| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: [Verdacht] Virus, Malware etc. - Laptop langsamWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
05.01.2014, 14:23
| #1 |
 | ![[Verdacht] Virus, Malware etc. - Laptop langsam - Pfeil](images/icons/icon2.gif){kind=icon} [Verdacht] Virus, Malware etc. - Laptop langsam Hallo, seit kurzer Zeit läuft mein Laptop mit Windows 7 langsamer als sonst immer, so manche Klicks auf Dateien lassen sich manchmal Zeit. Vor kurzem hatte ich ein Trojaner, doch dieser wurde wohl laut meiner Software entfernt. Auch bei Virenscans von avast!, mehrere Male Komplettscans und öfters Quick-Scans, zeigen keine Funde. Auch ein Anti-Malware Programm findet nichts - Doch seit kurzem startet mein Laptop automatisch! Dies liegt wohl am BIOS (oder ähnlich), fand ich im Internet, doch das Problem ist, das ich weder weiß, wie ich das ändere, da mein Laptop nichtmal die Tastenkombination anzeigt, um ins BIOS zu kommen, noch ich jemals etwas geändert habe. Nun suche ich mein Taskmanager nach Prozessen ab, folgende enthalten keine Beschreibung: ATKOSD.exe *32 (kein Beutzername, keine Beschreibung (das nur so nebenbei  ATKOSD2.exe *32 (ist das normal das es da 2 gibt?)csrss.exe (kein Benutzername, keine Beschreibung) HControl.exe (kein Benutzername, keine Beschreibung) InsOnWMI.exe (kein Benutzername, keine Beschreibung) KBFiltr.exe (kein Benutzername, keine Beschreibung) WDC.exe (kein Benutzername, keine Beschreibung) winlogon.exe (kein Benutzername, keine Beschreibung) Vielleicht ist dies ein Ansatzpunkt, denn vielleicht sollten seriöse Programm eine Beschreibung/Benutzer haben. Ansonsten weiß ich überhaupt nicht, wo oder was ich suchen sollte, aber es ist sehr nervig, wenn der PC jede Nacht VON SELBST um halb 3/ halb 4 startet. Ich denke das ist verständlich. Ich hoffe, auf eine schnelle und knackige Antwort, euer iNicclas  Es tut mir Leid, falls ich den Thread falsch gepostet habe, ich habe mich grade angemeldet, und finde keinen Überblick. Habe mir das Programm "Security Task Manager" heruntergeladen und alle bereits aufgeführten Tasks mal gesucht: ATKOSD.exe befindet sich in einem Asus-ATK-Package, ich denke das ist normal. csrss.exe befindet sich EINMAL in C:\Windows\Systems32 UND EINMAL in C:\Windows\Systems32\csrss.exe ist das normal? HControl.exe befindet sich ebenfalls in einem Asus-ATK-Package, hört sich normal an InsOnWMI.exe in einem Asus-Instant On-NB (für Notebook wahrscheinlich)-Ordner KBFiltr.exe in einem Asus-ATK-Package WDC.exe in C:\Programm Files (x86)\ASUS\ATK Package\ATK-Hotkey\WDC.exe (Hört sich für mich auf Grund vom Ort "Programm Files" verdächtig an. winlogon.exe in C:\Sytem32\winlogon.exe Da weiß ich nicht ob das normal ist oder nicht Mfg. iNicclas Geändert von iNicclas (05.01.2014 um 14:23 Uhr) Grund: Neu registriert |
|
05.01.2014, 15:50
| #2 |
| /// the machine /// TB-Ausbilder    | ![[Verdacht] Virus, Malware etc. - Laptop langsam - Standard](images/icons/icon1.gif){kind=icon} [Verdacht] Virus, Malware etc. - Laptop langsam hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
05.01.2014, 16:35
| #3 |
| | [Verdacht] Virus, Malware etc. - Laptop langsam FRST.txt
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014 Ran by Asus (administrator) on NICLAS on 05-01-2014 16:30:13 Running from C:\Users\Asus\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe (ASUS) C:\Windows\AsScrPro.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-20] (AVAST Software) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) MountPoints2: {8b7970e0-7670-11e1-ba8f-806e6f6e6963} - E:\Autorun.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.145.0.cab DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.80.2.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Chrome: ======= CHR Extension: (Unfriend Notify for Facebook) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahigpjeolkfgjdaeodlmaceggigbpeoh\1.2_0 CHR Extension: (Click&Clean) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\8.3_0 CHR Extension: (AdBlock) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Google Mail Checker) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0 CHR Extension: (Google Wallet) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 CHR Extension: (Click&Clean App) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp\8.0_0 CHR HKLM-x32\...\Chrome\Extension: [aaaaimdcedbpbcjjbbnfcbbjcngmomic] - C:\Users\Asus\AppData\Local\somotomoviestoolbar1\GC\toolbar.crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [92800 2011-12-01] (ASUS) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-20] (AVAST Software) S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation) S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4340664 2012-07-15] (INCA Internet Co., Ltd.) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2012-12-07] () S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation) S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [x] S2 Update GreyGray; "C:\Program Files (x86)\GreyGray\updateGreyGray.exe" [x] ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-20] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-20] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-20] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-20] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-20] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-20] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-20] () R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-05 16:30 - 2014-01-05 16:30 - 00009676 _____ C:\Users\Asus\Downloads\FRST.txt 2014-01-05 16:29 - 2014-01-05 16:29 - 01931368 _____ (Farbar) C:\Users\Asus\Downloads\FRST64.exe 2014-01-05 16:29 - 2014-01-05 16:29 - 00000000 ____D C:\FRST 2014-01-05 14:30 - 2014-01-05 14:30 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Malwarebytes 2014-01-05 14:29 - 2014-01-05 14:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-05 14:29 - 2014-01-05 14:29 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-05 14:29 - 2014-01-05 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-05 14:29 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-05 14:28 - 2014-01-05 14:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Asus\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-05 14:05 - 2014-01-05 14:22 - 00000000 ____D C:\ProgramData\SecTaskMan 2014-01-05 14:05 - 2014-01-05 14:05 - 00000000 ____D C:\Program Files (x86)\Security Task Manager 2014-01-05 14:04 - 2014-01-05 14:04 - 02365840 _____ C:\Users\Asus\Downloads\SecurityTaskManager_Setup.exe 2013-12-30 19:54 - 2013-12-30 19:54 - 00167528 _____ () C:\Users\Asus\Downloads\Survey_Remover_Cracked-aKMfWH4.exe 2013-12-30 10:39 - 2013-12-30 10:39 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys 2013-12-30 10:38 - 2013-12-30 10:38 - 05049344 _____ (Crawler.com ) C:\Users\Asus\Downloads\SpywareTerminatorSetup_3.0.0.82.exe 2013-12-30 10:22 - 2013-12-30 10:22 - 00347816 _____ (Microsoft Corporation) C:\Users\Asus\Downloads\MicrosoftFixit.Performance.LB.196311822536538538.1.1.Run.exe 2013-12-29 22:02 - 2013-12-29 22:02 - 04722042 _____ C:\Users\Asus\Downloads\43245749852c07c87efa42-921074701482584079-1388346506.zip 2013-12-29 20:46 - 2013-12-29 20:46 - 00000053 _____ C:\Users\Asus\Downloads\google91e30bd8e03fbda1.html 2013-12-29 12:44 - 2013-12-29 12:44 - 00001062 _____ C:\Users\Public\Desktop\iFunbox.lnk 2013-12-29 12:44 - 2013-12-29 12:44 - 00000000 ____D C:\Program Files (x86)\i-Funbox DevTeam 2013-12-29 12:42 - 2013-12-29 12:43 - 15016222 _____ ( ) C:\Users\Asus\Downloads\ifunbox_setup.exe 2013-12-29 12:05 - 2013-12-29 12:05 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-12-29 12:04 - 2013-12-29 12:05 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-12-29 12:04 - 2013-12-29 12:05 - 00000000 ____D C:\Program Files\iTunes 2013-12-29 12:04 - 2013-12-29 12:05 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-12-29 12:04 - 2013-12-29 12:04 - 00000000 ____D C:\Program Files\iPod 2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files\Bonjour 2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files (x86)\Bonjour 2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2013-12-27 18:27 - 2013-12-27 18:27 - 00002930 _____ C:\Windows\System32\Tasks\{AA0E4F9C-AC9E-4973-BDB3-2280AE3233E9} 2013-12-27 18:26 - 2013-12-27 18:26 - 00002930 _____ C:\Windows\System32\Tasks\{69497809-6E2E-4BDF-96D7-E49028797045} 2013-12-26 23:07 - 2013-12-26 23:07 - 00002930 _____ C:\Windows\System32\Tasks\{44F7A213-AA65-42D8-937B-40E444D99A2D} 2013-12-26 22:21 - 2013-12-26 22:21 - 00002930 _____ C:\Windows\System32\Tasks\{C813917C-F462-49FB-B536-B303BCCB53C0} 2013-12-26 11:49 - 2013-12-26 11:49 - 00000000 ____D C:\Users\Asus\AppData\Local\{DA51330C-97A7-447D-9C0C-AA973F879003} 2013-12-26 11:40 - 2013-12-26 12:17 - 00000000 ____D C:\Users\Asus\AppData\Local\Temporary Projects 2013-12-25 11:50 - 2013-12-25 11:50 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-12-25 11:48 - 2013-12-25 11:50 - 00000000 ____D C:\ProgramData\Oracle 2013-12-25 11:48 - 2013-12-25 11:47 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-12-25 11:48 - 2013-12-25 11:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-12-25 11:48 - 2013-12-25 11:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-12-25 11:48 - 2013-12-25 11:47 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-12-25 11:47 - 2013-12-25 11:47 - 00000000 ____D C:\Program Files\Java 2013-12-24 15:44 - 2013-12-24 15:44 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled 2013-12-24 15:42 - 2013-12-24 15:42 - 00003158 _____ C:\Windows\System32\Tasks\Game_Booster_AutoUpdate 2013-12-24 15:39 - 2013-12-25 12:09 - 00000000 ____D C:\Users\Asus\AppData\Local\Razer 2013-12-24 15:38 - 2013-12-29 11:08 - 00001349 _____ C:\Users\Asus\Desktop\IObit Uninstaller.lnk 2013-12-24 15:38 - 2013-12-24 15:38 - 00001243 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2013-12-24 15:37 - 2013-12-25 12:09 - 00000000 ____D C:\ProgramData\Razer 2013-12-24 15:37 - 2013-12-25 12:09 - 00000000 ____D C:\Program Files (x86)\Razer 2013-12-24 15:37 - 2013-12-25 11:36 - 00000000 ____D C:\Program Files (x86)\IObit 2013-12-24 15:37 - 2013-12-24 17:30 - 00000000 ____D C:\ProgramData\IObit 2013-12-24 15:37 - 2013-12-24 15:45 - 00000000 ____D C:\ProgramData\ProductData 2013-12-24 15:37 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} 2013-12-24 15:36 - 2013-12-24 15:38 - 00000000 ____D C:\Users\Asus\AppData\Roaming\IObit 2013-12-23 20:10 - 2013-12-25 11:49 - 00000000 ____D C:\Users\Asus\AppData\Roaming\.technic 2013-12-23 20:10 - 2013-12-24 13:28 - 02304092 _____ () C:\Users\Asus\Desktop\TechnicLauncher.exe 2013-12-23 18:14 - 2013-12-23 18:21 - 00000000 ____D C:\AdwCleaner 2013-12-23 18:11 - 2013-12-23 18:11 - 00000000 ____D C:\ProgramData\Martau 2013-12-23 18:11 - 2013-12-23 18:11 - 00000000 ____D C:\Program Files\Total Uninstall 6 2013-12-20 16:05 - 2013-12-20 16:05 - 00000000 ____D C:\Users\Asus\AppData\Roaming\GlarySoft 