ops II (x32 Version:  - Treyarch)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 4.05 - Piriform)
Command and Conquer 4: Tiberian Twilight (x32 Version:  - EA Los Angeles)
Counter-Strike: Global Offensive (x32 Version:  - Valve)
Deus Ex: Human Revolution - The Missing Link (x32 Version:  - Eidos Montreal)
Deus Ex: Human Revolution (x32 Version:  - Eidos Montreal)
DisplayFusion 5.1 (x32 Version: 5.1.0.0 - Binary Fortress Software)
Dota 2 (x32 Version:  - Valve)
Dragon Age: Origins (x32 Version: 1.04 - Electronic Arts, Inc.)
Dual-Core Optimizer (x32 Version: 1.1.4.0169 - AMD)
Dust: An Elysian Tail (x32 Version:  - Humble Hearts LLC)
FTL: Faster Than Light (x32 Version:  - Subset Games)
Gameforge Live 1.9.0 "Legend" (x32 Version: 1.9.0 - Gameforge)
Google Chrome (HKCU Version: 31.0.1650.63 - Google Inc.)
Guild Wars 2 (x32 Version:  - NCsoft Corporation, Ltd.)
Hawken (HKCU Version:  - Meteor Entertainment)
Hearthstone (x32 Version:  - Blizzard Entertainment)
InfiniteCrisis (x32 Version:  - Turbine, Inc)
Infinity Wars (x32 Version:  - )
Injustice: Gods Among Us Ultimate Edition (x32 Version:  - NetherRealm Studios)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle)
League of Legends (x32 Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (x32 Version:  - Valve)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 RC (Version: 4.5.50861 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 RC (Version: 4.5.50861 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8 - Mozilla)
Natural Selection 2 (x32 Version:  - Unknown Worlds Entertainment)
NetSpeedMonitor 2.5.4.0 x64 (Version: 2.5.4.0 - Florian Gilles)
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation)
Open Broadcaster Software (x32 Version:  - )
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
Pando Media Booster (x32 Version: 2.6.0.7 - Pando Networks Inc.)
Path of Exile (x32 Version:  - Grinding Gear Games)
PlanetSide 2 (x32 Version:  - Sony Online Entertainment)
PS3 Media Server (x32 Version: 1.90.1 - PS3 Media Server)
PunkBuster Services (x32 Version: 0.992 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.49.927.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6873 - Realtek Semiconductor Corp.)
S.K.I.L.L. - Special Force 2 (x32 Version:  - )
Star Wars: Knights of the Old Republic (x32 Version:  - BioWare)
StarCraft II (x32 Version:  - Blizzard Entertainment)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Street Fighter X Tekken (x32 Version:  - Capcom U.S.A., Inc.)
Sword of the Stars: The Pit (x32 Version:  - Kerberos Productions)
TeamSpeak 3 Client (Version: 3.0.11 - TeamSpeak Systems GmbH)
TechPowerUp GPU-Z (x32 Version:  - TechPowerUp)
TERA (x32 Version: 7 - Gameforge Productions GmbH)
The Elder Scrolls V: Skyrim (x32 Version:  - Bethesda Game Studios)
The Witcher 2: Assassins of Kings Enhanced Edition (x32 Version:  - CD Projekt RED)
Tomb Raider (x32 Version:  - Crystal Dynamics)
VLC media player 2.0.7 (Version: 2.0.7 - VideoLAN)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH)
XCOM: Enemy Unknown (x32 Version:  - Firaxis Games)
Xfire (x32 Version:  - )

==================== Restore Points  =========================

29-12-2013 06:23:58 Geplanter Prüfpunkt
29-12-2013 10:16:18 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
29-12-2013 10:16:49 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
03-01-2014 18:03:04 DirectX wurde installiert
03-01-2014 18:21:21 DirectX wurde installiert
03-01-2014 18:35:04 DirectX wurde installiert

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {963FB5BC-90F6-46A2-B5B3-BE189B2201E4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core => C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-12] (Google Inc.)
Task: {A2FC92C3-A1EC-459C-8FC1-D5FEAE385BFD} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {D9C8109E-DD86-403E-9A1C-3B6141015C60} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA => C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-12] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core.job => C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA.job => C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-08 21:55 - 2013-09-08 21:54 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-09-08 19:03 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-12-06 00:41 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 00:41 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 00:41 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 00:41 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 00:41 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-06 00:41 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
2013-08-21 13:18 - 2013-11-06 22:48 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-08-28 12:47 - 2013-12-11 20:40 - 01135016 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-08-07 10:31 - 2013-11-06 22:48 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-09-08 21:17 - 2013-09-08 21:17 - 16166280 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
2013-09-17 21:47 - 2013-12-17 15:39 - 00126816 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\RiotLauncher.dll
2014-01-04 00:14 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/04/2014 00:34:00 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: League of Legends.exe, Version: 3.15.0.260, Zeitstempel: 0x52b20b88
Name des fehlerhaften Moduls: cgD3D9.dll, Version: 3.0.0.16, Zeitstempel: 0x4d55a06f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b6539
ID des fehlerhaften Prozesses: 0xe80
Startzeit der fehlerhaften Anwendung: 0xLeague of Legends.exe0
Pfad der fehlerhaften Anwendung: League of Legends.exe1
Pfad des fehlerhaften Moduls: League of Legends.exe2
Berichtskennung: League of Legends.exe3

Error: (01/03/2014 01:18:38 AM) (Source: ESENT) (User: )
Description: DllHost (3400) WebCacheLocal: Fehler -1811 beim Öffnen von Protokolldatei C:\Users\FakeXero\AppData\Local\Microsoft\Windows\WebCache\V0100001.log.

