Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Win7 , 64 bit -- (Firefox) Nation-zoom Befall.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 09.01.2014, 13:32   #1
Boronian
 
Win7 , 64 bit --  (Firefox) Nation-zoom Befall. - Standard

Win7 , 64 bit -- (Firefox) Nation-zoom Befall.



Grüße

Ich hab mir im Netz die schädliche Seite Nation-zoom eingefangen und auch zu spät recherchiert, das SpyHunter nicht hilft, sondern eher das ganze noch verschlimmert. Natürlich prompt ausgeführt und ..naja :-/
Ob sich neben diesem Plagegeist noch andre Schadsoftware auf dem Rechner befindet WEISS ich nicht, vermute es aber wild.

MalwareBytes habe ich mir geholt, aber noch nicht aus finanziellen Gründen registrieren können (falls das von Relevanz ist aktuell). GData scheint mit diesen Problemen offenkundig überfordert und reagiert nicht, obwohl up to Date und registriert.
AVG Antivirus.. da weiss ich nicht, ob sich eine Vollregistrierung lohnt. Allgemein bin ich unschlüssig und unwissend, was für ein AntiVir Programm wirklich zuverlässig ist.

Andre Antiviren-log´s finde ich aktuell leider nicht. Die habe ich verpennt zu saven.

Nun weiss ich nicht, inwieweit mein komplettes System nun verseucht ist, ob ich mein Rechner neu installen muss oder ob ich mit euch zusammen das Problem beseitigen kann. Letzteres wäre mir superlieb.
Anbei die mir vorliegenden logfiles.

PS: ich habe im Vorfeld soweit ich Kenntniss hatte und Alarm geschlagen wurde, manuell Sachen entfernt, aber als es unübersichtlich wurde, die Finger von gelassen.
___________________

Additional Log
Code:
ATTFilter
 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-01-2014 01
Ran by Boronian at 2014-01-09 11:41:54
Running from C:\Users\Boronian\Downloads\Antiviren zeug
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: G Data TotalProtection 2014 (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data TotalProtection 2014 (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: AVG AntiVirus 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
AION Free-To-Play (x32 Version: 2.70.0000 - Gameforge)
AION Free-To-Play (x32 Version: 2.70.0000 - Gameforge) Hidden
AVG 2014 (Version: 14.0.3658 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4259 - AVG Technologies) Hidden
AVG 2014 (Version: 2014.0.4259 - AVG Technologies)
AVG PC TuneUp 2014 (de-DE) (x32 Version: 14.0.1001.229 - AVG) Hidden
AVG PC TuneUp 2014 (x32 Version: 14.0.1001.229 - AVG)
AVG PC TuneUp 2014 (x32 Version: 14.0.1001.229 - AVG) Hidden
Bejeweled 3 (x32 Version:  - PopCap Games)
Bejeweled Blitz (x32 Version:  - PopCap Games)
Blacklight: Retribution (x32 Version:  - )
Diablo III (x32 Version: 1.0.8.16603 - Blizzard Entertainment)
Download Updater (AOL LLC) (x32 Version:  - )
Dragon Age II (x32 Version: 1.04 - Electronic Arts, Inc.)
Dungeon Siege III (x32 Version:  - Obsidian Entertainment)
Dungeons & Dragons Online ®:  Eberron Unlimited ™ v01.17.01.801 (x32 Version: 01.17.01.8018 - Atari, Inc.)
EA Shared Game Component: Activation (x32 Version: 2.2.0 - Electronic Arts) Hidden
EA Shared Game Component: Activation (x32 Version: 2.2.0.62 - Electronic Arts)
ESO Survey Live version 1.3.0 (x32 Version: 1.3.0 - Immersyve, Inc.)
FINAL FANTASY XIV - A Realm Reborn (x32 Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
FoxyDeal (x32 Version: 1.1.0 - R&E Media GmbH)
G Data TotalProtection 2014 (x32 Version: 24.0.3.4 - G Data Software AG)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Glyph Deluxe (x32 Version: 1.0.0 - Zylom Games)
Glyph(TM) (x32 Version:  - )
Guild Wars 2 (x32 Version:  - )
HTC BMP USB Driver (x32 Version: 1.0.5375 - HTC)
ICQ 8.2 (build 6901) (HKCU Version: 8.2.6901.0 - ICQ)
ICQ7M (x32 Version: 7.8 - ICQ)
IPTInstaller (x32 Version: 4.0.8 - HTC)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation)
Legend of Grimrock (x32 Version:  - )
Logitech G15 Keyboard Software 1.04 (Version: 1.04.153 - Logitech)
Logitech Gaming Software (Version: 8.35.18 - Logitech Inc.) Hidden
Logitech Gaming Software 8.35 (Version: 8.35.18 - Logitech Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.109 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.109 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mars: War Logs (x32 Version:  - Spiders)
Mass Effect 2 (x32 Version: 1.2.1604.0 - Electronic Arts)
Mass Effect™ 3 (x32 Version: 1.05.0.0 - Electronic Arts)
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
Microsoft .NET Framework 1.1 (x32 Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.3.145.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.3.145.0 - Microsoft Corporation) Hidden
Mozilla Firefox 20.0.1 (x86 de) (x32 Version: 20.0.1 - Mozilla)
Mozilla Firefox 26.0 (x86 de) (HKCU Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 20.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
Neverwinter (x32 Version:  - Cryptic Studios)
Neverwinter Nude Mods v1.0.0 version 1.0.0 (x32 Version: 1.0.0 - )
NVIDIA 3D Vision Controller-Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation)
Oblivion (x32 Version: 1.2.0416 - Bethesda Softworks)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)
Orcs Must Die! 2 (x32 Version:  - )
Path of Exile (x32 Version: 0.10.1.22906 - Grinding Gear Games)
POSTAL 2 Complete (x32 Version:  - Running With Scissors)
PunkBuster Services (x32 Version: 0.992 - Even Balance, Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6526 - Realtek Semiconductor Corp.)
Runes of Magic (x32 Version: 4.0.8.2498 - Frogster Online Gaming GmbH)
SecondLifeViewer (remove only) (x32 Version:  - )
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Spotify (HKCU Version: 0.9.6.81.gd359a796 - Spotify AB)
Spybot - Search & Destroy (x32 Version: 2.1.19 - Safer-Networking Ltd.)
SpyHunter (Version: 4.16.5.4290 - Enigma Software Group USA, LLC)
Star Trek Online (x32 Version:  - Cryptic Studios)
Star Wars: The Old Republic (x32 Version: 1.00 - Electronic Arts, Inc.)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (x32 Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 8 (x32 Version: 8.0.17396 - TeamViewer)
The Elder Scrolls Online Beta (x32 Version: 0.3.4 - )
The Secret World (x32 Version:  - Funcom)
The Secret World (x32 Version: 1.0.0 - Funcom)
The Witcher (x32 Version: 1.00.0000 - CD Projekt Red)
The Witcher 2 (x32 Version: 1.00.0000 - CD Projekt Red)
Total Commander 64-bit (Remove or Repair) (Version: 8.01 - Ghisler Software GmbH)
Updater (x32 Version: 2.6.53 - Creative Island Media, LLC)
Venetica (x32 Version:  - dtp)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.0.8 (Version: 2.0.8 - VideoLAN)
World of Tanks v.0.7.4 (x32 Version:  - Wargaming.net)
Worms Armageddon (x32 Version:  - )
XCOM: Enemy Unknown (x32 Version:  - )
YTD YouTube Downloader & Converter 3.6 (x32 Version:  - GreenTree Applications SRL)