2013-12-20 16:01 - 2013-12-20 16:01 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2013-12-20 13:42 - 2013-12-20 16:01 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-12-20 13:41 - 2013-12-20 16:01 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-12-20 13:41 - 2013-12-20 16:01 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-12-20 13:41 - 2013-12-20 16:01 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-12-20 13:41 - 2013-12-20 16:01 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-12-20 13:41 - 2013-12-20 16:01 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-12-20 13:41 - 2013-12-20 13:41 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-12-20 13:41 - 2013-12-20 13:41 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-12-20 13:39 - 2013-12-20 16:00 - 00000000 ____D C:\Program Files (x86)\GreyGray 2013-12-20 13:37 - 2013-12-20 13:37 - 00003462 _____ C:\Windows\System32\Tasks\RunAsStdUser Task 2013-12-20 13:36 - 2013-12-20 13:36 - 00000000 ____D C:\Users\Asus\AppData\Local\Chromium 2013-12-20 11:15 - 2013-12-23 18:04 - 06570405 _____ C:\Users\Asus\Documents\huzuni.zip 2013-12-20 11:14 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-20 11:14 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-20 11:14 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-20 11:14 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-20 11:14 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-20 11:14 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-20 11:14 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-20 11:14 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-20 11:14 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-20 11:14 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-20 11:14 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-20 11:14 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-20 11:14 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-20 11:14 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-20 11:14 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-20 11:14 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-20 11:14 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-20 11:14 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-20 11:14 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-20 11:14 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-20 11:14 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-20 11:14 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-20 11:14 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-20 11:14 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-20 11:14 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-20 11:14 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-20 11:14 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-20 11:14 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-20 11:14 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-20 11:14 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-20 11:14 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-19 16:25 - 2013-12-19 16:25 - 00001442 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk 2013-12-18 17:12 - 2013-12-18 17:12 - 00000000 ____D C:\Users\Asus\AppData\Local\{190208E2-30DF-468A-AC23-21479AD80522} 2013-12-18 16:17 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-18 16:17 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-18 16:16 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-18 16:16 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-18 16:16 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-18 16:15 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-18 16:15 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-18 16:15 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-18 16:14 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-18 15:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-18 15:51 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-18 15:51 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-18 15:51 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-18 15:51 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-18 15:44 - 2013-12-18 15:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-18 15:44 - 2013-12-18 15:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-18 15:43 - 2013-12-18 15:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-18 15:43 - 2013-12-18 15:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-18 15:43 - 2013-12-18 15:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-18 15:43 - 2013-12-18 15:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-18 15:43 - 2013-12-18 15:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-18 15:43 - 2013-12-18 15:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-18 15:42 - 2013-12-18 15:51 - 00009768 _____ C:\Windows\IE11_main.log 2013-12-18 15:37 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-18 15:37 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-18 15:37 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-18 15:37 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-18 15:37 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-18 15:37 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-18 15:37 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-18 15:37 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-17 19:11 - 2013-12-17 19:11 - 00000000 ____D C:\Users\Asus\AppData\Local\Deployment 2013-12-17 12:17 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-17 12:17 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys ==================== One Month Modified Files and Folders ======= 2014-01-05 16:30 - 2014-01-05 16:30 - 00009676 _____ C:\Users\Asus\Downloads\FRST.txt 2014-01-05 16:29 - 2014-01-05 16:29 - 01931368 _____ (Farbar) C:\Users\Asus\Downloads\FRST64.exe 2014-01-05 16:29 - 2014-01-05 16:29 - 00000000 ____D C:\FRST 2014-01-05 15:58 - 2012-09-14 19:31 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-05 15:54 - 2012-09-14 19:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-05 15:53 - 2012-03-25 12:43 - 01205598 _____ C:\Windows\WindowsUpdate.log 2014-01-05 15:52 - 2013-01-09 14:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-05 14:30 - 2014-01-05 14:30 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Malwarebytes 2014-01-05 14:30 - 2014-01-05 14:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-05 14:29 - 2014-01-05 14:29 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-05 14:29 - 2014-01-05 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-05 14:29 - 2014-01-05 14:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Asus\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-05 14:22 - 2014-01-05 14:05 - 00000000 ____D C:\ProgramData\SecTaskMan 2014-01-05 14:05 - 2014-01-05 14:05 - 00000000 ____D C:\Program Files (x86)\Security Task Manager 2014-01-05 14:04 - 2014-01-05 14:04 - 02365840 _____ C:\Users\Asus\Downloads\SecurityTaskManager_Setup.exe 2014-01-05 13:25 - 2013-08-15 17:43 - 00000095 _____ C:\Users\Asus\.accessibility.properties 2014-01-05 13:25 - 2012-04-11 21:40 - 00000000 ____D C:\Users\Asus 2014-01-04 19:32 - 2013-09-27 20:23 - 00004673 _____ C:\Windows\setupact.log 2014-01-04 19:23 - 2013-10-12 07:53 - 00000000 ____D C:\Users\Asus\AppData\Roaming\.minecraft 2014-01-04 13:39 - 2013-05-23 12:14 - 00000000 ____D C:\Users\Asus\AppData\Roaming\TS3Client 2014-01-04 12:36 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-04 12:36 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-04 12:28 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-01 17:06 - 2013-05-08 19:02 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-01 17:05 - 2012-04-11 21:41 - 00045056 _____ C:\Windows\SysWOW64\acovcnt.exe 2013-12-31 14:07 - 2012-09-04 17:42 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Skype 2013-12-30 20:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-30 19:54 - 2013-12-30 19:54 - 00167528 _____ () C:\Users\Asus\Downloads\Survey_Remover_Cracked-aKMfWH4.exe 2013-12-30 18:19 - 2012-09-03 15:20 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-12-30 11:26 - 2012-03-25 12:53 - 00002556 _____ C:\Windows\system32\AutoRunFilter.ini 2013-12-30 11:26 - 2012-03-25 12:53 - 00001431 _____ C:\Windows\system32\ServiceFilter.ini 2013-12-30 10:39 - 2013-12-30 10:39 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys 2013-12-30 10:38 - 2013-12-30 10:38 - 05049344 _____ (Crawler.com ) C:\Users\Asus\Downloads\SpywareTerminatorSetup_3.0.0.82.exe 2013-12-30 10:22 - 2013-12-30 10:22 - 00347816 _____ (Microsoft Corporation) C:\Users\Asus\Downloads\MicrosoftFixit.Performance.LB.196311822536538538.1.1.Run.exe 2013-12-30 10:00 - 2012-08-12 08:36 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Apple Computer 2013-12-30 10:00 - 2012-08-12 08:33 - 00000000 ____D C:\Users\Asus\AppData\Local\Apple 2013-12-30 09:59 - 2012-08-12 08:36 - 00000000 ____D C:\Users\Asus\AppData\Local\Apple Computer 2013-12-29 22:03 - 2012-09-03 15:17 - 00000000 ____D C:\Users\Asus\Desktop\Niclas 2013-12-29 22:02 - 2013-12-29 22:02 - 04722042 _____ C:\Users\Asus\Downloads\43245749852c07c87efa42-921074701482584079-1388346506.zip 2013-12-29 20:46 - 2013-12-29 20:46 - 00000053 _____ C:\Users\Asus\Downloads\google91e30bd8e03fbda1.html 2013-12-29 20:33 - 2013-10-25 18:37 - 00000000 ____D C:\Users\Asus\Documents\Übergang 2013-12-29 12:44 - 2013-12-29 12:44 - 00001062 _____ C:\Users\Public\Desktop\iFunbox.lnk 2013-12-29 12:44 - 2013-12-29 12:44 - 00000000 ____D C:\Program Files (x86)\i-Funbox DevTeam 2013-12-29 12:43 - 2013-12-29 12:42 - 15016222 _____ ( ) C:\Users\Asus\Downloads\ifunbox_setup.exe 2013-12-29 12:05 - 2013-12-29 12:05 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-12-29 12:05 - 2013-12-29 12:04 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-12-29 12:05 - 2013-12-29 12:04 - 00000000 ____D C:\Program Files\iTunes 2013-12-29 12:05 - 2013-12-29 12:04 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-12-29 12:04 - 2013-12-29 12:04 - 00000000 ____D C:\Program Files\iPod 2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files\Bonjour 2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files (x86)\Bonjour 2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2013-12-29 12:03 - 2012-08-12 08:33 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-12-29 12:01 - 2011-02-19 05:24 - 00777250 _____ C:\Windows\system32\perfh007.dat 2013-12-29 12:01 - 2011-02-19 05:24 - 00178788 _____ C:\Windows\system32\perfc007.dat 2013-12-29 12:01 - 2009-07-14 06:13 - 01838098 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-29 11:55 - 2013-09-30 15:28 - 00402648 _____ C:\Windows\PFRO.log 2013-12-29 11:08 - 2013-12-24 15:38 - 00001349 _____ C:\Users\Asus\Desktop\IObit Uninstaller.lnk 2013-12-27 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-27 18:27 - 2013-12-27 18:27 - 00002930 _____ C:\Windows\System32\Tasks\{AA0E4F9C-AC9E-4973-BDB3-2280AE3233E9} 