Error: (01/03/2014 01:02:44 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0
Name des fehlerhaften Moduls: xfire_toucan_46139.dll, Version: 1.0.0.46139, Zeitstempel: 0x514a81a7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00073409
ID des fehlerhaften Prozesses: 0x1324
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (12/29/2013 04:06:35 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xf18
Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0
Pfad der fehlerhaften Anwendung: wmplayer.exe1
Pfad des fehlerhaften Moduls: wmplayer.exe2
Berichtskennung: wmplayer.exe3

Error: (12/27/2013 02:00:13 PM) (Source: Application Hang) (User: )
Description: Programm Steam.exe, Version 2.4.35.50 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 109c

Startzeit: 01cf025243a982cd

Endzeit: 299

Anwendungspfad: C:\Program Files (x86)\Steam\Steam.exe

Berichts-ID: cc1434ba-6ef6-11e3-992e-50e5492bdf22

Error: (12/25/2013 09:41:20 PM) (Source: Application Hang) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2330

Startzeit: 01cf01b19efdc894

Endzeit: 2

Anwendungspfad: C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

Berichts-ID: e7281671-6da4-11e3-992e-50e5492bdf22

Error: (12/25/2013 09:46:34 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0
Name des fehlerhaften Moduls: xfire_toucan_46139.dll, Version: 1.0.0.46139, Zeitstempel: 0x514a81a7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00073409
ID des fehlerhaften Prozesses: 0xf14
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (12/21/2013 08:37:54 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0
Name des fehlerhaften Moduls: xfire_toucan_46139.dll, Version: 1.0.0.46139, Zeitstempel: 0x514a81a7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00073409
ID des fehlerhaften Prozesses: 0xf48
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (12/20/2013 07:44:46 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0
Name des fehlerhaften Moduls: xfire_toucan_46139.dll, Version: 1.0.0.46139, Zeitstempel: 0x514a81a7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00073409
ID des fehlerhaften Prozesses: 0x1074
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (12/16/2013 04:23:28 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 31.0.1650.63, Zeitstempel: 0x529e8b45
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0xec8
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3


System errors:
=============
Error: (01/02/2014 08:07:49 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (01/02/2014 08:07:49 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "upnphost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (01/02/2014 08:07:49 AM) (Source: DCOM) (User: )
Description: 1069upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (12/31/2013 06:15:21 PM) (Source: DCOM) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (12/30/2013 10:27:28 AM) (Source: DCOM) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (12/27/2013 01:38:10 AM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (12/25/2013 06:40:26 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005

Error: (12/25/2013 04:56:50 PM) (Source: DCOM) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (12/23/2013 09:51:29 AM) (Source: DCOM) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (12/21/2013 03:36:12 AM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office Sessions:
=========================
Error: (01/04/2014 00:34:00 AM) (Source: Application Error)(User: )
Description: League of Legends.exe3.15.0.26052b20b88cgD3D9.dll3.0.0.164d55a06fc0000005000b6539e8001cf08dc304b5fd5C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.4\deploy\League of Legends.exeC:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.4\deploy\cgD3D9.dll85816878-74cf-11e3-ae95-50e5492bdf22

Error: (01/03/2014 01:18:38 AM) (Source: ESENT)(User: )
Description: DllHost3400WebCacheLocal: C:\Users\FakeXero\AppData\Local\Microsoft\Windows\WebCache\V0100001.log-1811

Error: (01/03/2014 01:02:44 AM) (Source: Application Error)(User: )
Description: LolClient.exe0.0.0.0515663e0xfire_toucan_46139.dll1.0.0.46139514a81a7c000000500073409132401cf07ea15619decC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.63\deploy\LolClient.exeC:\Program Files (x86)\Xfire\xfire_toucan_46139.dll5e47b5fd-740a-11e3-ae95-50e5492bdf22

Error: (12/29/2013 04:06:35 AM) (Source: Application Error)(User: )
Description: wmplayer.exe12.0.7601.175144ce7a485unknown0.0.0.000000000c000000500000000f1801cf0442f52f5762C:\Program Files (x86)\Windows Media Player\wmplayer.exeunknown394a9d78-7036-11e3-992e-50e5492bdf22

Error: (12/27/2013 02:00:13 PM) (Source: Application Hang)(User: )
Description: Steam.exe2.4.35.50109c01cf025243a982cd299C:\Program Files (x86)\Steam\Steam.execc1434ba-6ef6-11e3-992e-50e5492bdf22

Error: (12/25/2013 09:41:20 PM) (Source: Application Hang)(User: )
Description: rads_user_kernel.exe0.0.0.0233001cf01b19efdc8942C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exee7281671-6da4-11e3-992e-50e5492bdf22

Error: (12/25/2013 09:46:34 AM) (Source: Application Error)(User: )
Description: LolClient.exe0.0.0.0515663e0xfire_toucan_46139.dll1.0.0.46139514a81a7c000000500073409f1401cf00e66453ee6fC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.63\deploy\LolClient.exeC:\Program Files (x86)\Xfire\xfire_toucan_46139.dll0e5b4350-6d41-11e3-9550-50e5492bdf22

Error: (12/21/2013 08:37:54 PM) (Source: Application Error)(User: )
Description: LolClient.exe0.0.0.0515663e0xfire_toucan_46139.dll1.0.0.46139514a81a7c000000500073409f4801cefe08993c08ceC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.63\deploy\LolClient.exeC:\Program Files (x86)\Xfire\xfire_toucan_46139.dll6279e4a7-6a77-11e3-a43b-50e5492bdf22

Error: (12/20/2013 07:44:46 PM) (Source: Application Error)(User: )
Description: LolClient.exe0.0.0.0515663e0xfire_toucan_46139.dll1.0.0.46139514a81a7c000000500073409107401cefd7fbdf2ae07C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.63\deploy\LolClient.exeC:\Program Files (x86)\Xfire\xfire_toucan_46139.dllcbbecbf6-69a6-11e3-a43b-50e5492bdf22

Error: (12/16/2013 04:23:28 AM) (Source: Application Error)(User: )
Description: chrome.exe31.0.1650.63529e8b45ntdll.dll6.1.7601.18247521ea8e7c0000374000ce753ec801cef90a43c3c1d0C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dll6dfa9a24-6601-11e3-8650-50e5492bdf22


==================== Memory info =========================== 

Percentage of memory in use: 72%
Total physical RAM: 4079.43 MB
Available physical RAM: 1128.5 MB
Total Pagefile: 8157.04 MB
Available Pagefile: 3404.15 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:500.73 GB) NTFS
Drive d: (DragonAge) (CDROM) (Total:7.74 GB) (Free:0 GB) CDFS
Drive e: (Elements) (Fixed) (Total:1863.01 GB) (Free:853.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 000005A0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 0003990F)
Partition 1: (Not Active) - (Size=-198627557376) - (Type=07 NTFS)

==================== End Of Log ============================
         

Alt 04.01.2014, 08:50   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



hi,

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________

__________________

Alt 04.01.2014, 19:13   #3
FakeXero
 
Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



Nabend,

hier schonmal das " Malwarebytes Anti-Malware "-Log. AdwCleaner läuft gleich durch.