==================== Restore Points  =========================

08-01-2014 04:33:32 DirectX wurde installiert
08-01-2014 11:28:41 Installed SpyHunter
09-01-2014 09:57:34 Removed SpyHunter

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0D308582-3A1B-4E65-B8D7-0FAD9D145DD2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {2FCD3C80-ADAA-4799-84B4-364E1DFADD1F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {3B041025-A430-414F-A0A8-BA408E3F4CF0} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {46F78B5D-793D-4CC2-9A8C-F09534F02CE0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {54A57C28-CB9F-4D96-B1A9-D62C57DB58E5} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {5C5D4174-5E1F-4D13-80BC-EFCB722B7850} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION
Task: {5E5AE4B7-255C-41D5-8C0F-5DE0A0B26C46} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {63F9EA3B-11C3-484C-952E-09B14F288B31} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe [2013-09-04] (Microsoft)
Task: {66D9AF18-362B-4F64-8455-6A7E43ACDD8B} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B6F50192-5FAC-4B1A-AEB5-A67FE24B9BE1} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {CD2AF45E-85A3-4D5E-93DD-5E56FAADA110} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe [2013-10-18] (Enigma Software Group USA, LLC.)
Task: {D7319112-4885-449D-AC15-421E1A7CD197} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe [2013-10-30] (AVG)
Task: {F1E19543-6B19-4B6E-892C-0FD66615FA03} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {F3154458-A573-458B-B69E-58F3C2494B16} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {FBCA6C82-A0EB-4A25-99A7-C65E5A23A5E9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-07-28 16:02 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-07-28 16:02 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-07-28 16:02 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-07-28 16:02 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-07-28 16:02 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-01-08 05:14 - 2013-12-12 23:19 - 00142848 _____ () E:\Steam\libavresample-1.dll
2014-01-08 05:14 - 2013-11-05 02:12 - 00890592 _____ () E:\Steam\libavutil-52.dll
2013-03-12 17:10 - 2013-12-12 23:04 - 00716800 _____ () E:\Steam\SDL2.dll
2012-05-06 03:33 - 2014-01-07 22:00 - 01138088 _____ () E:\Steam\bin\chromehtml.DLL
2012-05-06 03:33 - 2013-12-12 23:04 - 20625832 _____ () E:\Steam\bin\libcef.dll
2012-05-06 03:33 - 2013-06-15 00:49 - 01100800 _____ () E:\Steam\bin\avcodec-53.dll
2012-05-06 03:33 - 2013-06-15 00:49 - 00124416 _____ () E:\Steam\bin\avutil-51.dll
2012-05-06 03:33 - 2013-06-15 00:49 - 00192000 _____ () E:\Steam\bin\avformat-53.dll
2013-12-12 19:00 - 2013-12-12 19:00 - 03559024 _____ () D:\Programe\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2014 02:11:38 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.13238.730, Zeitstempel: 0x521b2984
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00038e19
ID des fehlerhaften Prozesses: 0x84c
Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0
Pfad der fehlerhaften Anwendung: AVKProxy.exe1
Pfad des fehlerhaften Moduls: AVKProxy.exe2
Berichtskennung: AVKProxy.exe3

Error: (01/08/2014 11:00:46 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SLVoice.exe, Version: 4.5.9.17865, Zeitstempel: 0x505b00f4
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000264
Fehleroffset: 0x000a2525
ID des fehlerhaften Prozesses: 0xce4
Startzeit der fehlerhaften Anwendung: 0xSLVoice.exe0
Pfad der fehlerhaften Anwendung: SLVoice.exe1
Pfad des fehlerhaften Moduls: SLVoice.exe2
Berichtskennung: SLVoice.exe3

Error: (01/08/2014 11:25:30 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"2" in Zeile  Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762".
Definition: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (01/07/2014 10:05:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/07/2014 10:05:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/06/2014 05:46:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.13238.730, Zeitstempel: 0x521b2984
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x7f0
Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0
Pfad der fehlerhaften Anwendung: AVKProxy.exe1
Pfad des fehlerhaften Moduls: AVKProxy.exe2
Berichtskennung: AVKProxy.exe3

Error: (01/06/2014 03:19:01 PM) (Source: NVIDIA OpenGL Driver) (User: )
Description: The NVIDIA OpenGL driver lost connection with the display
driver due to exceeding the Windows Time-Out limit and is unable to continue.
The application must close.


Error code: 7
Visit hxxp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=3007 for more information.

Error: (01/06/2014 03:18:52 PM) (Source: NVIDIA OpenGL Driver) (User: )
Description: The NVIDIA OpenGL driver lost connection with the display
driver due to exceeding the Windows Time-Out limit and is unable to continue.
The application must close.


Error code: 7
Visit hxxp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=3007 for more information.

Error: (01/05/2014 08:30:19 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"2" in Zeile  Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762".
Definition: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (01/05/2014 08:03:17 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SLVoice.exe, Version: 4.5.9.17865, Zeitstempel: 0x505b00f4
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000264
Fehleroffset: 0x000a2525
ID des fehlerhaften Prozesses: 0x2088
Startzeit der fehlerhaften Anwendung: 0xSLVoice.exe0
Pfad der fehlerhaften Anwendung: SLVoice.exe1
Pfad des fehlerhaften Moduls: SLVoice.exe2
Berichtskennung: SLVoice.exe3


System errors:
=============
Error: (01/09/2014 10:33:03 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/09/2014 10:33:03 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (01/09/2014 10:32:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "atksgt" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (01/09/2014 10:32:15 AM) (Source: Application Popup) (User: )
Description: Treiber atksgt.sys konnte nicht geladen werden.