2013-12-27 18:26 - 2013-12-27 18:26 - 00002930 _____ C:\Windows\System32\Tasks\{69497809-6E2E-4BDF-96D7-E49028797045} 2013-12-26 23:07 - 2013-12-26 23:07 - 00002930 _____ C:\Windows\System32\Tasks\{44F7A213-AA65-42D8-937B-40E444D99A2D} 2013-12-26 22:21 - 2013-12-26 22:21 - 00002930 _____ C:\Windows\System32\Tasks\{C813917C-F462-49FB-B536-B303BCCB53C0} 2013-12-26 22:19 - 2013-09-19 16:33 - 00000000 ____D C:\Users\Asus\Documents\Minecraft 2013-12-26 12:17 - 2013-12-26 11:40 - 00000000 ____D C:\Users\Asus\AppData\Local\Temporary Projects 2013-12-26 12:17 - 2013-10-25 10:22 - 00000000 ____D C:\Users\Asus\Documents\Visual Studio 2010 2013-12-26 11:49 - 2013-12-26 11:49 - 00000000 ____D C:\Users\Asus\AppData\Local\{DA51330C-97A7-447D-9C0C-AA973F879003} 2013-12-25 14:20 - 2012-10-05 13:50 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Dropbox 2013-12-25 12:09 - 2013-12-24 15:39 - 00000000 ____D C:\Users\Asus\AppData\Local\Razer 2013-12-25 12:09 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\Razer 2013-12-25 12:09 - 2013-12-24 15:37 - 00000000 ____D C:\Program Files (x86)\Razer 2013-12-25 11:50 - 2013-12-25 11:50 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-12-25 11:50 - 2013-12-25 11:48 - 00000000 ____D C:\ProgramData\Oracle 2013-12-25 11:50 - 2013-05-11 22:42 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-12-25 11:50 - 2013-05-11 22:42 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-12-25 11:50 - 2013-05-11 22:42 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-12-25 11:50 - 2013-05-11 22:42 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-25 11:49 - 2013-12-23 20:10 - 00000000 ____D C:\Users\Asus\AppData\Roaming\.technic 2013-12-25 11:47 - 2013-12-25 11:48 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-12-25 11:47 - 2013-12-25 11:48 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-12-25 11:47 - 2013-12-25 11:48 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-12-25 11:47 - 2013-12-25 11:48 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-12-25 11:47 - 2013-12-25 11:47 - 00000000 ____D C:\Program Files\Java 2013-12-25 11:43 - 2013-08-02 08:07 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-12-25 11:36 - 2013-12-24 15:37 - 00000000 ____D C:\Program Files (x86)\IObit 2013-12-24 17:30 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\IObit 2013-12-24 15:45 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\ProductData 2013-12-24 15:44 - 2013-12-24 15:44 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled 2013-12-24 15:42 - 2013-12-24 15:42 - 00003158 _____ C:\Windows\System32\Tasks\Game_Booster_AutoUpdate 2013-12-24 15:38 - 2013-12-24 15:38 - 00001243 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2013-12-24 15:38 - 2013-12-24 15:36 - 00000000 ____D C:\Users\Asus\AppData\Roaming\IObit 2013-12-24 15:37 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} 2013-12-24 13:28 - 2013-12-23 20:10 - 02304092 _____ () C:\Users\Asus\Desktop\TechnicLauncher.exe 2013-12-23 20:05 - 2013-10-13 08:06 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Craften Terminal 2013-12-23 18:24 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-23 18:21 - 2013-12-23 18:14 - 00000000 ____D C:\AdwCleaner 2013-12-23 18:21 - 2013-01-01 11:35 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software 2013-12-23 18:11 - 2013-12-23 18:11 - 00000000 ____D C:\ProgramData\Martau 2013-12-23 18:11 - 2013-12-23 18:11 - 00000000 ____D C:\Program Files\Total Uninstall 6 2013-12-23 18:04 - 2013-12-20 11:15 - 06570405 _____ C:\Users\Asus\Documents\huzuni.zip 2013-12-20 16:08 - 2013-05-10 19:58 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-12-20 16:08 - 2013-05-10 19:58 - 00000000 ____D C:\Program Files\WinRAR 2013-12-20 16:05 - 2013-12-20 16:05 - 00000000 ____D C:\Users\Asus\AppData\Roaming\GlarySoft 2013-12-20 16:02 - 2012-04-11 21:41 - 00000000 ___RD C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-12-20 16:01 - 2013-12-20 16:01 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2013-12-20 16:01 - 2013-12-20 13:42 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-12-20 16:01 - 2013-12-20 13:41 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-12-20 16:01 - 2013-12-20 13:41 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-12-20 16:01 - 2013-12-20 13:41 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-12-20 16:01 - 2013-12-20 13:41 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-12-20 16:01 - 2013-12-20 13:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-12-20 16:01 - 2013-05-08 19:02 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-12-20 16:00 - 2013-12-20 13:39 - 00000000 ____D C:\Program Files (x86)\GreyGray 2013-12-20 15:52 - 2009-07-29 07:03 - 00000000 ____D C:\Windows\Panther 2013-12-20 15:51 - 2009-07-14 05:45 - 00275856 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-20 13:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-20 13:41 - 2013-12-20 13:41 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-12-20 13:41 - 2013-12-20 13:41 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-12-20 13:37 - 2013-12-20 13:37 - 00003462 _____ C:\Windows\System32\Tasks\RunAsStdUser Task 2013-12-20 13:36 - 2013-12-20 13:36 - 00000000 ____D C:\Users\Asus\AppData\Local\Chromium 2013-12-19 16:25 - 2013-12-19 16:25 - 00001442 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk 2013-12-19 16:25 - 2013-08-02 08:09 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-12-19 16:25 - 2012-10-04 13:31 - 00000000 ____D C:\Users\Asus\AppData\Roaming\DVDVideoSoft 2013-12-18 17:12 - 2013-12-18 17:12 - 00000000 ____D C:\Users\Asus\AppData\Local\{190208E2-30DF-468A-AC23-21479AD80522} 2013-12-18 15:51 - 2013-12-18 15:42 - 00009768 _____ C:\Windows\IE11_main.log 2013-12-18 15:45 - 2013-01-09 14:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-18 15:45 - 2012-08-11 07:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-18 15:45 - 2012-08-11 07:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-18 15:44 - 2013-12-18 15:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-18 15:44 - 2013-12-18 15:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-18 15:43 - 2013-12-18 15:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-18 15:43 - 2013-12-18 15:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-18 15:43 - 2013-12-18 15:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-18 15:43 - 2013-12-18 15:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-18 15:43 - 2013-12-18 15:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-18 15:43 - 2013-12-18 15:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-18 15:43 - 2013-12-18 15:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-18 15:43 - 2013-12-18 15:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-18 15:39 - 2013-07-13 11:02 - 00000000 ____D C:\Windows\system32\MRT 2013-12-18 15:36 - 2012-08-12 08:58 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-18 15:32 - 2012-09-14 19:31 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-18 15:32 - 2012-09-14 19:31 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-18 04:50 - 2013-11-29 20:37 - 00000000 ____D C:\Users\Asus\Documents\FIFA 14 2013-12-18 04:50 - 2013-11-29 17:25 - 00000000 ____D C:\ProgramData\Origin 2013-12-18 04:50 - 2013-09-29 10:16 - 00000000 ____D C:\Users\Familie 2013-12-18 04:50 - 2013-09-28 20:56 - 00000000 ____D C:\Windows\Minidump 2013-12-18 04:50 - 2012-08-11 07:19 - 00000000 ____D C:\Windows\system32\Macromed 2013-12-18 04:50 - 2012-04-11 21:57 - 00000000 ____D C:\Users\Gast 2013-12-18 04:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2013-12-17 19:11 - 2013-12-17 19:11 - 00000000 ____D C:\Users\Asus\AppData\Local\Deployment 2013-12-17 19:11 - 2013-07-08 11:34 - 00000000 ____D C:\Users\Asus\AppData\Local\Apps\2.0 Files to move or delete: ==================== C:\Users\Asus\AppData\Roaming\Camdata.ini C:\Users\Asus\AppData\Roaming\CamLayout.ini C:\Users\Asus\AppData\Roaming\CamShapes.ini Some content of TEMP: ==================== C:\Users\Asus\AppData\Local\Temp\36808-671362-counter-strike.exe C:\Users\Asus\AppData\Local\Temp\4f5y0wji.dll C:\Users\Asus\AppData\Local\Temp\appshat-distribution.exe C:\Users\Asus\AppData\Local\Temp\bi_cleaner.exe C:\Users\Asus\AppData\Local\Temp\BundleSweetIMSetup.exe C:\Users\Asus\AppData\Local\Temp\DeltaTB.exe C:\Users\Asus\AppData\Local\Temp\htmlayout.dll C:\Users\Asus\AppData\Local\Temp\MoviesToolbarSetup_Somoto.exe C:\Users\Asus\AppData\Local\Temp\MybabylonTB.exe C:\Users\Asus\AppData\Local\Temp\nsdC97D.exe C:\Users\Asus\AppData\Local\Temp\nsj14E1.exe C:\Users\Asus\AppData\Local\Temp\nst18C8.exe C:\Users\Asus\AppData\Local\Temp\nstCD84.exe C:\Users\Asus\AppData\Local\Temp\OnlineWeatherSetup.exe C:\Users\Asus\AppData\Local\Temp\OptimizerPro.exe C:\Users\Asus\AppData\Local\Temp\Optimizer_Pro.exe C:\Users\Asus\AppData\Local\Temp\pricepeep_130001_0101.exe C:\Users\Asus\AppData\Local\Temp\propsys.dll C:\Users\Asus\AppData\Local\Temp\Quarantine.exe C:\Users\Asus\AppData\Local\Temp\setup.exe C:\Users\Asus\AppData\Local\Temp\setup__1546.exe C:\Users\Asus\AppData\Local\Temp\setup__3635.exe C:\Users\Asus\AppData\Local\Temp\tmp2655.exe C:\Users\Asus\AppData\Local\Temp\tmp3670.exe C:\Users\Asus\AppData\Local\Temp\tmp7A0D.exe C:\Users\Asus\AppData\Local\Temp\uninst1.exe C:\Users\Asus\AppData\Local\Temp\UpdateCheckerSetup.exe C:\Users\Asus\AppData\Local\Temp\WajamC.exe C:\Users\Asus\AppData\Local\Temp\wajam_download.exe C:\Users\Asus\AppData\Local\Temp\_TinDel.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 04:57 ==================== End Of Log ============================ Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-01-2014
Ran by Asus at 2014-01-05 16:31:30
Running from C:\Users\Asus\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
Adobe Flash Player 10 Plugin (x32 Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.6.636 - Adobe Systems, Inc.)
Alcor Micro USB Card Reader (x32 Version: 1.2.0117.08443 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.0117.08443 - Alcor Micro Corp.) Hidden
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.2.0 - Asmedia Technology)
ASUS AI Recovery (x32 Version: 1.0.19 - ASUS)
ASUS FaceLogon (x32 Version: 1.0.0013 - ASUS)
ASUS FancyStart (x32 Version: 1.1.1 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (x32 Version: 3.0.28 - ASUS)
ASUS Live Update (x32 Version: 3.1.7 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0037 - ASUS)
ASUS Virtual Camera (x32 Version: 1.0.24 - asus)
ASUS WebStorage (x32 Version: 3.0.108.222 - eCareme Technologies, Inc.)
ATK Package (x32 Version: 1.0.0014 - ASUS)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Cheat Engine 6.3 (x32 Version: - Cheat Engine)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Craften Terminal 3.4.5 (x32 Version: 3.4.5 - Craften.de)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (Version: 2.16 - Piriform)
Dropbox (HKCU Version: 2.0.22 - Dropbox, Inc.)