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.04.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
FakeXero :: FAKEXERO-PC [Administrator]

04.01.2014 18:28:36
mbam-log-2014-01-04 (18-28-36).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: Dateisystem | P2P
Durchsuchte Objekte: 199964
Laufzeit: 26 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Hier jetzt das AdwCleaner-Logfile.

Code:
ATTFilter
# AdwCleaner v3.016 - Bericht erstellt am 04/01/2014 um 18:39:01
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : FakeXero - FAKEXERO-PC
# Gestartet von : C:\Users\FakeXero\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1017 octets] - [04/01/2014 18:36:43]
AdwCleaner[S0].txt - [894 octets] - [04/01/2014 18:39:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [953 octets] ##########
         
JRT-Log

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 7 Home Premium x64
Ran by FakeXero on 04.01.2014 at 18:49:29,20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Emptied folder: C:\Users\FakeXero\AppData\Roaming\mozilla\firefox\profiles\twtjpdg6.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.01.2014 at 18:52:40,57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Und das frische FRST-Log.


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by FakeXero (administrator) on FAKEXERO-PC on 04-01-2014 19:03:23
Running from C:\Users\FakeXero\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKCU\...\Run: [DisplayFusion] - C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7892864 2013-09-02] (Binary Fortress Software)
HKCU\...\Run: [Google Update] - C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-12] (Google Inc.)
MountPoints2: {75fcea1b-18ae-11e3-b22b-806e6f6e6963} - D:\autorun.exe
Startup: C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2963BC669DADCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default
FF Homepage: https://www.google.de/
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*'))%20%7B%20return%20'PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxMate - Proxy on steroids! - C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.twitch.tv/directory/following/live"
CHR Extension: (Google Docs) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Twitch.tv Europe Lag Fix) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoehmlkhjgaboegkondkciclminpjof\2.0_0
CHR Extension: (Google Wallet) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-12] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88424 2013-10-10] (Perfect World Entertainment Inc)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1315728 2013-09-02] (Binary Fortress Software)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-24] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG)
R3 HabuFltr; C:\Windows\System32\drivers\habu.sys [13696 2006-10-26] (Razer (Asia-Pacific) Pte Ltd)
R3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-08] (Guillemot Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] ()
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 18:56 - 2014-01-04 19:03 - 00012291 _____ C:\Users\FakeXero\Desktop\FRST.txt
2014-01-04 18:52 - 2014-01-04 18:52 - 00000832 _____ C:\Users\FakeXero\Desktop\JRT.txt
2014-01-04 18:49 - 2014-01-04 18:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-04 18:44 - 2014-01-04 18:44 - 01036305 _____ (Thisisu) C:\Users\FakeXero\Desktop\JRT.exe
2014-01-04 18:40 - 2014-01-04 18:40 - 00000580 _____ C:\Windows\PFRO.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000056 _____ C:\Windows\setupact.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 18:27 - 2014-01-04 18:39 - 00000000 ____D C:\AdwCleaner
2014-01-04 18:19 - 2014-01-04 18:19 - 01233962 _____ C:\Users\FakeXero\Desktop\adwcleaner.exe
2014-01-04 18:15 - 2014-01-04 18:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Malwarebytes
2014-01-04 18:14 - 2014-01-04 18:14 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 18:14 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-04 18:11 - 2014-01-04 18:11 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\FakeXero\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST
2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe
2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-04 00:13 - 2014-01-04 00:13 - 23867560 _____ (Mozilla) C:\Users\FakeXero\Downloads\Firefox_Setup_26.0.exe
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2
2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD
2014-01-03 19:09 - 2014-01-03 23:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2
2014-01-03 06:16 - 2014-01-03 19:00 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url
2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url
2013-12-31 16:50 - 2013-12-31 16:55 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4
2013-12-31 16:41 - 2013-12-31 16:48 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4
2013-12-31 16:34 - 2013-12-31 16:41 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4
2013-12-31 15:50 - 2013-12-31 15:59 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4
2013-12-31 15:41 - 2013-12-31 15:50 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4
2013-12-31 15:33 - 2013-12-31 15:41 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4
2013-12-31 15:19 - 2013-12-31 15:27 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4
2013-12-31 14:52 - 2013-12-31 14:56 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4
2013-12-31 14:39 - 2013-12-31 14:43 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4
2013-12-31 14:34 - 2013-12-31 14:37 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4
2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice
2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url
2013-12-26 21:00 - 2013-12-26 23:11 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013]
2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url
2013-12-25 11:00 - 2013-12-26 13:25 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log
2013-12-24 22:51 - 2013-12-24 22:53 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4
2013-12-24 21:56 - 2013-12-24 21:58 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4
2013-12-24 21:46 - 2013-12-24 21:47 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4
2013-12-24 21:40 - 2013-12-24 21:42 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4
2013-12-24 21:37 - 2013-12-24 21:39 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4
2013-12-24 21:35 - 2013-12-24 21:37 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4
2013-12-24 21:31 - 2013-12-24 21:33 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4
2013-12-24 21:29 - 2013-12-24 21:31 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4
2013-12-24 21:27 - 2013-12-24 21:29 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4
2013-12-22 07:51 - 2013-12-22 07:55 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods
2013-12-21 21:09 - 2013-12-22 07:21 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit
2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url
2013-12-20 14:50 - 2013-12-20 14:52 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4
2013-12-20 14:46 - 2013-12-20 14:50 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4
2013-12-20 14:43 - 2013-12-20 14:46 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4
2013-12-20 14:33 - 2013-12-20 14:35 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4
2013-12-20 14:28 - 2013-12-20 14:31 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4
2013-12-20 14:25 - 2013-12-20 14:28 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4
2013-12-17 14:10 - 2013-12-17 14:13 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi
2013-12-17 14:10 - 2013-12-17 14:13 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi
2013-12-17 14:07 - 2013-12-17 14:09 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi
2013-12-17 14:07 - 2013-12-17 14:09 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi
2013-12-17 13:21 - 2013-12-17 13:25 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi
2013-12-17 13:20 - 2013-12-17 13:25 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi
2013-12-17 13:20 - 2013-12-17 13:24 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi
2013-12-17 12:59 - 2013-12-17 13:00 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi
2013-12-17 12:55 - 2013-12-17 12:57 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi
2013-12-16 12:28 - 2013-12-16 12:30 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi
2013-12-16 12:25 - 2013-12-16 12:28 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi
2013-12-16 12:22 - 2013-12-16 12:24 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi
2013-12-16 12:19 - 2013-12-16 12:21 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi
2013-12-16 12:16 - 2013-12-16 12:18 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi
2013-12-16 12:14 - 2013-12-16 12:16 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi
2013-12-16 12:11 - 2013-12-16 12:13 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi
2013-12-16 12:09 - 2013-12-16 12:11 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi
2013-12-16 12:06 - 2013-12-16 12:08 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi
2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV
2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz
2013-12-11 03:01 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 03:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 03:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 03:01 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 03:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 03:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 03:01 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 03:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 03:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 03:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 03:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 03:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 03:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 03:01 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 03:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 03:01 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 03:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 03:01 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 03:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 03:01 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 03:01 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 03:01 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 03:01 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 03:01 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 03:01 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 03:01 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 03:01 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 03:01 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 03:01 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 03:01 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 03:01 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss
2013-12-11 00:40 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 00:40 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 00:40 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 00:35 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 00:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 00:35 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 00:35 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 00:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 00:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 00:35 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 00:35 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 00:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 00:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 00:35 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 00:35 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 18:51 - 2013-12-10 18:53 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4
2013-12-10 18:49 - 2013-12-10 18:51 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4
2013-12-10 18:38 - 2013-12-10 18:49 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4
2013-12-10 18:30 - 2013-12-10 18:42 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4
2013-12-10 17:52 - 2013-12-10 17:54 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4
2013-12-10 17:44 - 2013-12-10 17:55 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4
2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-10 17:25 - 2013-12-10 17:30 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4
2013-12-10 17:04 - 2013-12-10 17:06 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4
2013-12-10 17:03 - 2013-12-10 20:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium
2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk
2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk
2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios
2013-12-10 01:01 - 2013-12-10 01:07 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe
2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url