Error: (01/09/2014 04:54:10 AM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (01/09/2014 02:12:42 AM) (Source: Service Control Manager) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "G Data AntiVirus Proxy" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (01/09/2014 02:11:42 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "G Data AntiVirus Proxy" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/08/2014 05:15:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/08/2014 05:15:08 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (01/07/2014 09:58:07 PM) (Source: DCOM) (User: )
Description: {7D1933CB-86F6-4A98-8628-01BE94C9A575}


Microsoft Office Sessions:
=========================
Error: (01/09/2014 02:11:38 AM) (Source: Application Error)(User: )
Description: AVKProxy.exe1.5.13238.730521b2984ntdll.dll6.1.7601.18247521ea8e7c000000500038e1984c01cf0beae121c37bC:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exeC:\Windows\SysWOW64\ntdll.dllfcf88901-78ca-11e3-af6d-001fd02dccd8

Error: (01/08/2014 11:00:46 PM) (Source: Application Error)(User: )
Description: SLVoice.exe4.5.9.17865505b00f4ntdll.dll6.1.7601.18247521ea8e7c0000264000a2525ce401cf0ca5b1e806f3E:\Second Life\SLVoice.exeC:\Windows\SysWOW64\ntdll.dll52d788cb-78b0-11e3-af6d-001fd02dccd8

Error: (01/08/2014 11:25:30 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"E:\Aion F2P\bin64\SendLogClient.exeE:\Aion F2P\bin64\Microsoft.VC80.MFC.MANIFEST11

Error: (01/07/2014 10:05:42 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Downloads\SoftonicDownloader_fuer_bejeweled-blitz.exe

Error: (01/07/2014 10:05:42 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Downloads\SoftonicDownloader_fuer_aol-instant-messenger.exe

Error: (01/06/2014 05:46:17 PM) (Source: Application Error)(User: )
Description: AVKProxy.exe1.5.13238.730521b2984ntdll.dll6.1.7601.18247521ea8e7c0000374000ce7537f001cf0ae1d36b0b21C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exeC:\Windows\SysWOW64\ntdll.dll0f66112f-76f2-11e3-94be-001fd02dccd8

Error: (01/06/2014 03:19:01 PM) (Source: NVIDIA OpenGL Driver)(User: )
Description: The NVIDIA OpenGL driver lost connection with the display
driver due to exceeding the Windows Time-Out limit and is unable to continue.
The application must close.


Error code: 7
Visit hxxp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=3007 for more information.

Error: (01/06/2014 03:18:52 PM) (Source: NVIDIA OpenGL Driver)(User: )
Description: The NVIDIA OpenGL driver lost connection with the display
driver due to exceeding the Windows Time-Out limit and is unable to continue.
The application must close.


Error code: 7
Visit hxxp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=3007 for more information.

Error: (01/05/2014 08:30:19 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"E:\Aion F2P\bin64\SendLogClient.exeE:\Aion F2P\bin64\Microsoft.VC80.MFC.MANIFEST11

Error: (01/05/2014 08:03:17 AM) (Source: Application Error)(User: )
Description: SLVoice.exe4.5.9.17865505b00f4ntdll.dll6.1.7601.18247521ea8e7c0000264000a2525208801cf09d089703635E:\Second Life\SecondLifeViewer\SLVoice.exeC:\Windows\SysWOW64\ntdll.dll738ed72f-75d7-11e3-949a-001fd02dccd8


==================== Memory info =========================== 

Percentage of memory in use: 52%
Total physical RAM: 4094.49 MB
Available physical RAM: 1924.8 MB
Total Pagefile: 8187.16 MB
Available Pagefile: 5160.41 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.66 GB) (Free:21.49 GB) NTFS
Drive d: () (Fixed) (Total:322.95 GB) (Free:272.53 GB) NTFS
Drive e: () (Fixed) (Total:976.56 GB) (Free:246.84 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: DC2EBA0D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=323 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=977 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
FRST LOG

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01
Ran by Boronian (administrator) on BORONIAN-PC on 09-01-2014 11:41:05
Running from C:\Users\Boronian\Downloads\Antiviren zeug
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) D:\Programe\GData\AVK\AVKWCtlx64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) D:\Programe\GData\AVK\AVKService.exe
(G Data Software AG) D:\Programe\GData\AVKBackup\AVKBackupService.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(G Data Software) D:\Programe\GData\TSNxG\TSNxGService.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2.exe
(LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2-ui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(G Data Software AG) D:\Programe\GData\Firewall\GDFwSvcx64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Spotify Ltd) C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AvkBap64.exe
(G Data Software AG) D:\Programe\GData\Firewall\GDFirewallTray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(G Data Software AG) D:\Programe\GData\AVKTray\AVKTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Valve Corporation) E:\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Mozilla Corporation) D:\Programe\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [790552 2007-04-26] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe [1793048 2007-04-26] (Logitech Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [GDFirewallTray] - D:\Programe\GData\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - D:\Programe\GData\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - E:\Hamachi Server Client\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [ICQ] - C:\Users\Boronian\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-02] (ICQ)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-26] (Spotify Ltd)
MountPoints2: {1f795429-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {1f7954c2-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {e34c18a5-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {e34c22ea-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
Startup: C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lollipop.lnk
ShortcutTarget: lollipop.lnk -> C:\Users\Boronian\AppData\Local\Lollipop\Lollipop.exe (No File)

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA10BD39CBBD7CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {05D862FD-4E4A-47EF-A6CA-8342AA21DB4D} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{CA2430EE-77B2-48D8-B22D-1A6C66CE6AA5}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

FireFox:
========
FF ProfilePath: C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Extension: Adblock Plus - C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; D:\Programe\GData\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; D:\Programe\GData\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG)
R2 GDBackupSvc; D:\Programe\GData\AVKBackup\AVKBackupService.exe [1947768 2013-08-21] (G Data Software AG)
R3 GDFwSvc; D:\Programe\GData\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
S3 GDTunerSvc; D:\Programe\GData\AVKTuner\AVKTunerService.exe [1711568 2013-02-25] (G Data Software AG)
R2 Hamachi2Svc; E:\Hamachi Server Client\hamachi-2.exe [2210640 2013-11-29] (LogMeIn Inc.)
R2 MBAMScheduler; D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-07-09] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
R2 TSNxGService; D:\Programe\GData\TSNxG\TSNxGService.exe [257512 2013-02-25] (G Data Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099000 2013-10-30] (AVG)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG)