Express Zip (x32 Version: - NCH Software)
Fast Boot (Version: 1.0.10 - ASUS)
Fraps (remove only) (x32 Version: - )
Free YouTube Download version 3.2.18.1128 (x32 Version: 3.2.18.1128 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.9.725 (x32 Version: 3.12.9.725 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
iCloud (Version: 3.1.0.40 - Apple Inc.)
iFunbox (v2.7.2386.747), iFunbox DevTeam (x32 Version: v2.7.2386.747 - )
InstantOn for NB (x32 Version: 2.1.8 - ASUS)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2559 - Intel Corporation)
IObit Uninstaller (x32 Version: 3.0.5.1101 - IObit)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Locomotion (x32 Version: 1.00.000 - )
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version: - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (x32 Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.42 False (x32 Version: 8.0.50727.42 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.51011 False (x32 Version: 8.0.51011 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.56336 False (x32 Version: 8.0.56336 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.58299 False (x32 Version: 8.0.58299 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.59193 False (x32 Version: 8.0.59193 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 False (x32 Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.0 False (x32 Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 False (x32 Version: 9.0.21022.218 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 False (x32 Version: 9.0.30411 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 False (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 False (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 False (x32 Version: 9.0.30729.4048 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 False (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.5570 False (x32 Version: 9.0.30729.5570 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.30319 False (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 False (x32 Version: 11.0.50727.1 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 False (x32 Version: 11.0.51106.1 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 False (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 False (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 False (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Notepad++ (x32 Version: 6.4.2 - Notepad++ Team)
NVIDIA PhysX (x32 Version: 9.10.0513 - NVIDIA Corporation)
Origin (x32 Version: 9.3.1.4482 - Electronic Arts, Inc.)
Outlast (x32 Version: - R.G. Mechanics, spider91)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 9.2 - Qualcomm Atheros)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Real Heroes Firefighter (x32 Version: - rondomedia)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6454 - Realtek Semiconductor Corp.)
Rettungswagen Simulator 2012 (x32 Version: - )
Roll (x32 Version: - )
Safari (x32 Version: 5.34.57.2 - Apple Inc.)
Security Task Manager 1.8g (x32 Version: 1.8g - Neuber Software)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.6 (x32 Version: 6.6.106 - Skype Technologies S.A.)
Sonic Focus (x32 Version: 1.0.0.4 - Synopsys )
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (x32 Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Total Uninstall 6.3.4 (Version: 6.3.4 - Gavrila Martau)
Unterstützungsdateien für Microsoft SQL Server 2008-Setup (Version: 10.1.2731.0 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (x32 Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinFlash (x32 Version: 2.32.3 - ASUS)
WinRAR 5.01 (64-bit) (Version: 5.01.0 - win.rar GmbH)
Wireless Console 3 (x32 Version: 3.0.25 - ASUS)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2 - Microsoft Corporation)
==================== Restore Points =========================
05-01-2014 02:23:04 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {100E0C17-9D2F-45CD-9E66-70BC874CAC6E} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2011-12-07] (ASUS)
Task: {1622A11A-E775-4649-B53A-D578D586F2BD} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {1B730C3B-EFC8-4BC0-B025-2898FC9807E9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {1B839AAF-5ACD-4A7D-AEAE-4EE90ECEF393} - System32\Tasks\{44F7A213-AA65-42D8-937B-40E444D99A2D} => C:\Users\Asus\Desktop\Minecraft.exe [2013-10-12] ()
Task: {2B0AA4FF-AEE7-41F7-AA61-7541B93E94C8} - \BitGuard No Task File
Task: {62051603-7EB6-4512-AA0F-5DB6F4C76638} - System32\Tasks\{BA03B535-79F0-458D-B8D6-19173F280042} => C:\Program Files (x86)\i-Funbox DevTeam\iFunBox.exe [2013-10-11] (i-Funbox.com)
Task: {8F9485B0-2B94-456A-86A9-04CE8FE19A13} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe [2011-10-03] (ASUS)
Task: {90427FEF-2857-41CF-BDFC-49DA7610196C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9487CBCF-F970-4C09-BE02-5D87B9A9A6B9} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-21] (ASUS)
Task: {A995991C-A2A2-4F82-AC43-DADA4CC01F5E} - System32\Tasks\RunAsStdUser Task => C:\Users\Asus\AppData\Local\Oxy\Application\oxy.exe
Task: {B827B18E-D4F6-40E2-A262-5078DE504F23} - System32\Tasks\{C813917C-F462-49FB-B536-B303BCCB53C0} => C:\Users\Asus\Desktop\Minecraft.exe [2013-10-12] ()
Task: {BD1A15A4-D713-4504-8C2F-971C442970C2} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-20] (AVAST Software)
Task: {CC9F8063-F3A5-4ADA-B8B6-1FDD8FB15288} - \NCH Software\ExpressZipReminder No Task File
Task: {CDA3C5FC-3ADF-456B-A1DE-051726E0249A} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {D5A62396-3580-4728-9CB8-B471EEE7EC14} - System32\Tasks\{69497809-6E2E-4BDF-96D7-E49028797045} => C:\Users\Asus\Desktop\Minecraft.exe [2013-10-12] ()
Task: {DD0D12AD-D8E6-492E-A89E-F21B865F0E1B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-14] (Google Inc.)
Task: {DF622D34-8592-4926-9A26-AD69047EF66F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-14] (Google Inc.)
Task: {E2E84EE1-C2DB-402A-9BF6-D297EA9FBA43} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-18] (Adobe Systems Incorporated)
Task: {F7E5A764-8C29-4AE3-976A-8E506C0759C3} - System32\Tasks\{AA0E4F9C-AC9E-4973-BDB3-2280AE3233E9} => C:\Users\Asus\Desktop\Minecraft.exe [2013-10-12] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-01-03 20:59 - 2014-01-03 19:28 - 02152960 _____ () C:\Program Files\AVAST Software\Avast\defs\14010300\algo.dll
2014-01-05 13:25 - 2014-01-05 10:48 - 02152960 _____ () C:\Program Files\AVAST Software\Avast\defs\14010500\algo.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-12-20 13:41 - 2013-12-20 13:41 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2011-12-07 00:21 - 2011-12-07 00:21 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2013-12-19 15:51 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-19 15:51 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-19 15:51 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-19 15:51 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-19 15:51 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/05/2014 02:36:46 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1124
Error: (01/05/2014 02:36:46 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1124
Error: (01/05/2014 02:36:46 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/05/2014 09:54:41 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5070
Error: (01/05/2014 09:54:41 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5070
Error: (01/05/2014 09:54:41 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/05/2014 09:54:40 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4040
Error: (01/05/2014 09:54:40 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4040
Error: (01/05/2014 09:54:40 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/05/2014 09:54:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2995
System errors:
=============
Error: (01/04/2014 00:29:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update GreyGray" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/03/2014 09:27:37 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.
Error: (01/03/2014 09:56:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update GreyGray" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/02/2014 11:19:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update GreyGray" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/02/2014 10:17:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update GreyGray" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/01/2014 11:23:37 PM) (Source: DCOM) (User: )
Description: {34ABA258-14C1-4290-B2EF-5787B6218996}
Error: (01/01/2014 05:05:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update GreyGray" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/01/2014 05:05:36 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 31.12.2013 um 14:36:55 unerwartet heruntergefahren.
Error: (12/31/2013 01:45:15 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.
Error: (12/31/2013 00:22:33 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update GreyGray" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Microsoft Office Sessions:
=========================
Error: (01/05/2014 02:36:46 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1124
Error: (01/05/2014 02:36:46 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1124
Error: (01/05/2014 02:36:46 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/05/2014 09:54:41 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5070
Error: (01/05/2014 09:54:41 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5070
Error: (01/05/2014 09:54:41 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/05/2014 09:54:40 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4040
Error: (01/05/2014 09:54:40 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4040
Error: (01/05/2014 09:54:40 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/05/2014 09:54:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2995
CodeIntegrity Errors:
===================================
Date: 2013-07-25 10:44:42.371
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:44:42.213
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:44:21.536
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:44:21.371
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:44:15.471
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:44:15.309
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:39:46.121
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:39:45.971
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:39:45.805
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-25 10:39:45.633
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 60%
Total physical RAM: 4000.13 MB
Available physical RAM: 1570.7 MB
Total Pagefile: 7998.43 MB
Available Pagefile: 5398.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:119.24 GB) (Free:47.38 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:153.85 GB) (Free:30.01 GB) NTFS
Drive e: (FIFA 14) (CDROM) (Total:7.47 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: E3102A4B)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=119 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=154 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ein Scan mit Malware-Bytes ist nach 2 Stunden und 140.000 Datein zwar noch nicht fertig, hat aber bereits 48 infizierte Dateien gefunden. Danke für die noch kommende Hilfe. |
|
06.01.2014, 12:43
| #4 | |
| /// the machine /// TB-Ausbilder | [Verdacht] Virus, Malware etc. - Laptop langsamCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.01.2014, 15:02
| #5 |
| | [Verdacht] Virus, Malware etc. - Laptop langsam log-datei Code:
ATTFilter ComboFix 14-01-04.03 - Asus 06.01.2014 14:51:28.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4000.1973 [GMT 1:00]
ausgeführt von:: c:\users\Asus\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\Asus\AppData\Roaming\IHelper
c:\users\Asus\AppData\Roaming\IHelper\66802beca44123e4979c61ea99ba96c38b3b003a\system\ArtworkDB
c:\users\Asus\AppData\Roaming\IHelper\66802beca44123e4979c61ea99ba96c38b3b003a\system\Books.plist
c:\users\Asus\AppData\Roaming\IHelper\66802beca44123e4979c61ea99ba96c38b3b003a\system\iTunesCDB
c:\users\Asus\AppData\Roaming\IHelper\66802beca44123e4979c61ea99ba96c38b3b003a\system\iTunesCDB.unzip
c:\users\Asus\AppData\Roaming\IHelper\66802beca44123e4979c61ea99ba96c38b3b003a\system\MediaLibrary.sqlitedb-shm
c:\users\Asus\AppData\Roaming\IHelper\66802beca44123e4979c61ea99ba96c38b3b003a\system\MediaLibrary.sqlitedb-wal
c:\users\Asus\AppData\Roaming\IHelper\66802beca44123e4979c61ea99ba96c38b3b003a\system\MediaLibrary.sqlitedb
c:\users\Asus\AppData\Roaming\IHelper\66802beca44123e4979c61ea99ba96c38b3b003a\system\Purchases.plist
c:\windows\msvcr71.dll
c:\windows\SysWow64\DEBUG.log
c:\windows\SysWow64\frapsvid.dll
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-12-06 bis 2014-01-06 ))))))))))))))))))))))))))))))
.
.