==================== One Month Modified Files and Folders =======

2014-01-04 19:03 - 2014-01-04 18:56 - 00012291 _____ C:\Users\FakeXero\Desktop\FRST.txt
2014-01-04 19:03 - 2013-09-08 21:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\NetSpeedMonitor
2014-01-04 18:52 - 2014-01-04 18:52 - 00000832 _____ C:\Users\FakeXero\Desktop\JRT.txt
2014-01-04 18:49 - 2014-01-04 18:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-04 18:48 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 18:48 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 18:44 - 2014-01-04 18:44 - 01036305 _____ (Thisisu) C:\Users\FakeXero\Desktop\JRT.exe
2014-01-04 18:44 - 2013-11-12 23:28 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA.job
2014-01-04 18:44 - 2013-09-08 18:52 - 01418675 _____ C:\Windows\WindowsUpdate.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000580 _____ C:\Windows\PFRO.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000056 _____ C:\Windows\setupact.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 18:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-04 18:39 - 2014-01-04 18:27 - 00000000 ____D C:\AdwCleaner
2014-01-04 18:35 - 2013-09-09 10:26 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Xfire
2014-01-04 18:19 - 2014-01-04 18:19 - 01233962 _____ C:\Users\FakeXero\Desktop\adwcleaner.exe
2014-01-04 18:15 - 2014-01-04 18:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Malwarebytes
2014-01-04 18:14 - 2014-01-04 18:14 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 18:11 - 2014-01-04 18:11 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\FakeXero\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 10:44 - 2013-11-12 23:28 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core.job
2014-01-04 10:12 - 2013-09-09 00:30 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-04 10:03 - 2013-09-17 21:43 - 00000000 ____D C:\Users\FakeXero\AppData\Local\PMB Files
2014-01-04 10:03 - 2013-09-17 21:43 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST
2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe
2014-01-04 01:07 - 2013-11-26 03:52 - 00000403 _____ C:\Users\FakeXero\Desktop\To Do.txt
2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-04 00:13 - 2014-01-04 00:13 - 23867560 _____ (Mozilla) C:\Users\FakeXero\Downloads\Firefox_Setup_26.0.exe
2014-01-04 00:13 - 2013-09-08 22:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\TS3Client
2014-01-03 23:07 - 2014-01-03 19:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2
2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD
2014-01-03 19:00 - 2014-01-03 06:16 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url
2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url
2014-01-03 06:16 - 2013-09-09 15:00 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url
2014-01-02 18:00 - 2013-09-08 18:52 - 00000000 ____D C:\Users\FakeXero
2014-01-02 17:58 - 2013-09-08 19:44 - 00000000 ____D C:\Windows\Panther
2014-01-01 05:13 - 2013-09-13 14:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\InfiniteCrisis
2014-01-01 05:06 - 2013-09-09 09:14 - 00000000 ____D C:\Program Files (x86)\InfiniteCrisis
2013-12-31 17:27 - 2013-09-09 09:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\vlc
2013-12-31 16:55 - 2013-12-31 16:50 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4
2013-12-31 16:48 - 2013-12-31 16:41 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4
2013-12-31 16:41 - 2013-12-31 16:34 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4
2013-12-31 15:59 - 2013-12-31 15:50 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4
2013-12-31 15:50 - 2013-12-31 15:41 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4
2013-12-31 15:41 - 2013-12-31 15:33 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4
2013-12-31 15:27 - 2013-12-31 15:19 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4
2013-12-31 14:56 - 2013-12-31 14:52 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4
2013-12-31 14:43 - 2013-12-31 14:39 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4
2013-12-31 14:37 - 2013-12-31 14:34 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4
2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice
2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url
2013-12-26 23:11 - 2013-12-26 21:00 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013]
2013-12-26 13:25 - 2013-12-25 11:00 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log
2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url
2013-12-24 22:53 - 2013-12-24 22:51 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4
2013-12-24 21:58 - 2013-12-24 21:56 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4
2013-12-24 21:47 - 2013-12-24 21:46 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4
2013-12-24 21:42 - 2013-12-24 21:40 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4
2013-12-24 21:39 - 2013-12-24 21:37 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4
2013-12-24 21:37 - 2013-12-24 21:35 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4
2013-12-24 21:33 - 2013-12-24 21:31 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4
2013-12-24 21:31 - 2013-12-24 21:29 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4
2013-12-24 21:29 - 2013-12-24 21:27 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4
2013-12-23 22:30 - 2013-12-03 19:12 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Battle.net
2013-12-22 07:55 - 2013-12-22 07:51 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods
2013-12-22 07:21 - 2013-12-21 21:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit
2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url
2013-12-21 12:35 - 2013-12-03 19:15 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-12-21 12:24 - 2013-12-03 19:12 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-12-20 14:52 - 2013-12-20 14:50 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4
2013-12-20 14:50 - 2013-12-20 14:46 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4
2013-12-20 14:46 - 2013-12-20 14:43 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4
2013-12-20 14:35 - 2013-12-20 14:33 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4
2013-12-20 14:31 - 2013-12-20 14:28 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4
2013-12-20 14:28 - 2013-12-20 14:25 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4
2013-12-18 17:57 - 2013-09-09 10:26 - 00000000 ____D C:\ProgramData\Xfire
2013-12-17 14:13 - 2013-12-17 14:10 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi
2013-12-17 14:13 - 2013-12-17 14:10 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi
2013-12-17 14:09 - 2013-12-17 14:07 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi
2013-12-17 14:09 - 2013-12-17 14:07 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi
2013-12-17 13:25 - 2013-12-17 13:21 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi
2013-12-17 13:25 - 2013-12-17 13:20 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi
2013-12-17 13:24 - 2013-12-17 13:20 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi
2013-12-17 13:00 - 2013-12-17 12:59 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi
2013-12-17 12:57 - 2013-12-17 12:55 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi
2013-12-16 12:30 - 2013-12-16 12:28 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi
2013-12-16 12:28 - 2013-12-16 12:25 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi
2013-12-16 12:24 - 2013-12-16 12:22 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi
2013-12-16 12:21 - 2013-12-16 12:19 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi
2013-12-16 12:18 - 2013-12-16 12:16 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi
2013-12-16 12:16 - 2013-12-16 12:14 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi
2013-12-16 12:13 - 2013-12-16 12:11 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi
2013-12-16 12:11 - 2013-12-16 12:09 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi
2013-12-16 12:08 - 2013-12-16 12:06 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi
2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV
2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-12 12:48 - 2013-09-08 21:56 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-12 12:48 - 2013-09-08 21:55 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-12 12:48 - 2013-09-08 21:55 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz
2013-12-11 08:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-11 04:26 - 2009-07-14 18:58 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-12-11 04:26 - 2009-07-14 18:58 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-12-11 04:26 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-11 04:19 - 2009-07-14 05:45 - 00293320 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss
2013-12-10 20:35 - 2013-12-10 17:03 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium
2013-12-10 18:53 - 2013-12-10 18:51 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4
2013-12-10 18:51 - 2013-12-10 18:49 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4
2013-12-10 18:49 - 2013-12-10 18:38 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4
2013-12-10 18:42 - 2013-12-10 18:30 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4
2013-12-10 17:55 - 2013-12-10 17:44 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4
2013-12-10 17:54 - 2013-12-10 17:52 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4
2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-10 17:30 - 2013-12-10 17:25 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4
2013-12-10 17:06 - 2013-12-10 17:04 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4
2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-10 16:59 - 2013-09-08 21:23 - 01591896 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk
2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk
2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios
2013-12-10 01:07 - 2013-12-10 01:01 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe
2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url
2013-12-06 10:39 - 2013-11-12 23:28 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA
2013-12-06 10:39 - 2013-11-12 23:28 - 00003712 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core
2013-12-05 18:01 - 2013-11-22 02:59 - 00000000 ____D C:\Users\FakeXero\Downloads\ReferatZeugz