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2013-12-01] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-30] (G Data Software AG)
R3 gddcd; C:\Windows\system32\drivers\gddcd64.sys [79704 2013-10-23] (G Data Software AG)
R1 gddcv; C:\Windows\system32\drivers\gddcv64.sys [59736 2013-10-23] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-30] (G Data Software AG)
S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon64.sys [31608 2012-01-20] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2013-09-30] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-10-23] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-01-03] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-30] (G Data Software AG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2013-12-01] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [98760 2013-10-23] (G Data Software)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-09 11:40 - 2014-01-09 11:40 - 00000000 ____D C:\FRST
2014-01-09 11:38 - 2014-01-09 11:41 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug
2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log
2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable
2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe
2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten
2014-01-08 12:29 - 2014-01-08 12:29 - 00003344 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2014-01-08 12:29 - 2014-01-08 12:29 - 00002260 _____ C:\Users\Boronian\Desktop\SpyHunter.lnk
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\sh4ldr
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat
2014-01-08 12:29 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2014-01-08 12:28 - 2014-01-08 12:29 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live
2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk
2014-01-07 22:15 - 2014-01-08 11:56 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation                                    ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 19:01 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-07 19:01 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-07 19:01 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-07 19:01 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-07 19:01 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA
2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db
2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0
2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18
2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\ProgramData\RHelpers
2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-03 19:20 - 2014-01-05 03:16 - 00000000 ____D C:\Users\Boronian\AppData\Local\Mobogenie
2014-01-03 19:20 - 2014-01-05 03:15 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext
2014-01-03 19:20 - 2014-01-04 19:09 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt
2014-01-03 19:20 - 2014-01-04 19:08 - 00000000 ____D C:\ProgramData\Updater
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\Documents\Mobogenie
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android
2014-01-03 19:18 - 2014-01-07 20:49 - 00000000 ____D C:\ProgramData\WPM
2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe
2014-01-03 13:57 - 2014-01-05 13:25 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm
2014-01-03 13:57 - 2014-01-03 14:00 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm
2014-01-03 13:47 - 2014-01-03 13:48 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe
2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk
2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-03 10:58 - 2014-01-07 20:40 - 00000000 ____D C:\Users\Boronian\AppData\Local\SwvUpdater
2014-01-03 10:58 - 2014-01-03 10:58 - 00003086 _____ C:\Windows\System32\Tasks\GoforFilesUpdate
2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\GoforFiles
2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal
2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-01-02 10:13 - 2014-01-09 10:32 - 00002343 _____ C:\Windows\setupact.log
2014-01-02 10:13 - 2014-01-07 20:49 - 00037784 _____ C:\Windows\PFRO.log
2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log
2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-01-02 04:15 - 2013-10-30 11:27 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-01-02 04:15 - 2013-10-30 11:27 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-01-02 04:14 - 2013-10-30 11:27 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG
2014-01-02 04:13 - 2013-10-30 11:27 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-01-02 04:13 - 2013-10-30 11:27 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-01-02 04:09 - 2014-01-02 04:39 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-02 04:09 - 2014-01-02 04:16 - 00000000 ____D C:\ProgramData\AVG
2014-01-02 04:05 - 2014-01-02 04:06 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe
2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM
2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe
2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014
2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-02 03:49 - 2014-01-02 03:50 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software
2014-01-02 03:48 - 2014-01-02 04:12 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-02 03:46 - 2014-01-09 10:37 - 00000000 ____D C:\ProgramData\MFAData
2014-01-02 03:46 - 2014-01-02 04:05 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014
2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe
2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData
2014-01-01 13:46 - 2014-01-01 13:47 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe
2014-01-01 13:37 - 2014-01-09 02:05 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife
2014-01-01 13:37 - 2014-01-01 13:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife
2013-12-27 04:04 - 2013-12-27 04:02 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt
2013-12-26 11:16 - 2014-01-01 12:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify
2013-12-26 11:16 - 2013-12-30 21:38 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify
2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk
2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-23 17:21 - 2013-12-23 18:31 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-23 01:43 - 2013-11-23 20:26 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433193.dll
2013-12-23 01:43 - 2013-11-23 20:26 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433193.dll
2013-12-22 08:00 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2
2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2
2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk
2013-12-21 08:44 - 2013-12-21 08:45 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt
2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google
2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-17 17:20 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-17 17:20 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle
2013-12-11 20:43 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 20:43 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 20:43 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 20:43 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 20:43 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 20:43 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 20:43 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 20:43 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 20:43 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 20:43 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 20:43 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 20:43 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 20:43 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 20:43 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 20:43 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 20:43 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 20:43 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 20:43 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 20:43 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 20:43 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 20:43 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 20:43 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 20:43 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 20:43 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 20:43 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 20:43 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 20:43 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 20:42 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 20:42 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 20:42 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 20:42 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 02:10 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 02:10 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 02:10 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 02:10 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 02:09 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-11 02:04 - 2013-12-11 02:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-11 02:04 - 2013-12-11 02:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-11 02:04 - 2013-12-11 02:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-11 02:04 - 2013-12-11 02:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-11 02:04 - 2013-12-11 02:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-11 01:14 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 01:14 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 01:14 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 01:14 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 01:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 01:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 01:14 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 01:14 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 01:14 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 01:14 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 01:14 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 01:14 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 01:14 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 01:14 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 01:14 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 01:14 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 01:14 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 01:14 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 01:14 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-09 11:41 - 2014-01-09 11:38 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug
2014-01-09 11:40 - 2014-01-09 11:40 - 00000000 ____D C:\FRST
2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log
2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable
2014-01-09 11:36 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian
2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe
2014-01-09 11:33 - 2012-01-20 23:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Skype
2014-01-09 11:09 - 2012-11-07 17:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 10:58 - 2012-09-02 12:57 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-09 10:42 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-09 10:42 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-09 10:38 - 2012-01-20 18:55 - 02002934 _____ C:\Windows\WindowsUpdate.log
2014-01-09 10:37 - 2014-01-02 03:46 - 00000000 ____D C:\ProgramData\MFAData
2014-01-09 10:35 - 2013-06-05 23:33 - 00000000 ____D C:\Users\Boronian\AppData\Local\LogMeIn Hamachi
2014-01-09 10:34 - 2012-01-20 18:56 - 00001421 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-09 10:32 - 2014-01-02 10:13 - 00002343 _____ C:\Windows\setupact.log
2014-01-09 10:32 - 2012-01-20 23:37 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-09 10:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-09 02:05 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife
2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google
2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-08 19:33 - 2012-10-21 12:59 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F8FB1A55-F516-4C27-87C4-A40A3EFF1E4F}
2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten
2014-01-08 12:29 - 2014-01-08 12:29 - 00003344 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2014-01-08 12:29 - 2014-01-08 12:29 - 00002260 _____ C:\Users\Boronian\Desktop\SpyHunter.lnk
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\sh4ldr
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat
2014-01-08 12:29 - 2014-01-08 12:28 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-08 11:56 - 2014-01-07 22:15 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk
2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live
2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk
2014-01-07 21:53 - 2013-11-08 21:37 - 00000759 _____ C:\Users\Boronian\Desktop\abo´s.txt
2014-01-07 20:49 - 2014-01-03 19:18 - 00000000 ____D C:\ProgramData\WPM
2014-01-07 20:49 - 2014-01-02 10:13 - 00037784 _____ C:\Windows\PFRO.log
2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\RHelpers
2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-07 20:40 - 2014-01-03 10:58 - 00000000 ____D C:\Users\Boronian\AppData\Local\SwvUpdater
2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation                                    ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 19:08 - 2012-01-20 23:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA
2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db
2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0
2014-01-05 13:25 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm
2014-01-05 03:16 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\Mobogenie
2014-01-05 03:15 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext
2014-01-05 01:03 - 2013-06-07 18:26 - 00000000 __SHD C:\#GDATA.Trash.Store#
2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18
2014-01-04 19:09 - 2014-01-03 19:20 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt
2014-01-04 19:08 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\Updater
2014-01-04 18:18 - 2013-07-15 18:27 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\Documents\Mobogenie
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android
2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe
2014-01-03 14:00 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm
2014-01-03 13:48 - 2014-01-03 13:47 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe
2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk
2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-03 10:59 - 2012-01-20 18:56 - 00000000 ___RD C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 10:58 - 2014-01-03 10:58 - 00003086 _____ C:\Windows\System32\Tasks\GoforFilesUpdate
2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\GoforFiles
2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal
2014-01-03 10:57 - 2012-03-24 14:46 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2014-01-03 10:19 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian\AppData\Local\VirtualStore
2014-01-03 10:08 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log
2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-01-02 04:39 - 2014-01-02 04:09 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-02 04:39 - 2012-07-26 22:26 - 00000000 ____D C:\ProgramData\DriverGenius
2014-01-02 04:39 - 2012-01-20 23:27 - 00000000 ____D C:\Users\Boronian\AppData\Local\Downloaded Installations
2014-01-02 04:32 - 2012-01-20 18:47 - 00000000 ____D C:\Windows\Panther
2014-01-02 04:16 - 2014-01-02 04:09 - 00000000 ____D C:\ProgramData\AVG
2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG
2014-01-02 04:12 - 2014-01-02 03:48 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-02 04:06 - 2014-01-02 04:05 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe
2014-01-02 04:05 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014
2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM
2014-01-02 03:52 - 2012-01-20 23:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQ
2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe
2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014
2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-02 03:50 - 2014-01-02 03:49 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software
2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe
2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData
2014-01-01 13:54 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife
2014-01-01 13:47 - 2014-01-01 13:46 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe
2014-01-01 12:43 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify
2013-12-30 21:38 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify
2013-12-27 04:02 - 2013-12-27 04:04 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt
2013-12-26 11:52 - 2012-04-29 09:39 - 00000000 ____D C:\Program Files (x86)\Gameforge
2013-12-26 11:48 - 2009-07-14 18:58 - 00709908 _____ C:\Windows\system32\perfh007.dat
2013-12-26 11:48 - 2009-07-14 18:58 - 00154344 _____ C:\Windows\system32\perfc007.dat
2013-12-26 11:48 - 2009-07-14 06:13 - 01649524 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk
2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-24 00:04 - 2012-04-22 05:06 - 01622868 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-23 19:18 - 2012-01-20 19:22 - 00065160 _____ C:\Users\Boronian\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-23 18:34 - 2009-07-14 05:45 - 00299664 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-23 18:31 - 2013-12-23 17:21 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-22 13:55 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2
2013-12-22 13:45 - 2012-11-29 20:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-22 13:45 - 2012-01-20 23:43 - 00000000 ____D C:\ProgramData\Skype
2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2
2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk
2013-12-22 07:33 - 2012-01-20 23:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-22 07:28 - 2013-12-02 01:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher
2013-12-21 08:59 - 2012-06-22 11:31 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\U3
2013-12-21 08:45 - 2013-12-21 08:44 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt
2013-12-19 21:33 - 2014-01-07 19:01 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-12-19 21:33 - 2014-01-07 19:01 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-12-19 21:33 - 2013-05-24 03:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-12-19 21:33 - 2013-05-24 03:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-12-19 21:33 - 2012-01-20 23:36 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-12-19 21:33 - 2012-01-20 23:36 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-12-19 19:53 - 2012-01-20 23:37 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-12-19 19:53 - 2012-01-20 23:37 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-12-19 18:34 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-12-19 06:01 - 2012-10-19 14:59 - 03539040 _____ C:\Windows\system32\nvcoproc.bin
2013-12-14 17:58 - 2013-08-15 01:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 17:56 - 2012-01-21 00:44 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-14 17:49 - 2012-04-24 18:17 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TS3Client
2013-12-14 01:15 - 2013-11-19 23:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA Corporation
2013-12-14 01:15 - 2013-05-24 03:39 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA
2013-12-14 01:15 - 2012-01-20 23:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-14 01:14 - 2012-01-20 23:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-12 21:35 - 2012-02-24 19:37 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle
2013-12-11 19:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-11 02:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-11 02:09 - 2012-11-07 17:52 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 02:09 - 2012-04-02 16:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 02:09 - 2012-01-20 23:25 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 02:04 - 2013-12-11 02:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-11 02:04 - 2013-12-11 02:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-11 02:04 - 2013-12-11 02:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-11 02:04 - 2013-12-11 02:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-11 02:04 - 2013-12-11 02:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-10 03:13 - 2013-10-30 00:41 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-12-10 03:13 - 2013-10-30 00:41 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