2014-01-05 16:03 . 2014-01-05 16:03 -------- d-----w- c:\users\Asus\AppData\Roaming\Avira
2014-01-05 16:00 . 2013-12-09 10:37 84720 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-01-05 16:00 . 2013-12-09 10:37 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2014-01-05 16:00 . 2013-12-09 10:37 131576 ----a-w- c:\windows\system32\drivers\avipbb.sys
2014-01-05 16:00 . 2013-12-09 10:37 108440 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-01-05 16:00 . 2014-01-05 16:00 -------- d-----w- c:\programdata\Avira
2014-01-05 16:00 . 2014-01-05 16:00 -------- d-----w- c:\program files (x86)\Avira
2014-01-05 15:29 . 2014-01-05 15:29 -------- d-----w- C:\FRST
2014-01-05 13:30 . 2014-01-05 13:30 -------- d-----w- c:\users\Asus\AppData\Roaming\Malwarebytes
2014-01-05 13:29 . 2014-01-05 13:29 -------- d-----w- c:\programdata\Malwarebytes
2014-01-05 13:29 . 2014-01-05 13:30 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-01-05 13:29 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-01-05 13:05 . 2014-01-05 13:22 -------- d-----w- c:\programdata\SecTaskMan
2014-01-05 13:05 . 2014-01-05 13:05 -------- d-----w- c:\program files (x86)\Security Task Manager
2014-01-03 16:11 . 2013-12-16 00:54 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1E057EF5-C9AB-474F-8DC7-1719870970ED}\mpengine.dll
2013-12-30 09:39 . 2013-12-30 09:39 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2013-12-29 11:44 . 2013-12-29 11:44 -------- d-----w- c:\program files (x86)\i-Funbox DevTeam
2013-12-29 11:04 . 2013-12-29 11:04 -------- d-----w- c:\program files\iPod
2013-12-29 11:04 . 2013-12-29 11:05 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-12-29 11:04 . 2013-12-29 11:05 -------- d-----w- c:\program files\iTunes
2013-12-29 11:04 . 2013-12-29 11:05 -------- d-----w- c:\program files (x86)\iTunes
2013-12-29 11:03 . 2013-12-29 11:03 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-12-29 11:03 . 2013-12-29 11:03 -------- d-----w- c:\program files (x86)\Bonjour
2013-12-29 11:03 . 2013-12-29 11:03 -------- d-----w- c:\program files\Bonjour
2013-12-26 10:40 . 2013-12-26 11:17 -------- d-----w- c:\users\Asus\AppData\Local\Temporary Projects
2013-12-25 10:48 . 2013-12-25 10:50 -------- d-----w- c:\programdata\Oracle
2013-12-25 10:48 . 2013-12-25 10:47 312744 ----a-w- c:\windows\system32\javaws.exe
2013-12-25 10:48 . 2013-12-25 10:47 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-12-25 10:48 . 2013-12-25 10:47 189352 ----a-w- c:\windows\system32\javaw.exe
2013-12-25 10:48 . 2013-12-25 10:47 189352 ----a-w- c:\windows\system32\java.exe
2013-12-25 10:47 . 2013-12-25 10:47 -------- d-----w- c:\program files\Java
2013-12-25 10:43 . 2013-12-25 10:43 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-12-25 10:43 . 2013-12-25 10:43 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-12-25 10:43 . 2013-12-25 10:43 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-12-25 10:43 . 2013-12-25 10:43 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-12-25 10:43 . 2013-12-25 10:43 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-12-24 14:39 . 2013-12-25 11:09 -------- d-----w- c:\users\Asus\AppData\Local\Razer
2013-12-24 14:37 . 2013-12-24 14:45 -------- d-----w- c:\programdata\ProductData
2013-12-24 14:37 . 2013-12-24 14:37 -------- d-----w- c:\programdata\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-12-24 14:37 . 2013-12-24 16:30 -------- d-----w- c:\programdata\IObit
2013-12-24 14:37 . 2013-12-25 10:36 -------- d-----w- c:\program files (x86)\IObit
2013-12-24 14:37 . 2013-12-25 11:09 -------- d-----w- c:\programdata\Razer
2013-12-24 14:37 . 2013-12-25 11:09 -------- d-----w- c:\program files (x86)\Razer
2013-12-24 14:36 . 2013-12-24 14:38 -------- d-----w- c:\users\Asus\AppData\Roaming\IObit
2013-12-23 19:10 . 2013-12-25 10:49 -------- d-----w- c:\users\Asus\AppData\Roaming\.technic
2013-12-23 17:14 . 2013-12-23 17:21 -------- d-----w- C:\AdwCleaner
2013-12-23 17:11 . 2013-12-23 17:11 -------- d-----w- c:\programdata\Martau
2013-12-23 17:11 . 2013-12-23 17:11 -------- d-----w- c:\program files\Total Uninstall 6
2013-12-20 15:05 . 2013-12-20 15:05 -------- d-----w- c:\users\Asus\AppData\Roaming\GlarySoft
2013-12-20 15:01 . 2013-12-20 15:01 79672 ----a-w- c:\windows\system32\drivers\aswstm.sys
2013-12-20 15:00 . 2013-12-20 15:05 -------- d-----w- c:\program files (x86)\Absolute Uninstaller
2013-12-20 12:41 . 2013-12-20 15:01 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-12-20 12:41 . 2013-12-20 12:41 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-12-20 12:41 . 2013-12-20 15:01 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-12-20 12:41 . 2013-12-20 15:01 422216 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-12-20 12:41 . 2013-12-20 15:01 1034464 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-12-20 12:41 . 2013-12-20 12:41 92544 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-12-20 12:41 . 2013-12-20 15:01 43152 ----a-w- c:\windows\avastSS.scr
2013-12-20 12:39 . 2013-12-20 15:00 -------- d-----w- c:\program files (x86)\GreyGray
2013-12-20 12:36 . 2013-12-20 12:36 -------- d-----w- c:\users\Asus\AppData\Local\Chromium
2013-12-18 15:17 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll
2013-12-18 15:17 . 2013-10-30 02:19 301568 ----a-w- c:\windows\SysWow64\msieftp.dll
2013-12-18 15:16 . 2013-10-30 01:24 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-12-18 15:16 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-12-18 15:16 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-12-18 15:15 . 2013-10-19 01:36 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-12-18 15:15 . 2013-10-19 02:18 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-12-18 15:15 . 2013-11-12 02:07 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-12-18 15:14 . 2013-11-12 02:23 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-18 14:51 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-18 14:51 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-18 14:51 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-18 14:51 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2013-12-18 14:51 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2013-12-18 14:51 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-12-18 14:44 . 2013-12-18 14:44 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-18 14:44 . 2013-12-18 14:44 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-12-18 14:37 . 2013-10-12 02:04 121856 ----a-w- c:\windows\SysWow64\wshom.ocx
2013-12-18 14:37 . 2013-10-12 02:03 163840 ----a-w- c:\windows\SysWow64\scrrun.dll
2013-12-18 14:37 . 2013-10-12 01:15 141824 ----a-w- c:\windows\SysWow64\wscript.exe
2013-12-18 14:37 . 2013-10-12 01:15 126976 ----a-w- c:\windows\SysWow64\cscript.exe
2013-12-18 14:37 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx
2013-12-18 14:37 . 2013-10-12 02:31 202752 ----a-w- c:\windows\system32\scrrun.dll
2013-12-18 14:37 . 2013-10-12 01:33 156160 ----a-w- c:\windows\system32\cscript.exe
2013-12-18 14:37 . 2013-10-12 01:33 168960 ----a-w- c:\windows\system32\wscript.exe
2013-12-17 18:11 . 2013-12-17 18:11 -------- d-----w- c:\users\Asus\AppData\Local\Deployment
2013-12-17 11:17 . 2013-10-04 02:16 116736 ----a-w- c:\windows\system32\drivers\drmk.sys
2013-12-17 11:17 . 2013-10-04 01:36 230400 ----a-w- c:\windows\system32\drivers\portcls.sys
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-05 18:43 . 2012-04-11 20:41 45056 ----a-w- c:\windows\SysWow64\acovcnt.exe
2013-12-25 10:50 . 2013-05-11 21:42 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-12-20 15:01 . 2013-05-08 18:02 334136 ----a-w- c:\windows\system32\aswBoot.exe
2013-12-18 14:45 . 2012-08-11 06:19 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-18 14:45 . 2012-08-11 06:19 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-18 14:36 . 2012-08-12 07:58 90708896 ----a-w- c:\windows\system32\MRT.exe
2013-11-29 16:11 . 2013-10-25 09:22 207008 ----a-w- c:\programdata\Microsoft\VBExpress\10.0\1031\ResourceCache.dll
2013-11-19 02:33 . 2012-09-16 14:34 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-10-12 02:30 . 2013-11-29 13:14 830464 ----a-w- c:\windows\system32\nshwfp.dll
2013-10-12 02:29 . 2013-11-29 13:14 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-10-12 02:29 . 2013-11-29 13:14 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-10-12 02:03 . 2013-11-29 13:14 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2013-10-12 02:01 . 2013-11-29 13:14 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\Asus\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\Asus\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\Asus\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-12-20 3764024]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-09 684600]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
" Malwarebytes Anti-Malware (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll" [2013-04-04 1127496]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe;c:\program files\CyberGhost VPN\CGVPNCliService.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 X6va011;X6va011;c:\windows\SysWOW64\Drivers\X6va011;c:\windows\SysWOW64\Drivers\X6va011 [x]
R4 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R4 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
R4 MSSQLServerADHelper100;SQL Server Hilfsdienst für Active Directory;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0103.sys [x]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R4 SQLAgent$SQLEXPRESS;SQL Server-Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe;c:\program files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-19 14:50 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-11 14:45]
.
2014-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-14 18:31]
.
2014-01-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-14 18:31]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2013-12-24 14:37 2486592 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-12-20 15:01 287280 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2011-05-25 07:09 227840 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2011-05-25 07:09 227840 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 164016 ----a-w- c:\users\Asus\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 164016 ----a-w- c:\users\Asus\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 164016 ----a-w- c:\users\Asus\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 164016 ----a-w- c:\users\Asus\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.bing.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\users\Asus\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
Wow6432Node-HKLM-RunOnce-network_smb_linkbucks2 - (no file)
SafeBoot-BsScanner
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
AddRemove-ExpressZip - c:\program files (x86)\NCH Software\ExpressZip\expresszip.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va011]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va011"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{336D0C35-8A85-403a-B9D2-65C292C39087}"=hex:51,66,7a,6c,4c,1d,3b,1b,08,42,6c,
1a,82,e9,65,3d,9d,e9,17,af,a2,b0,e5,ab
"{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}"=hex:51,66,7a,6c,4c,1d,38,12,3a,25,4d,
8a,1f,e3,d1,0d,d3,3b,92,3f,05,d7,c9,12
"{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}"=hex:51,66,7a,6c,4c,1d,38,12,15,21,99,
35,ad,10,d3,00,f6,8f,3c,cf,15,94,08,e1
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:21,ad,fd,60,a7,c1,ce,01
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,77,c1,ad,d9,4c,b7,c2,41,b1,7b,c3,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,77,c1,ad,d9,4c,b7,c2,41,b1,7b,c3,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-01-06 15:01:29
ComboFix-quarantined-files.txt 2014-01-06 14:01
.
Vor Suchlauf: 17 Verzeichnis(se), 48.934.678.528 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 49.228.083.200 Bytes frei
.