Some content of TEMP:
====================
C:\Users\FakeXero\AppData\Local\Temp\avgnt.exe
C:\Users\FakeXero\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-03 06:58

==================== End Of Log ============================
         
--- --- ---

--- --- ---
__________________

Alt 05.01.2014, 16:19   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.01.2014, 23:27   #5
FakeXero
 
Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



Hayo,

hier erstmal das ESET-Log.

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b634eacb7b5f2e40b4f9857c7c279a2b
# engine=16532
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-05 09:40:54
# local_time=2014-01-05 10:40:54 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 15681 10284475 8457 0
# compatibility_mode=5893 16776574 100 94 10128797 140587904 0 0
# scanned=345816
# found=0
# cleaned=0
# scan_time=5313
         
SecurityCheck spuckt das hier aus. oO

Code:
ATTFilter
 UNSUPPORTED OPERATING SYSTEM! ABORTED!
         
Und das frische FRST-Log.


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by FakeXero (administrator) on FAKEXERO-PC on 05-01-2014 23:15:15
Running from C:\Users\FakeXero\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Xfire Inc.) C:\Program Files (x86)\Xfire\Xfire.exe
() C:\Program Files (x86)\Xfire\xfire64.exe
() C:\Program Files (x86)\Xfire\xfire64.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.64\deploy\LolClient.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKCU\...\Run: [DisplayFusion] - C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7892864 2013-09-02] (Binary Fortress Software)
HKCU\...\Run: [Google Update] - C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-12] (Google Inc.)
MountPoints2: {75fcea1b-18ae-11e3-b22b-806e6f6e6963} - D:\autorun.exe
Startup: C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2963BC669DADCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default
FF Homepage: https://www.google.de/
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*'))%20%7B%20return%20'PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxMate - Proxy on steroids! - C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.twitch.tv/directory/following/live"
CHR Extension: (Google Docs) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Twitch.tv Europe Lag Fix) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoehmlkhjgaboegkondkciclminpjof\2.0_0
CHR Extension: (Google Wallet) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-12] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88424 2013-10-10] (Perfect World Entertainment Inc)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1315728 2013-09-02] (Binary Fortress Software)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-24] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG)
R3 HabuFltr; C:\Windows\System32\drivers\habu.sys [13696 2006-10-26] (Razer (Asia-Pacific) Pte Ltd)
R3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-08] (Guillemot Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] ()
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-05 23:11 - 2014-01-05 23:11 - 00987410 _____ C:\Users\FakeXero\Desktop\SecurityCheck.exe
2014-01-05 18:42 - 2014-01-05 18:43 - 02347384 _____ (ESET) C:\Users\FakeXero\Desktop\esetsmartinstaller_enu.exe
2014-01-04 18:56 - 2014-01-05 23:15 - 00013484 _____ C:\Users\FakeXero\Desktop\FRST.txt
2014-01-04 18:52 - 2014-01-04 18:52 - 00000832 _____ C:\Users\FakeXero\Desktop\JRT.txt
2014-01-04 18:49 - 2014-01-04 18:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-04 18:44 - 2014-01-04 18:44 - 01036305 _____ (Thisisu) C:\Users\FakeXero\Desktop\JRT.exe
2014-01-04 18:40 - 2014-01-04 18:40 - 00000580 _____ C:\Windows\PFRO.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000056 _____ C:\Windows\setupact.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 18:27 - 2014-01-04 18:39 - 00000000 ____D C:\AdwCleaner
2014-01-04 18:19 - 2014-01-04 18:19 - 01233962 _____ C:\Users\FakeXero\Desktop\adwcleaner.exe
2014-01-04 18:15 - 2014-01-04 18:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Malwarebytes
2014-01-04 18:14 - 2014-01-04 18:14 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 18:14 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-04 18:11 - 2014-01-04 18:11 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\FakeXero\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST
2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe
2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2
2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD
2014-01-03 19:09 - 2014-01-03 23:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2
2014-01-03 06:16 - 2014-01-03 19:00 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url
2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url
2013-12-31 16:50 - 2013-12-31 16:55 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4
2013-12-31 16:41 - 2013-12-31 16:48 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4
2013-12-31 16:34 - 2013-12-31 16:41 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4
2013-12-31 15:50 - 2013-12-31 15:59 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4
2013-12-31 15:41 - 2013-12-31 15:50 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4
2013-12-31 15:33 - 2013-12-31 15:41 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4
2013-12-31 15:19 - 2013-12-31 15:27 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4
2013-12-31 14:52 - 2013-12-31 14:56 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4
2013-12-31 14:39 - 2013-12-31 14:43 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4
2013-12-31 14:34 - 2013-12-31 14:37 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4
2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice
2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url
2013-12-26 21:00 - 2013-12-26 23:11 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013]
2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url
2013-12-25 11:00 - 2013-12-26 13:25 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log
2013-12-24 22:51 - 2013-12-24 22:53 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4
2013-12-24 21:56 - 2013-12-24 21:58 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4
2013-12-24 21:46 - 2013-12-24 21:47 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4
2013-12-24 21:40 - 2013-12-24 21:42 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4
2013-12-24 21:37 - 2013-12-24 21:39 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4
2013-12-24 21:35 - 2013-12-24 21:37 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4