Some content of TEMP:
====================
C:\Users\Boronian\AppData\Local\Temp\htmlayout.dll
C:\Users\Boronian\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Boronian\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Boronian\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Boronian\AppData\Local\Temp\nvStInst.exe
C:\Users\Boronian\AppData\Local\Temp\SHSetup.exe
C:\Users\Boronian\AppData\Local\Temp\toolbar3011458.exe
C:\Users\Boronian\AppData\Local\Temp\toolbar3061488.exe
C:\Users\Boronian\AppData\Local\Temp\uninstall21498232.exe
C:\Users\Boronian\AppData\Local\Temp\uninstall21498248.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-02 11:39

==================== End Of Log ============================
         
--- --- ---


GMER LOG
GMER Logfile:
Code:
ATTFilter
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2014-01-09 12:53:35
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-3 ST31500341AS rev.CC1H 1397,26GB
Running: g8q180rx.exe; Driver: C:\Users\Boronian\AppData\Local\Temp\axlcikog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                             fffff800031f9000 45 bytes [00, 00, 10, 02, 48, 6F, 6F, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 574                                                             fffff800031f902e 8 bytes [5C, 00, 4D, 00, 41, 00, 43, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                        0000000071611a22 2 bytes [61, 71]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                        0000000071611ad0 2 bytes [61, 71]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                        0000000071611b08 2 bytes [61, 71]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                        0000000071611bba 2 bytes [61, 71]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                        0000000071611bda 2 bytes [61, 71]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                 0000000075881465 2 bytes [88, 75]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                00000000758814bb 2 bytes [88, 75]
.text     ...                                                                                                                            * 2
.text     E:\Hamachi Server Client\hamachi-2-ui.exe[4764] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 69                        0000000075881465 2 bytes [88, 75]
.text     E:\Hamachi Server Client\hamachi-2-ui.exe[4764] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 155                       00000000758814bb 2 bytes [88, 75]
.text     ...                                                                                                                            * 2
.text     C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[5012] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69   0000000075881465 2 bytes [88, 75]
.text     C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[5012] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155  00000000758814bb 2 bytes [88, 75]
.text     ...                                                                                                                            * 2
.text     D:\Programe\GData\Firewall\GDFirewallTray.exe[6336] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                    0000000075881465 2 bytes [88, 75]
.text     D:\Programe\GData\Firewall\GDFirewallTray.exe[6336] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                   00000000758814bb 2 bytes [88, 75]
.text     ...                                                                                                                            * 2
.text     C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[6568] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69    0000000075881465 2 bytes [88, 75]
.text     C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[6568] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155   00000000758814bb 2 bytes [88, 75]
.text     ...                                                                                                                            * 2
.text     E:\Steam\Steam.exe[2632] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate                                                         0000000074d7549c 5 bytes JMP 0000000100130800
.text     C:\Program Files (x86)\Common Files\Steam\SteamService.exe[2136] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate                 0000000074d7549c 5 bytes JMP 0000000100100800
.text     C:\Program Files (x86)\Common Files\Steam\SteamService.exe[2136] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69       0000000075881465 2 bytes [88, 75]
.text     C:\Program Files (x86)\Common Files\Steam\SteamService.exe[2136] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155      00000000758814bb 2 bytes [88, 75]
.text     ...                                                                                                                            * 2

---- Threads - GMER 2.1 ----

Thread    C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2832:3004]                                                     000007fef37c4094
Thread    C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2832:3016]                                                     000007fef37c4094
Thread    C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2832:3020]                                                     000007fef2a7b710

---- EOF - GMER 2.1 ----
         
--- --- ---


MalwarBytes LOG

Code:
ATTFilter
 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.07.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Boronian :: BORONIAN-PC [Administrator]

Schutz: Aktiviert

08.01.2014 11:49:03
mbam-log-2014-01-08 (11-49-03).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 209599
Laufzeit: 5 Minute(n), 26 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Ich hoffe, man kann mir weiterhelfen.
Grüße

Boronian

Alt 09.01.2014, 14:22   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Win7 , 64 bit --  (Firefox) Nation-zoom Befall. - Standard

Win7 , 64 bit -- (Firefox) Nation-zoom Befall.



hi,

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.



Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.
  • Starte die sc-cleaner.exe mit einem Doppelclick.
  • Bestätige die Meldung Shortcut Cleaner Finished am Ende des Suchlaufs mit Ok.
  • Eine Logdatei wird sich öffnen (sc-cleaner.txt).
  • Poste den Inhalt mit deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________

__________________

Alt 09.01.2014, 16:20   #3
Boronian
 
Win7 , 64 bit --  (Firefox) Nation-zoom Befall. - Standard

Win7 , 64 bit -- (Firefox) Nation-zoom Befall.



soo erst mal danke für das reagieren.

Anbei die erwünschten logs
-------------------------

ADWcleaner log

AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v3.016 - Bericht erstellt am 09/01/2014 um 15:33:13
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Boronian - BORONIAN-PC
# Gestartet von : E:\Downloads\DL zeug\Downloadkram von  Mozilla\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar
Ordner Gelöscht : C:\ProgramData\Trymedia
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Program Files (x86)\ICQ6Toolbar
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Software Update Utility
Ordner Gelöscht : C:\Users\Boronian\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Boronian\AppData\Local\SwvUpdater
Ordner Gelöscht : C:\Users\Boronian\AppData\Roaming\goforfiles
Ordner Gelöscht : C:\Users\Boronian\Documents\Mobogenie
Datei Gelöscht : C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lollipop.lnk
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt
Datei Gelöscht : C:\Windows\System32\Tasks\GoforFilesUpdate
Datei Gelöscht : C:\Windows\System32\Tasks\SpyHunter4Startup

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Classes\Applications\lollipop.exe
Schlüssel Gelöscht : HKCU\Software\Classes\iLivid.torrent
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_aol-instant-messenger_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_aol-instant-messenger_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bejeweled-blitz_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bejeweled-blitz_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\Ciuvo
Schlüssel Gelöscht : HKCU\Software\GoforFiles
Schlüssel Gelöscht : HKCU\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\lollipop
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DynConIE
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyrixeeker
Schlüssel Gelöscht : HKLM\Software\GoforFiles
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\Trymedia Systems
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v20.0.1 (de)

[ Datei : C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341\prefs.js ]


*************************

AdwCleaner[R0].txt - [7011 octets] - [09/01/2014 15:29:26]
AdwCleaner[S0].txt - [5901 octets] - [09/01/2014 15:33:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5961 octets] ##########
         
--- --- ---


JRT Log

Code:
ATTFilter
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Ultimate x64
Ran by Boronian on 09.01.2014 at 15:41:57,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\foxydeal



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.01.2014 at 15:58:14,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Shortcut cleaner LOG

Code:
ATTFilter
 Shortcut Cleaner 1.2.6 by Lawrence Abrams (Grinler)
hxxp://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
 hxxp://www.bleepingcomputer.com/download/shortcut-cleaner/

Windows Version: Windows 7 Ultimate Service Pack 1
Program started at: 01/09/2014 04:00:12 PM.