- - End Of File - - DB77DDE81684418C74B812E2EEE4B278
|
|
07.01.2014, 09:48
| #6 |
| /// the machine /// TB-Ausbilder | [Verdacht] Virus, Malware etc. - Laptop langsam Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> [Verdacht] Virus, Malware etc. - Laptop langsam |
|
07.01.2014, 12:44
| #7 |
| | [Verdacht] Virus, Malware etc. - Laptop langsam Malware-Scan: Malwarebytes Anti-Malware 1.75.0.1300 Malwarebytes : Free Anti-Malware Datenbank Version: v2014.01.07.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Asus :: NICLAS [Administrator] 07.01.2014 11:48:57 mbam-log-2014-01-07 (11-48-57).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 265499 Laufzeit: 7 Minute(n), 39 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende)[/CODE] ADW-Cleaner Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 07/01/2014 um 12:20:55
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Asus - NICLAS
# Gestartet von : C:\Users\Asus\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Somoto
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Google Chrome v31.0.1650.63
[ Datei : C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [31865 octets] - [23/12/2013 18:15:42]
AdwCleaner[R1].txt - [1063 octets] - [07/01/2014 12:20:05]
AdwCleaner[S0].txt - [29248 octets] - [23/12/2013 18:21:40]
AdwCleaner[S1].txt - [937 octets] - [07/01/2014 12:20:55]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [996 octets] ##########
Sorry, das ich die Antwort davor nicht mit diesem #-Ding gemacht hab^^ Junkware Removal Tool: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 7 Home Premium x64
Ran by Asus on 07.01.2014 at 12:32:14,66
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3424838241-2400124619-2247821309-1000\Software\ib updater
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3424838241-2400124619-2247821309-1000\Software\sweetim
~~~ Files
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{07DD1D70-ABDA-4EDE-857C-2CF37079E8D8}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{08EDB6D5-226A-466E-BFC5-BCBE38660F40}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{0DF656D1-B716-4611-814D-59BB135E0087}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{10BD5CAB-21F6-4B63-9D4E-E11D3611C5A2}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{113CE321-2B99-464A-9C1B-117D654D49CF}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{190208E2-30DF-468A-AC23-21479AD80522}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{2CBA371C-0A0C-4FCC-9D8E-AF184D8F904E}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{3A86B360-E89B-4FAD-92F1-D883562442C6}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{42E11350-F19D-48C4-96C7-FFA31718B864}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{43B36847-A156-4DE4-896D-E2508BA34118}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{44558A5E-3D8E-42E6-868F-A9DA5EB607C0}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{44757C3C-E76A-4F1A-B7D2-CBFC4E33A399}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{50CC3FA4-B3C3-4367-9232-E600926E7671}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{58958386-6E93-41BE-965D-03719167F5A2}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{59FB553E-3AEF-46A9-8B4C-42B1E1E86B48}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{626DD12E-D3E9-48D9-B59D-907AD6378386}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{648850BC-44B4-4B7F-9618-DA5B4DC71C17}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{6831291B-C0E0-43EF-90D4-9AEE791DB758}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{68764F21-499D-48D8-836D-3630F53E7EE8}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{6BF4DDE4-1469-4A86-95F7-1B14DC34B5E6}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{740122DD-19B0-4C70-A071-FAC7B7E1F512}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{755C71B7-80C2-4A84-AAB0-9F01D09D6D8F}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{81633E35-D98A-486C-B15C-7D3A2118A9D9}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{838F2883-8FD1-456F-9A8D-6E81C2CF1AF2}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{8391A030-A2BD-4905-BAF9-401DD3BC91B5}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{87FFCE92-9DD6-4178-84C7-5BB8CAFEFC9B}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{8A9B4984-0AD4-431B-A6C3-29E4CCBF3792}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{92AD1638-55B5-4764-BF24-6A015584AEAF}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{96644B2C-0BC8-4592-9BB8-32ECDD0DCCAB}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{9EF10F88-466B-4ADF-A86E-AED6CC6DC7A4}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{9F40A165-69AC-4770-9B35-D9907AA6B75A}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{A2E7BB8D-8546-4EE8-BFD9-5AA1735D54E3}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{A36279E7-3321-4CDB-B34C-9F5B63FBAFD1}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{AD048C5E-73D4-44DF-8FF9-0B2624E2BD72}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{BA44C311-0367-4DBC-B33B-28E61AE77F76}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{BCC583F5-C5A0-4C4E-90FC-EFD4610A4A34}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{BCE27BDF-0E86-4338-8A0B-6147D6189BE4}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{C1B4FB44-56E5-4CAB-AAB3-3694A2C97BCA}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{C53F2E37-9278-4BF7-B280-07AEA2299E2D}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{CB3BC4D2-8E64-4CDC-9609-07FE500981ED}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{CB4A65EC-77FF-4E80-A602-A8A4B02B2B5E}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{CE60F830-B598-433F-BABF-9D2A724CF789}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{D9931551-6986-4F88-836E-DBD418F6736B}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{DA51330C-97A7-447D-9C0C-AA973F879003}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{DDC1313F-53EF-4E62-994E-BABC195D9F26}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{F1A330B0-1A3F-4FD0-AE78-A2B582B52928}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{F2DE222B-D480-4858-8161-B671824F574D}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{F451632E-1FD4-4288-9A32-A85D91BA508C}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{F9543A7E-10D7-446A-BFAA-41C421192B76}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{FD3DBF85-5E9F-4779-96E0-D21A54BD4EA1}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{FF9C2498-1D88-4F23-9119-1340ABBA26E3}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{FFAF3E9D-5CBB-4B02-96ED-1E9C5E237AAC}
Successfully deleted: [Empty Folder] C:\Users\Asus\appdata\local\{FFE88C68-48FE-47D5-960D-78F0E8B551DF}
~~~ Chrome
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.01.2014 at 12:38:44,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Und nochmal das FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-01-2014
Ran by Asus (administrator) on NICLAS on 07-01-2014 13:41:21
Running from C:\Users\Asus\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
(ASUS) C:\Windows\AsScrPro.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-20] (AVAST Software)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.145.0.cab
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.80.2.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Chrome:
=======
CHR Extension: (Unfriend Notify for Facebook) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahigpjeolkfgjdaeodlmaceggigbpeoh\1.2_0
CHR Extension: (Click&Clean) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\8.3_0
CHR Extension: (AdBlock) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Google Mail Checker) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0
CHR Extension: (Google Wallet) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1
CHR Extension: (Click&Clean App) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp\8.0_0
CHR HKLM-x32\...\Chrome\Extension: [aaaaimdcedbpbcjjbbnfcbbjcngmomic] - C:\Users\Asus\AppData\Local\somotomoviestoolbar1\GC\toolbar.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [92800 2011-12-01] (ASUS)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-20] (AVAST Software)
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4340664 2012-07-15] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2012-12-07] ()
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [x]
==================== Drivers (Whitelisted) ====================
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-20] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-20] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-20] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-20] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-20] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-07 13:41 - 2014-01-07 13:41 - 00000000 ____D C:\Users\Asus\Downloads\FRST-OlderVersion
2014-01-07 12:32 - 2014-01-07 12:32 - 00000000 ____D C:\Windows\ERUNT
2014-01-07 12:29 - 2014-01-07 12:29 - 01036305 _____ (Thisisu) C:\Users\Asus\Downloads\JRT.exe
2014-01-07 12:14 - 2014-01-07 12:14 - 01233962 _____ C:\Users\Asus\Downloads\adwcleaner.exe
2014-01-06 15:01 - 2014-01-06 15:01 - 00031455 _____ C:\ComboFix.txt
2014-01-06 14:49 - 2014-01-06 14:49 - 00001149 _____ C:\Users\Asus\Desktop\ComboFix - Verknüpfung.lnk
2014-01-06 14:49 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-06 14:49 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-06 14:49 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-06 14:49 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-06 14:49 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-06 14:49 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-06 14:49 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-06 14:49 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-06 14:40 - 2014-01-06 15:01 - 00000000 ____D C:\Qoobox
2014-01-06 14:40 - 2014-01-06 14:59 - 00000000 ____D C:\Windows\erdnt
2014-01-06 14:13 - 2014-01-06 14:13 - 05160001 ____R (Swearware) C:\Users\Asus\Downloads\ComboFix.exe
2014-01-06 12:44 - 2014-01-06 12:44 - 01423538 _____ C:\Users\Asus\Downloads\MCWar_1_6.zip
2014-01-05 17:03 - 2014-01-05 17:03 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Avira
2014-01-05 17:01 - 2014-01-05 17:01 - 00002072 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-05 17:00 - 2014-01-05 17:00 - 00000000 ____D C:\ProgramData\Avira
2014-01-05 17:00 - 2014-01-05 17:00 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-05 17:00 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-05 17:00 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-05 17:00 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-05 17:00 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-05 16:52 - 2014-01-05 16:58 - 129598176 _____ C:\Users\Asus\Downloads\avira_free344_antivirus_de.exe
2014-01-05 16:30 - 2014-01-07 13:41 - 00010137 _____ C:\Users\Asus\Downloads\FRST.txt
2014-01-05 16:29 - 2014-01-07 13:41 - 01931762 _____ (Farbar) C:\Users\Asus\Downloads\FRST64.exe
2014-01-05 16:29 - 2014-01-07 13:41 - 00000000 ____D C:\FRST
2014-01-05 14:30 - 2014-01-05 14:30 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Malwarebytes
2014-01-05 14:29 - 2014-01-05 14:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-05 14:29 - 2014-01-05 14:29 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-05 14:29 - 2014-01-05 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-05 14:29 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-05 14:05 - 2014-01-05 14:22 - 00000000 ____D C:\ProgramData\SecTaskMan
2014-01-05 14:05 - 2014-01-05 14:05 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2014-01-05 14:04 - 2014-01-05 14:04 - 02365840 _____ C:\Users\Asus\Downloads\SecurityTaskManager_Setup.exe
2013-12-30 10:39 - 2013-12-30 10:39 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2013-12-29 12:44 - 2013-12-29 12:44 - 00001062 _____ C:\Users\Public\Desktop\iFunbox.lnk
2013-12-29 12:44 - 2013-12-29 12:44 - 00000000 ____D C:\Program Files (x86)\i-Funbox DevTeam