2013-12-24 21:31 - 2013-12-24 21:33 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4
2013-12-24 21:29 - 2013-12-24 21:31 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4
2013-12-24 21:27 - 2013-12-24 21:29 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4
2013-12-22 07:51 - 2013-12-22 07:55 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods
2013-12-21 21:09 - 2013-12-22 07:21 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit
2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url
2013-12-20 14:50 - 2013-12-20 14:52 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4
2013-12-20 14:46 - 2013-12-20 14:50 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4
2013-12-20 14:43 - 2013-12-20 14:46 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4
2013-12-20 14:33 - 2013-12-20 14:35 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4
2013-12-20 14:28 - 2013-12-20 14:31 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4
2013-12-20 14:25 - 2013-12-20 14:28 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4
2013-12-17 14:10 - 2013-12-17 14:13 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi
2013-12-17 14:10 - 2013-12-17 14:13 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi
2013-12-17 14:07 - 2013-12-17 14:09 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi
2013-12-17 14:07 - 2013-12-17 14:09 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi
2013-12-17 13:21 - 2013-12-17 13:25 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi
2013-12-17 13:20 - 2013-12-17 13:25 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi
2013-12-17 13:20 - 2013-12-17 13:24 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi
2013-12-17 12:59 - 2013-12-17 13:00 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi
2013-12-17 12:55 - 2013-12-17 12:57 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi
2013-12-16 12:28 - 2013-12-16 12:30 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi
2013-12-16 12:25 - 2013-12-16 12:28 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi
2013-12-16 12:22 - 2013-12-16 12:24 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi
2013-12-16 12:19 - 2013-12-16 12:21 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi
2013-12-16 12:16 - 2013-12-16 12:18 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi
2013-12-16 12:14 - 2013-12-16 12:16 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi
2013-12-16 12:11 - 2013-12-16 12:13 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi
2013-12-16 12:09 - 2013-12-16 12:11 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi
2013-12-16 12:06 - 2013-12-16 12:08 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi
2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV
2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz
2013-12-11 03:01 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 03:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 03:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 03:01 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 03:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 03:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 03:01 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 03:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 03:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 03:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 03:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 03:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 03:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 03:01 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 03:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 03:01 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 03:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 03:01 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 03:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 03:01 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 03:01 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 03:01 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 03:01 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 03:01 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 03:01 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 03:01 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 03:01 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 03:01 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 03:01 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 03:01 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 03:01 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss
2013-12-11 00:40 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 00:40 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 00:40 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 00:35 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 00:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 00:35 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 00:35 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 00:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 00:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 00:35 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 00:35 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 00:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 00:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 00:35 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 00:35 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 18:51 - 2013-12-10 18:53 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4
2013-12-10 18:49 - 2013-12-10 18:51 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4
2013-12-10 18:38 - 2013-12-10 18:49 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4
2013-12-10 18:30 - 2013-12-10 18:42 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4
2013-12-10 17:52 - 2013-12-10 17:54 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4
2013-12-10 17:44 - 2013-12-10 17:55 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4
2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-10 17:25 - 2013-12-10 17:30 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4
2013-12-10 17:04 - 2013-12-10 17:06 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4
2013-12-10 17:03 - 2013-12-10 20:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium
2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk
2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk
2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios
2013-12-10 01:01 - 2013-12-10 01:07 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe
2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url