Scanning for registry hijacks:

 * No issues found in the Registry.

Searching for Hijacked Shortcuts:

Searching C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\

Searching C:\ProgramData\Microsoft\Windows\Start Menu\

Searching C:\Users\Boronian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\

Searching C:\Users\Public\Desktop\

Searching C:\Users\Boronian\Desktop


0 bad shortcuts found.

Program finished at: 01/09/2014 04:00:15 PM
Execution time: 0 hours(s), 0 minute(s), and 2 seconds(s)
         
aktueller FRST log


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01
Ran by Boronian (administrator) on BORONIAN-PC on 09-01-2014 16:03:46
Running from E:\Downloads\DL zeug\Downloadkram von  Mozilla\Antiviren zeug
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) D:\Programe\GData\AVK\AVKWCtlx64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) D:\Programe\GData\AVK\AVKService.exe
(G Data Software AG) D:\Programe\GData\AVKBackup\AVKBackupService.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(G Data Software) D:\Programe\GData\TSNxG\TSNxGService.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2.exe
(LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2-ui.exe
(LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe
(G Data Software AG) D:\Programe\GData\Firewall\GDFwSvcx64.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) E:\Steam\Steam.exe
(ICQ) C:\Users\Boronian\AppData\Roaming\ICQM\icq.exe
(Spotify Ltd) C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files (x86)\ESO Survey Live\ESOSurveyLive.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(G Data Software AG) D:\Programe\GData\Firewall\GDFirewallTray.exe
(G Data Software AG) D:\Programe\GData\AVKTray\AVKTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AvkBap64.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Mozilla Corporation) D:\Programe\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [790552 2007-04-26] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe [1793048 2007-04-26] (Logitech Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [GDFirewallTray] - D:\Programe\GData\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - D:\Programe\GData\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - E:\Hamachi Server Client\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [ICQ] - C:\Users\Boronian\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-02] (ICQ)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-26] (Spotify Ltd)
MountPoints2: {1f795429-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {1f7954c2-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {e34c18a5-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {e34c22ea-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA10BD39CBBD7CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {05D862FD-4E4A-47EF-A6CA-8342AA21DB4D} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{CA2430EE-77B2-48D8-B22D-1A6C66CE6AA5}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

FireFox:
========
FF ProfilePath: C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Extension: Adblock Plus - C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; D:\Programe\GData\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; D:\Programe\GData\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG)
R2 GDBackupSvc; D:\Programe\GData\AVKBackup\AVKBackupService.exe [1947768 2013-08-21] (G Data Software AG)
R3 GDFwSvc; D:\Programe\GData\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
S3 GDTunerSvc; D:\Programe\GData\AVKTuner\AVKTunerService.exe [1711568 2013-02-25] (G Data Software AG)
R2 Hamachi2Svc; E:\Hamachi Server Client\hamachi-2.exe [2210640 2013-11-29] (LogMeIn Inc.)
R2 MBAMScheduler; D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-07-09] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
R2 TSNxGService; D:\Programe\GData\TSNxG\TSNxGService.exe [257512 2013-02-25] (G Data Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099000 2013-10-30] (AVG)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG)