2013-12-29 12:05 - 2013-12-29 12:05 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-12-29 12:04 - 2013-12-29 12:05 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-12-29 12:04 - 2013-12-29 12:05 - 00000000 ____D C:\Program Files\iTunes
2013-12-29 12:04 - 2013-12-29 12:05 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-12-29 12:04 - 2013-12-29 12:04 - 00000000 ____D C:\Program Files\iPod
2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files\Bonjour
2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-12-27 18:27 - 2013-12-27 18:27 - 00002930 _____ C:\Windows\System32\Tasks\{AA0E4F9C-AC9E-4973-BDB3-2280AE3233E9}
2013-12-27 18:26 - 2013-12-27 18:26 - 00002930 _____ C:\Windows\System32\Tasks\{69497809-6E2E-4BDF-96D7-E49028797045}
2013-12-26 23:07 - 2013-12-26 23:07 - 00002930 _____ C:\Windows\System32\Tasks\{44F7A213-AA65-42D8-937B-40E444D99A2D}
2013-12-26 22:21 - 2013-12-26 22:21 - 00002930 _____ C:\Windows\System32\Tasks\{C813917C-F462-49FB-B536-B303BCCB53C0}
2013-12-26 11:40 - 2013-12-26 12:17 - 00000000 ____D C:\Users\Asus\AppData\Local\Temporary Projects
2013-12-25 11:50 - 2013-12-25 11:50 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-25 11:48 - 2013-12-25 11:50 - 00000000 ____D C:\ProgramData\Oracle
2013-12-25 11:48 - 2013-12-25 11:47 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-25 11:48 - 2013-12-25 11:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-25 11:48 - 2013-12-25 11:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-25 11:48 - 2013-12-25 11:47 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-25 11:47 - 2013-12-25 11:47 - 00000000 ____D C:\Program Files\Java
2013-12-24 15:44 - 2013-12-24 15:44 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2013-12-24 15:42 - 2013-12-24 15:42 - 00003158 _____ C:\Windows\System32\Tasks\Game_Booster_AutoUpdate
2013-12-24 15:39 - 2013-12-25 12:09 - 00000000 ____D C:\Users\Asus\AppData\Local\Razer
2013-12-24 15:38 - 2013-12-29 11:08 - 00001349 _____ C:\Users\Asus\Desktop\IObit Uninstaller.lnk
2013-12-24 15:38 - 2013-12-24 15:38 - 00001243 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-12-24 15:37 - 2013-12-25 12:09 - 00000000 ____D C:\ProgramData\Razer
2013-12-24 15:37 - 2013-12-25 12:09 - 00000000 ____D C:\Program Files (x86)\Razer
2013-12-24 15:37 - 2013-12-25 11:36 - 00000000 ____D C:\Program Files (x86)\IObit
2013-12-24 15:37 - 2013-12-24 17:30 - 00000000 ____D C:\ProgramData\IObit
2013-12-24 15:37 - 2013-12-24 15:45 - 00000000 ____D C:\ProgramData\ProductData
2013-12-24 15:37 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-12-24 15:36 - 2013-12-24 15:38 - 00000000 ____D C:\Users\Asus\AppData\Roaming\IObit
2013-12-23 20:10 - 2013-12-25 11:49 - 00000000 ____D C:\Users\Asus\AppData\Roaming\.technic
2013-12-23 20:10 - 2013-12-24 13:28 - 02304092 _____ () C:\Users\Asus\Desktop\TechnicLauncher.exe
2013-12-23 18:14 - 2014-01-07 12:20 - 00000000 ____D C:\AdwCleaner
2013-12-23 18:11 - 2013-12-23 18:11 - 00000000 ____D C:\ProgramData\Martau
2013-12-23 18:11 - 2013-12-23 18:11 - 00000000 ____D C:\Program Files\Total Uninstall 6
2013-12-20 16:05 - 2013-12-20 16:05 - 00000000 ____D C:\Users\Asus\AppData\Roaming\GlarySoft
2013-12-20 16:01 - 2013-12-20 16:01 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2013-12-20 13:42 - 2013-12-20 16:01 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-20 13:41 - 2013-12-20 16:01 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-12-20 13:41 - 2013-12-20 16:01 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-12-20 13:41 - 2013-12-20 16:01 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-12-20 13:41 - 2013-12-20 16:01 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-12-20 13:41 - 2013-12-20 16:01 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-12-20 13:41 - 2013-12-20 13:41 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-12-20 13:41 - 2013-12-20 13:41 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-12-20 13:39 - 2013-12-20 16:00 - 00000000 ____D C:\Program Files (x86)\GreyGray
2013-12-20 13:37 - 2013-12-20 13:37 - 00003462 _____ C:\Windows\System32\Tasks\RunAsStdUser Task
2013-12-20 13:36 - 2013-12-20 13:36 - 00000000 ____D C:\Users\Asus\AppData\Local\Chromium
2013-12-20 11:15 - 2013-12-23 18:04 - 06570405 _____ C:\Users\Asus\Documents\huzuni.zip
2013-12-20 11:14 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-20 11:14 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-20 11:14 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-20 11:14 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-20 11:14 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-20 11:14 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-20 11:14 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-20 11:14 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-20 11:14 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-20 11:14 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-20 11:14 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-20 11:14 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-20 11:14 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-20 11:14 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-20 11:14 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-20 11:14 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-20 11:14 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-20 11:14 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-20 11:14 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-20 11:14 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-20 11:14 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-20 11:14 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-20 11:14 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-20 11:14 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-20 11:14 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-20 11:14 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-20 11:14 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-20 11:14 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-20 11:14 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-20 11:14 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-20 11:14 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-19 16:25 - 2013-12-19 16:25 - 00001442 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-12-18 16:17 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-18 16:17 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-18 16:16 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-18 16:16 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-18 16:16 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-18 16:15 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-18 16:15 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-18 16:15 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-18 16:14 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-18 15:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-18 15:51 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-18 15:51 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-18 15:51 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-18 15:51 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-18 15:44 - 2013-12-18 15:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-18 15:44 - 2013-12-18 15:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-18 15:43 - 2013-12-18 15:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-18 15:43 - 2013-12-18 15:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-18 15:43 - 2013-12-18 15:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-18 15:43 - 2013-12-18 15:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-18 15:43 - 2013-12-18 15:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-18 15:43 - 2013-12-18 15:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-18 15:42 - 2013-12-18 15:51 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-18 15:37 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-18 15:37 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-18 15:37 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-18 15:37 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-18 15:37 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-18 15:37 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-18 15:37 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-18 15:37 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-17 19:11 - 2013-12-17 19:11 - 00000000 ____D C:\Users\Asus\AppData\Local\Deployment
2013-12-17 12:17 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-17 12:17 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
==================== One Month Modified Files and Folders =======
2014-01-07 13:41 - 2014-01-07 13:41 - 00000000 ____D C:\Users\Asus\Downloads\FRST-OlderVersion
2014-01-07 13:41 - 2014-01-05 16:30 - 00010137 _____ C:\Users\Asus\Downloads\FRST.txt
2014-01-07 13:41 - 2014-01-05 16:29 - 01931762 _____ (Farbar) C:\Users\Asus\Downloads\FRST64.exe
2014-01-07 13:41 - 2014-01-05 16:29 - 00000000 ____D C:\FRST
2014-01-07 13:37 - 2012-09-14 19:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-07 12:45 - 2013-01-09 14:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-07 12:32 - 2014-01-07 12:32 - 00000000 ____D C:\Windows\ERUNT
2014-01-07 12:31 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-07 12:31 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-07 12:29 - 2014-01-07 12:29 - 01036305 _____ (Thisisu) C:\Users\Asus\Downloads\JRT.exe
2014-01-07 12:23 - 2013-09-27 20:23 - 00004841 _____ C:\Windows\setupact.log
2014-01-07 12:23 - 2013-08-15 17:43 - 00000095 _____ C:\Users\Asus\.accessibility.properties
2014-01-07 12:23 - 2012-09-14 19:31 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-07 12:23 - 2012-04-11 21:40 - 00000000 ____D C:\Users\Asus
2014-01-07 12:23 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-07 12:21 - 2012-03-25 12:43 - 01476644 _____ C:\Windows\WindowsUpdate.log
2014-01-07 12:20 - 2013-12-23 18:14 - 00000000 ____D C:\AdwCleaner
2014-01-07 12:14 - 2014-01-07 12:14 - 01233962 _____ C:\Users\Asus\Downloads\adwcleaner.exe
2014-01-07 11:52 - 2013-10-12 07:53 - 00000000 ____D C:\Users\Asus\AppData\Roaming\.minecraft
2014-01-07 11:45 - 2012-04-11 21:41 - 00045056 _____ C:\Windows\SysWOW64\acovcnt.exe
2014-01-07 04:00 - 2013-09-30 15:28 - 00518312 _____ C:\Windows\PFRO.log
2014-01-06 15:01 - 2014-01-06 15:01 - 00031455 _____ C:\ComboFix.txt
2014-01-06 15:01 - 2014-01-06 14:40 - 00000000 ____D C:\Qoobox
2014-01-06 15:01 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-06 14:59 - 2014-01-06 14:40 - 00000000 ____D C:\Windows\erdnt
2014-01-06 14:58 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-06 14:49 - 2014-01-06 14:49 - 00001149 _____ C:\Users\Asus\Desktop\ComboFix - Verknüpfung.lnk
2014-01-06 14:13 - 2014-01-06 14:13 - 05160001 ____R (Swearware) C:\Users\Asus\Downloads\ComboFix.exe
2014-01-06 12:44 - 2014-01-06 12:44 - 01423538 _____ C:\Users\Asus\Downloads\MCWar_1_6.zip
2014-01-05 19:56 - 2013-05-23 12:14 - 00000000 ____D C:\Users\Asus\AppData\Roaming\TS3Client
2014-01-05 19:43 - 2012-03-25 12:53 - 00002568 _____ C:\Windows\system32\AutoRunFilter.ini
2014-01-05 19:43 - 2012-03-25 12:53 - 00001487 _____ C:\Windows\system32\ServiceFilter.ini
2014-01-05 17:03 - 2014-01-05 17:03 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Avira
2014-01-05 17:01 - 2014-01-05 17:01 - 00002072 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-05 17:00 - 2014-01-05 17:00 - 00000000 ____D C:\ProgramData\Avira
2014-01-05 17:00 - 2014-01-05 17:00 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-05 16:58 - 2014-01-05 16:52 - 129598176 _____ C:\Users\Asus\Downloads\avira_free344_antivirus_de.exe
2014-01-05 14:30 - 2014-01-05 14:30 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Malwarebytes
2014-01-05 14:30 - 2014-01-05 14:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-05 14:29 - 2014-01-05 14:29 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-05 14:29 - 2014-01-05 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-05 14:22 - 2014-01-05 14:05 - 00000000 ____D C:\ProgramData\SecTaskMan