==================== One Month Modified Files and Folders =======

2014-01-05 23:15 - 2014-01-04 18:56 - 00013484 _____ C:\Users\FakeXero\Desktop\FRST.txt
2014-01-05 23:15 - 2013-09-08 21:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\NetSpeedMonitor
2014-01-05 23:11 - 2014-01-05 23:11 - 00987410 _____ C:\Users\FakeXero\Desktop\SecurityCheck.exe
2014-01-05 22:44 - 2013-11-12 23:28 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA.job
2014-01-05 22:44 - 2013-09-17 21:43 - 00000000 ____D C:\Users\FakeXero\AppData\Local\PMB Files
2014-01-05 18:43 - 2014-01-05 18:42 - 02347384 _____ (ESET) C:\Users\FakeXero\Desktop\esetsmartinstaller_enu.exe
2014-01-05 10:58 - 2013-11-12 23:28 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core.job
2014-01-05 06:08 - 2013-09-08 18:52 - 01434379 _____ C:\Windows\WindowsUpdate.log
2014-01-05 05:16 - 2013-09-09 00:30 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-05 04:55 - 2013-09-17 21:43 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-05 02:01 - 2013-09-08 22:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\TS3Client
2014-01-04 18:52 - 2014-01-04 18:52 - 00000832 _____ C:\Users\FakeXero\Desktop\JRT.txt
2014-01-04 18:49 - 2014-01-04 18:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-04 18:48 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 18:48 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 18:44 - 2014-01-04 18:44 - 01036305 _____ (Thisisu) C:\Users\FakeXero\Desktop\JRT.exe
2014-01-04 18:40 - 2014-01-04 18:40 - 00000580 _____ C:\Windows\PFRO.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000056 _____ C:\Windows\setupact.log
2014-01-04 18:40 - 2014-01-04 18:40 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 18:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-04 18:39 - 2014-01-04 18:27 - 00000000 ____D C:\AdwCleaner
2014-01-04 18:35 - 2013-09-09 10:26 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Xfire
2014-01-04 18:19 - 2014-01-04 18:19 - 01233962 _____ C:\Users\FakeXero\Desktop\adwcleaner.exe
2014-01-04 18:15 - 2014-01-04 18:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Malwarebytes
2014-01-04 18:14 - 2014-01-04 18:14 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 18:11 - 2014-01-04 18:11 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\FakeXero\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST
2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe
2014-01-04 01:07 - 2013-11-26 03:52 - 00000403 _____ C:\Users\FakeXero\Desktop\To Do.txt
2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-03 23:07 - 2014-01-03 19:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2
2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2
2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations
2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD
2014-01-03 19:00 - 2014-01-03 06:16 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url
2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url
2014-01-03 06:16 - 2013-09-09 15:00 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url
2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url
2014-01-02 18:00 - 2013-09-08 18:52 - 00000000 ____D C:\Users\FakeXero
2014-01-02 17:58 - 2013-09-08 19:44 - 00000000 ____D C:\Windows\Panther
2014-01-01 05:13 - 2013-09-13 14:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\InfiniteCrisis
2014-01-01 05:06 - 2013-09-09 09:14 - 00000000 ____D C:\Program Files (x86)\InfiniteCrisis
2013-12-31 17:27 - 2013-09-09 09:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\vlc
2013-12-31 16:55 - 2013-12-31 16:50 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4
2013-12-31 16:48 - 2013-12-31 16:41 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4
2013-12-31 16:41 - 2013-12-31 16:34 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4
2013-12-31 15:59 - 2013-12-31 15:50 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4
2013-12-31 15:50 - 2013-12-31 15:41 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4
2013-12-31 15:41 - 2013-12-31 15:33 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4
2013-12-31 15:27 - 2013-12-31 15:19 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4
2013-12-31 14:56 - 2013-12-31 14:52 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4
2013-12-31 14:43 - 2013-12-31 14:39 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4
2013-12-31 14:37 - 2013-12-31 14:34 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4
2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice
2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url
2013-12-26 23:11 - 2013-12-26 21:00 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013]
2013-12-26 13:25 - 2013-12-25 11:00 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log
2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url
2013-12-24 22:53 - 2013-12-24 22:51 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4
2013-12-24 21:58 - 2013-12-24 21:56 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4
2013-12-24 21:47 - 2013-12-24 21:46 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4
2013-12-24 21:42 - 2013-12-24 21:40 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4
2013-12-24 21:39 - 2013-12-24 21:37 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4
2013-12-24 21:37 - 2013-12-24 21:35 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4
2013-12-24 21:33 - 2013-12-24 21:31 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4
2013-12-24 21:31 - 2013-12-24 21:29 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4
2013-12-24 21:29 - 2013-12-24 21:27 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4
2013-12-23 22:30 - 2013-12-03 19:12 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Battle.net
2013-12-22 07:55 - 2013-12-22 07:51 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods
2013-12-22 07:21 - 2013-12-21 21:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit
2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url
2013-12-21 12:35 - 2013-12-03 19:15 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-12-21 12:24 - 2013-12-03 19:12 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-12-20 14:52 - 2013-12-20 14:50 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4
2013-12-20 14:50 - 2013-12-20 14:46 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4
2013-12-20 14:46 - 2013-12-20 14:43 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4
2013-12-20 14:35 - 2013-12-20 14:33 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4
2013-12-20 14:31 - 2013-12-20 14:28 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4
2013-12-20 14:28 - 2013-12-20 14:25 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4
2013-12-18 17:57 - 2013-09-09 10:26 - 00000000 ____D C:\ProgramData\Xfire
2013-12-17 14:13 - 2013-12-17 14:10 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi
2013-12-17 14:13 - 2013-12-17 14:10 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi
2013-12-17 14:09 - 2013-12-17 14:07 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi
2013-12-17 14:09 - 2013-12-17 14:07 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi
2013-12-17 13:25 - 2013-12-17 13:21 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi
2013-12-17 13:25 - 2013-12-17 13:20 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi
2013-12-17 13:24 - 2013-12-17 13:20 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi
2013-12-17 13:00 - 2013-12-17 12:59 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi
2013-12-17 12:57 - 2013-12-17 12:55 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi
2013-12-16 12:30 - 2013-12-16 12:28 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi
2013-12-16 12:28 - 2013-12-16 12:25 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi
2013-12-16 12:24 - 2013-12-16 12:22 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi
2013-12-16 12:21 - 2013-12-16 12:19 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi
2013-12-16 12:18 - 2013-12-16 12:16 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi
2013-12-16 12:16 - 2013-12-16 12:14 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi
2013-12-16 12:13 - 2013-12-16 12:11 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi
2013-12-16 12:11 - 2013-12-16 12:09 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi
2013-12-16 12:08 - 2013-12-16 12:06 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi
2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV
2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-12 12:48 - 2013-09-08 21:56 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-12 12:48 - 2013-09-08 21:55 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-12 12:48 - 2013-09-08 21:55 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz
2013-12-11 08:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-11 04:26 - 2009-07-14 18:58 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-12-11 04:26 - 2009-07-14 18:58 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-12-11 04:26 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-11 04:19 - 2009-07-14 05:45 - 00293320 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss
2013-12-10 20:35 - 2013-12-10 17:03 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium
2013-12-10 18:53 - 2013-12-10 18:51 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4
2013-12-10 18:51 - 2013-12-10 18:49 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4
2013-12-10 18:49 - 2013-12-10 18:38 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4
2013-12-10 18:42 - 2013-12-10 18:30 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4
2013-12-10 17:55 - 2013-12-10 17:44 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4
2013-12-10 17:54 - 2013-12-10 17:52 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4
2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-10 17:30 - 2013-12-10 17:25 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4
2013-12-10 17:06 - 2013-12-10 17:04 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4
2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-10 16:59 - 2013-09-08 21:23 - 01591896 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk
2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk
2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios
2013-12-10 01:07 - 2013-12-10 01:01 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe
2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url
2013-12-06 10:39 - 2013-11-12 23:28 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA
2013-12-06 10:39 - 2013-11-12 23:28 - 00003712 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core

Some content of TEMP:
====================
C:\Users\FakeXero\AppData\Local\Temp\avgnt.exe
C:\Users\FakeXero\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-03 06:58

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---

Weitere Probleme hatte ich bisher nicht, gesurft habe ich aber auch nicht so viel. Mich interessiert was das wohl war. Kann das irgendein Script gewesen sein, das durch infizierte Werbung in den Firefox Temp Order gekommen is? Wenn ich zB lese, dass das jemand nach nem Besuch auf chip.de hatte...


Alt 06.01.2014, 16:51   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



Möglich, auf jeden Fall war es Adware.


Fertig

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun


Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
--> Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/

Alt 07.01.2014, 08:10   #7
FakeXero
 
Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



Ist das denn normal, dass der SecurityCheck meint, dass mein OS nicht passt? oO

Alt 07.01.2014, 13:16   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



SecurityCheck ist ne Zicke, warscheinlich wird es nach nem Reboot des Rechners auch irgendwann laufen, kannste ignorieren
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 08.01.2014, 07:20   #9
FakeXero
 
Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



Jo, is ne Zicke.^^ Hier is das Log:

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.78  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Adobe Flash Player 11.8.800.94  
 Adobe Reader XI  
 Mozilla Firefox (26.0) 
 Mozilla Thunderbird (17.0.8) 
 Google Chrome 31.0.1650.57  
 Google Chrome 31.0.1650.63  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Ansonsten ist das Problem verschwunden. Danke für die Hilfe. :3

Alt 08.01.2014, 12:29   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Standard

Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/



Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/
adblock, aggro, board, branding, browser, cursor, erkannt, firefox, heute, hilfe, lange, league of legends, neuen, neuer, ntdll.dll, poste, probleme, refresh, schonmal, sobald, surfe, surfen, tab, tagen, titel, veralteter browser, webseite, webseiten, werbung, wörter, öffnet



Ähnliche Themen: Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/


  1. Veralteter Browser / Flashplayer / Java
    Plagegeister aller Art und deren Bekämpfung - 01.11.2014 (1)
  2. Windows 8.1 : Webseiten werden im IE auf Werbung umgeleitet, es sei ein veralteter Browser erkannt, obwohl aktuell
    Mülltonne - 26.10.2014 (0)
  3. Nach JAVA-Update Malware auf PC...Überschreibt Browser-Startseite mit http://istart.webssearches.com
    Log-Analyse und Auswertung - 07.09.2014 (3)
  4. http://98uj8.de/s3brsn5ba66mgfzeinrum#noad Öffnet sich mehrmals im Browser. :(
    Plagegeister aller Art und deren Bekämpfung - 05.08.2014 (18)
  5. WIN 7: Trojaner-Link erscheint in jedem Browser: http://search.fbdownloader.com/?channel=de
    Log-Analyse und Auswertung - 24.03.2014 (10)
  6. " Veralteter Browser erkannt " / Taskleiste weg
    Plagegeister aller Art und deren Bekämpfung - 01.02.2014 (21)
  7. Veralteter Browser Erkannt - in Firefox
    Plagegeister aller Art und deren Bekämpfung - 13.01.2014 (9)
  8. Veralteter Browser erkannt /Java /Flashplayer
    Plagegeister aller Art und deren Bekämpfung - 09.01.2014 (7)
  9. Veralteter Browser Erkannt: http://www.browse-update.net/Firefox-DE/
    Plagegeister aller Art und deren Bekämpfung - 04.01.2014 (14)
  10. updating-your-browser.org entfernen
    Anleitungen, FAQs & Links - 30.12.2013 (2)
  11. Werbeblöcke; Popups von http://rvzr-a.akamaihd.net/; Wörter grün unterstrichen; ... Nerviges im Browser
    Plagegeister aller Art und deren Bekämpfung - 23.12.2013 (20)
  12. Windows 7: Webseiten werden auf Werbung umgeleitet, veralteter Browser erkannt obwohl aktuell wie auch flashplayer, spybot search mit Virus
    Log-Analyse und Auswertung - 11.12.2013 (16)
  13. immer neue fenster in mozilla browser - http://arl16.ezpowerads.com.........................
    Plagegeister aller Art und deren Bekämpfung - 23.09.2013 (13)
  14. Startseite der Browser wird immer mit http://www.searchqu.com/406 gestartet
    Log-Analyse und Auswertung - 26.07.2011 (24)
  15. browser funkt an http://www.findboots.org/ac.php nach tr/kazy-angriff
    Log-Analyse und Auswertung - 26.04.2011 (1)
  16. Browser leiten bei google auf falsche Seiten weiter Quelle: http://board.protecus.de
    Plagegeister aller Art und deren Bekämpfung - 16.12.2009 (7)
  17. Browser Hijacker auf http://de.pcprivacycleanerpro.com
    Log-Analyse und Auswertung - 14.11.2008 (1)

Zum Thema Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ - Hallo, Seit ca 3 Tagen öffnet sich hin und wieder im Firefox ein neuer Tab mit der URL die im Titel steht. Ich habe hier auf dem Board auch schon - Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/...
Archiv
Du betrachtest: Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.