2014-01-05 14:05 - 2014-01-05 14:05 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2014-01-05 14:04 - 2014-01-05 14:04 - 02365840 _____ C:\Users\Asus\Downloads\SecurityTaskManager_Setup.exe
2014-01-01 17:06 - 2013-05-08 19:02 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-31 14:07 - 2012-09-04 17:42 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Skype
2013-12-30 20:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-30 18:19 - 2012-09-03 15:20 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-12-30 10:39 - 2013-12-30 10:39 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2013-12-30 10:00 - 2012-08-12 08:36 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Apple Computer
2013-12-30 10:00 - 2012-08-12 08:33 - 00000000 ____D C:\Users\Asus\AppData\Local\Apple
2013-12-30 09:59 - 2012-08-12 08:36 - 00000000 ____D C:\Users\Asus\AppData\Local\Apple Computer
2013-12-29 22:03 - 2012-09-03 15:17 - 00000000 ____D C:\Users\Asus\Desktop\Niclas
2013-12-29 20:33 - 2013-10-25 18:37 - 00000000 ____D C:\Users\Asus\Documents\Übergang
2013-12-29 12:44 - 2013-12-29 12:44 - 00001062 _____ C:\Users\Public\Desktop\iFunbox.lnk
2013-12-29 12:44 - 2013-12-29 12:44 - 00000000 ____D C:\Program Files (x86)\i-Funbox DevTeam
2013-12-29 12:05 - 2013-12-29 12:05 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-12-29 12:05 - 2013-12-29 12:04 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-12-29 12:05 - 2013-12-29 12:04 - 00000000 ____D C:\Program Files\iTunes
2013-12-29 12:05 - 2013-12-29 12:04 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-12-29 12:04 - 2013-12-29 12:04 - 00000000 ____D C:\Program Files\iPod
2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files\Bonjour
2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-12-29 12:03 - 2013-12-29 12:03 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-12-29 12:03 - 2012-08-12 08:33 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-29 12:01 - 2011-02-19 05:24 - 00777250 _____ C:\Windows\system32\perfh007.dat
2013-12-29 12:01 - 2011-02-19 05:24 - 00178788 _____ C:\Windows\system32\perfc007.dat
2013-12-29 12:01 - 2009-07-14 06:13 - 01838098 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-29 11:08 - 2013-12-24 15:38 - 00001349 _____ C:\Users\Asus\Desktop\IObit Uninstaller.lnk
2013-12-27 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-27 18:27 - 2013-12-27 18:27 - 00002930 _____ C:\Windows\System32\Tasks\{AA0E4F9C-AC9E-4973-BDB3-2280AE3233E9}
2013-12-27 18:26 - 2013-12-27 18:26 - 00002930 _____ C:\Windows\System32\Tasks\{69497809-6E2E-4BDF-96D7-E49028797045}
2013-12-26 23:07 - 2013-12-26 23:07 - 00002930 _____ C:\Windows\System32\Tasks\{44F7A213-AA65-42D8-937B-40E444D99A2D}
2013-12-26 22:21 - 2013-12-26 22:21 - 00002930 _____ C:\Windows\System32\Tasks\{C813917C-F462-49FB-B536-B303BCCB53C0}
2013-12-26 22:19 - 2013-09-19 16:33 - 00000000 ____D C:\Users\Asus\Documents\Minecraft
2013-12-26 12:17 - 2013-12-26 11:40 - 00000000 ____D C:\Users\Asus\AppData\Local\Temporary Projects
2013-12-26 12:17 - 2013-10-25 10:22 - 00000000 ____D C:\Users\Asus\Documents\Visual Studio 2010
2013-12-25 14:20 - 2012-10-05 13:50 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Dropbox
2013-12-25 12:09 - 2013-12-24 15:39 - 00000000 ____D C:\Users\Asus\AppData\Local\Razer
2013-12-25 12:09 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\Razer
2013-12-25 12:09 - 2013-12-24 15:37 - 00000000 ____D C:\Program Files (x86)\Razer
2013-12-25 11:50 - 2013-12-25 11:50 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-25 11:50 - 2013-12-25 11:48 - 00000000 ____D C:\ProgramData\Oracle
2013-12-25 11:50 - 2013-05-11 22:42 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-25 11:50 - 2013-05-11 22:42 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-25 11:50 - 2013-05-11 22:42 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-25 11:50 - 2013-05-11 22:42 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-25 11:49 - 2013-12-23 20:10 - 00000000 ____D C:\Users\Asus\AppData\Roaming\.technic
2013-12-25 11:47 - 2013-12-25 11:48 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-25 11:47 - 2013-12-25 11:48 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-25 11:47 - 2013-12-25 11:48 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-25 11:47 - 2013-12-25 11:48 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-25 11:47 - 2013-12-25 11:47 - 00000000 ____D C:\Program Files\Java
2013-12-25 11:43 - 2013-08-02 08:07 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-12-25 11:36 - 2013-12-24 15:37 - 00000000 ____D C:\Program Files (x86)\IObit
2013-12-24 17:30 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\IObit
2013-12-24 15:45 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\ProductData
2013-12-24 15:44 - 2013-12-24 15:44 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2013-12-24 15:42 - 2013-12-24 15:42 - 00003158 _____ C:\Windows\System32\Tasks\Game_Booster_AutoUpdate
2013-12-24 15:38 - 2013-12-24 15:38 - 00001243 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-12-24 15:38 - 2013-12-24 15:36 - 00000000 ____D C:\Users\Asus\AppData\Roaming\IObit
2013-12-24 15:37 - 2013-12-24 15:37 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2013-12-24 13:28 - 2013-12-23 20:10 - 02304092 _____ () C:\Users\Asus\Desktop\TechnicLauncher.exe
2013-12-23 20:05 - 2013-10-13 08:06 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Craften Terminal
2013-12-23 18:24 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-23 18:21 - 2013-01-01 11:35 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-12-23 18:11 - 2013-12-23 18:11 - 00000000 ____D C:\ProgramData\Martau
2013-12-23 18:11 - 2013-12-23 18:11 - 00000000 ____D C:\Program Files\Total Uninstall 6
2013-12-23 18:04 - 2013-12-20 11:15 - 06570405 _____ C:\Users\Asus\Documents\huzuni.zip
2013-12-20 16:08 - 2013-05-10 19:58 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-12-20 16:08 - 2013-05-10 19:58 - 00000000 ____D C:\Program Files\WinRAR
2013-12-20 16:05 - 2013-12-20 16:05 - 00000000 ____D C:\Users\Asus\AppData\Roaming\GlarySoft
2013-12-20 16:02 - 2012-04-11 21:41 - 00000000 ___RD C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-20 16:01 - 2013-12-20 16:01 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2013-12-20 16:01 - 2013-12-20 13:42 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-20 16:01 - 2013-12-20 13:41 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-12-20 16:01 - 2013-12-20 13:41 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-12-20 16:01 - 2013-12-20 13:41 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-12-20 16:01 - 2013-12-20 13:41 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-12-20 16:01 - 2013-12-20 13:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-12-20 16:01 - 2013-05-08 19:02 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-12-20 16:00 - 2013-12-20 13:39 - 00000000 ____D C:\Program Files (x86)\GreyGray
2013-12-20 15:52 - 2009-07-29 07:03 - 00000000 ____D C:\Windows\Panther
2013-12-20 15:51 - 2009-07-14 05:45 - 00275856 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-20 13:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-20 13:41 - 2013-12-20 13:41 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-12-20 13:41 - 2013-12-20 13:41 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-12-20 13:37 - 2013-12-20 13:37 - 00003462 _____ C:\Windows\System32\Tasks\RunAsStdUser Task
2013-12-20 13:36 - 2013-12-20 13:36 - 00000000 ____D C:\Users\Asus\AppData\Local\Chromium
2013-12-19 16:25 - 2013-12-19 16:25 - 00001442 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-12-19 16:25 - 2013-08-02 08:09 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-12-19 16:25 - 2012-10-04 13:31 - 00000000 ____D C:\Users\Asus\AppData\Roaming\DVDVideoSoft
2013-12-18 15:51 - 2013-12-18 15:42 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-18 15:45 - 2013-01-09 14:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-18 15:45 - 2012-08-11 07:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-18 15:45 - 2012-08-11 07:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-18 15:44 - 2013-12-18 15:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-18 15:44 - 2013-12-18 15:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-18 15:43 - 2013-12-18 15:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-18 15:43 - 2013-12-18 15:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-18 15:43 - 2013-12-18 15:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-18 15:43 - 2013-12-18 15:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-18 15:43 - 2013-12-18 15:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-18 15:43 - 2013-12-18 15:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-18 15:43 - 2013-12-18 15:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-18 15:43 - 2013-12-18 15:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-18 15:39 - 2013-07-13 11:02 - 00000000 ____D C:\Windows\system32\MRT
2013-12-18 15:36 - 2012-08-12 08:58 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-18 15:32 - 2012-09-14 19:31 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-18 15:32 - 2012-09-14 19:31 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-18 04:50 - 2013-11-29 20:37 - 00000000 ____D C:\Users\Asus\Documents\FIFA 14
2013-12-18 04:50 - 2013-11-29 17:25 - 00000000 ____D C:\ProgramData\Origin
2013-12-18 04:50 - 2013-09-29 10:16 - 00000000 ____D C:\Users\Familie
2013-12-18 04:50 - 2013-09-28 20:56 - 00000000 ____D C:\Windows\Minidump
2013-12-18 04:50 - 2012-08-11 07:19 - 00000000 ____D C:\Windows\system32\Macromed
2013-12-18 04:50 - 2012-04-11 21:57 - 00000000 ____D C:\Users\Gast
2013-12-18 04:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-17 19:11 - 2013-12-17 19:11 - 00000000 ____D C:\Users\Asus\AppData\Local\Deployment
2013-12-17 19:11 - 2013-07-08 11:34 - 00000000 ____D C:\Users\Asus\AppData\Local\Apps\2.0
2013-12-09 11:37 - 2014-01-05 17:00 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-09 11:37 - 2014-01-05 17:00 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-09 11:37 - 2014-01-05 17:00 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-09 11:37 - 2014-01-05 17:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
Files to move or delete:
====================
C:\Users\Asus\AppData\Roaming\Camdata.ini
C:\Users\Asus\AppData\Roaming\CamLayout.ini
C:\Users\Asus\AppData\Roaming\CamShapes.ini
Some content of TEMP:
====================
C:\Users\Asus\AppData\Local\Temp\avgnt.exe
C:\Users\Asus\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-30 04:57
==================== End Of Log ============================
Danke für kommende Hilfe Geändert von iNicclas (07.01.2014 um 13:42 Uhr) |
|
08.01.2014, 08:25
| #8 |
| /// the machine /// TB-Ausbilder | [Verdacht] Virus, Malware etc. - Laptop langsamESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.01.2014, 10:12
| #9 |
| | [Verdacht] Virus, Malware etc. - Laptop langsam Sorry, das solange keine Antwort kam. Eset Smartinstaller habe ich 3 mal ausprobiert, doch dieser hing sich immer bei ca. 8 einhalb Stunden auf. Bei SecurityCheck kam immer eine Fehlermeldung: "Datei konnte nicht gefunden worden." |
|
13.01.2014, 09:24
| #10 |
| /// the machine /// TB-Ausbilder | [Verdacht] Virus, Malware etc. - Laptop langsam Weglassen, Vollscan mit deinem AV Programm machen, dann das frische FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu [Verdacht] Virus, Malware etc. - Laptop langsam |
| anti-malware, automatisch, avast, bios, dateien, folge, internet, langsam, langsamer, laptop, malware, nervig, nichts, problem, programm, prozesse, selbstständig, software, startet, suche, taskmanager, trojaner, verdacht, virus, windows, windows 7 |
![[Verdacht] Virus, Malware etc. - Laptop langsam](iconimages/plagegeister-aller-art-deren-bekaempfung/verdacht-virus-malware-etc-laptop-langsam_ltr.gif)
Linear-Darstellung