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2013-12-01] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-30] (G Data Software AG)
R3 gddcd; C:\Windows\system32\drivers\gddcd64.sys [79704 2013-10-23] (G Data Software AG)
R1 gddcv; C:\Windows\system32\drivers\gddcv64.sys [59736 2013-10-23] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-30] (G Data Software AG)
S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon64.sys [31608 2012-01-20] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2013-09-30] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-10-23] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-01-03] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-30] (G Data Software AG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2013-12-01] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [98760 2013-10-23] (G Data Software)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-09 15:58 - 2014-01-09 15:58 - 00000878 _____ C:\Users\Boronian\Desktop\JRT.txt
2014-01-09 15:41 - 2014-01-09 15:41 - 00000000 ____D C:\Windows\ERUNT
2014-01-09 15:29 - 2014-01-09 15:33 - 00000000 ____D C:\AdwCleaner
2014-01-09 11:40 - 2014-01-09 11:40 - 00000000 ____D C:\FRST
2014-01-09 11:38 - 2014-01-09 11:41 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug
2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log
2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable
2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe
2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\sh4ldr
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat
2014-01-08 12:29 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2014-01-08 12:28 - 2014-01-08 12:29 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live
2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk
2014-01-07 22:15 - 2014-01-08 11:56 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation                                    ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 19:01 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-07 19:01 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-07 19:01 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-07 19:01 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-07 19:01 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA
2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db
2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0
2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18
2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\ProgramData\RHelpers
2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-03 19:20 - 2014-01-05 03:15 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext
2014-01-03 19:20 - 2014-01-04 19:09 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt
2014-01-03 19:20 - 2014-01-04 19:08 - 00000000 ____D C:\ProgramData\Updater
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android
2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe
2014-01-03 13:57 - 2014-01-05 13:25 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm
2014-01-03 13:57 - 2014-01-03 14:00 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm
2014-01-03 13:47 - 2014-01-03 13:48 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe
2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk
2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal
2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-01-02 10:13 - 2014-01-09 15:37 - 00002511 _____ C:\Windows\setupact.log
2014-01-02 10:13 - 2014-01-07 20:49 - 00037784 _____ C:\Windows\PFRO.log
2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log
2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-01-02 04:15 - 2013-10-30 11:27 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-01-02 04:15 - 2013-10-30 11:27 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-01-02 04:14 - 2013-10-30 11:27 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG
2014-01-02 04:13 - 2013-10-30 11:27 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-01-02 04:13 - 2013-10-30 11:27 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-01-02 04:09 - 2014-01-02 04:39 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-02 04:09 - 2014-01-02 04:16 - 00000000 ____D C:\ProgramData\AVG
2014-01-02 04:05 - 2014-01-02 04:06 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe
2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM
2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe
2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014
2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-02 03:49 - 2014-01-02 03:50 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software
2014-01-02 03:48 - 2014-01-02 04:12 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-02 03:46 - 2014-01-09 12:07 - 00000000 ____D C:\ProgramData\MFAData
2014-01-02 03:46 - 2014-01-02 04:05 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014
2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe
2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData
2014-01-01 13:46 - 2014-01-01 13:47 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe
2014-01-01 13:37 - 2014-01-09 15:23 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife
2014-01-01 13:37 - 2014-01-01 13:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife
2013-12-27 04:04 - 2013-12-27 04:02 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt
2013-12-26 11:16 - 2014-01-01 12:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify
2013-12-26 11:16 - 2013-12-30 21:38 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify
2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk
2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-23 17:21 - 2013-12-23 18:31 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-23 01:43 - 2013-11-23 20:26 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433193.dll
2013-12-23 01:43 - 2013-11-23 20:26 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433193.dll
2013-12-22 08:00 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2
2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2
2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk
2013-12-21 08:44 - 2013-12-21 08:45 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt
2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google
2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-17 17:20 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-17 17:20 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle
2013-12-11 20:43 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 20:43 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 20:43 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 20:43 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 20:43 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 20:43 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 20:43 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 20:43 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 20:43 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 20:43 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 20:43 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 20:43 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 20:43 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 20:43 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 20:43 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 20:43 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 20:43 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 20:43 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 20:43 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 20:43 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 20:43 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 20:43 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 20:43 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 20:43 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 20:43 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 20:43 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 20:43 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 20:42 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 20:42 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 20:42 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 20:42 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 02:10 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 02:10 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 02:10 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 02:10 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 02:09 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-11 02:04 - 2013-12-11 02:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-11 02:04 - 2013-12-11 02:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-11 02:04 - 2013-12-11 02:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-11 02:04 - 2013-12-11 02:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-11 02:04 - 2013-12-11 02:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-11 01:14 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 01:14 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 01:14 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 01:14 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 01:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 01:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 01:14 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 01:14 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 01:14 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 01:14 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 01:14 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 01:14 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 01:14 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 01:14 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 01:14 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 01:14 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 01:14 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 01:14 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 01:14 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-09 15:58 - 2014-01-09 15:58 - 00000878 _____ C:\Users\Boronian\Desktop\JRT.txt
2014-01-09 15:44 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-09 15:44 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-09 15:41 - 2014-01-09 15:41 - 00000000 ____D C:\Windows\ERUNT
2014-01-09 15:38 - 2013-06-05 23:33 - 00000000 ____D C:\Users\Boronian\AppData\Local\LogMeIn Hamachi
2014-01-09 15:37 - 2014-01-02 10:13 - 00002511 _____ C:\Windows\setupact.log
2014-01-09 15:36 - 2012-01-20 23:37 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-09 15:36 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-09 15:34 - 2012-01-20 18:55 - 02017877 _____ C:\Windows\WindowsUpdate.log
2014-01-09 15:33 - 2014-01-09 15:29 - 00000000 ____D C:\AdwCleaner
2014-01-09 15:33 - 2012-01-20 23:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Skype
2014-01-09 15:33 - 2012-01-20 18:56 - 00000000 ___RD C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-09 15:23 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife
2014-01-09 15:09 - 2012-11-07 17:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 13:40 - 2012-06-22 11:31 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\U3
2014-01-09 12:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-09 12:07 - 2014-01-02 03:46 - 00000000 ____D C:\ProgramData\MFAData
2014-01-09 11:41 - 2014-01-09 11:38 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug
2014-01-09 11:40 - 2014-01-09 11:40 - 00000000 ____D C:\FRST
2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log
2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable
2014-01-09 11:36 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian
2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe
2014-01-09 10:58 - 2012-09-02 12:57 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-09 10:34 - 2012-01-20 18:56 - 00001421 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google
2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-08 19:33 - 2012-10-21 12:59 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F8FB1A55-F516-4C27-87C4-A40A3EFF1E4F}
2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\sh4ldr
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat
2014-01-08 12:29 - 2014-01-08 12:28 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-08 11:56 - 2014-01-07 22:15 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk
2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live
2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk
2014-01-07 21:53 - 2013-11-08 21:37 - 00000759 _____ C:\Users\Boronian\Desktop\abo´s.txt
2014-01-07 20:49 - 2014-01-02 10:13 - 00037784 _____ C:\Windows\PFRO.log
2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\RHelpers
2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation                                    ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 19:08 - 2012-01-20 23:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA
2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db
2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0
2014-01-05 13:25 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm
2014-01-05 03:15 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext
2014-01-05 01:03 - 2013-06-07 18:26 - 00000000 __SHD C:\#GDATA.Trash.Store#
2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18
2014-01-04 19:09 - 2014-01-03 19:20 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt
2014-01-04 19:08 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\Updater
2014-01-04 18:18 - 2013-07-15 18:27 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android
2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe
2014-01-03 14:00 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm
2014-01-03 13:48 - 2014-01-03 13:47 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe
2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk
2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal
2014-01-03 10:57 - 2012-03-24 14:46 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2014-01-03 10:19 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian\AppData\Local\VirtualStore
2014-01-03 10:08 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log
2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-01-02 04:39 - 2014-01-02 04:09 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-02 04:39 - 2012-07-26 22:26 - 00000000 ____D C:\ProgramData\DriverGenius
2014-01-02 04:39 - 2012-01-20 23:27 - 00000000 ____D C:\Users\Boronian\AppData\Local\Downloaded Installations
2014-01-02 04:32 - 2012-01-20 18:47 - 00000000 ____D C:\Windows\Panther
2014-01-02 04:16 - 2014-01-02 04:09 - 00000000 ____D C:\ProgramData\AVG
2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG
2014-01-02 04:12 - 2014-01-02 03:48 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-02 04:06 - 2014-01-02 04:05 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe
2014-01-02 04:05 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014
2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM
2014-01-02 03:52 - 2012-01-20 23:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQ
2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe
2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014
2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-02 03:50 - 2014-01-02 03:49 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software
2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe
2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData
2014-01-01 13:54 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife
2014-01-01 13:47 - 2014-01-01 13:46 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe
2014-01-01 12:43 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify
2013-12-30 21:38 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify
2013-12-27 04:02 - 2013-12-27 04:04 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt
2013-12-26 11:52 - 2012-04-29 09:39 - 00000000 ____D C:\Program Files (x86)\Gameforge
2013-12-26 11:48 - 2009-07-14 18:58 - 00709908 _____ C:\Windows\system32\perfh007.dat
2013-12-26 11:48 - 2009-07-14 18:58 - 00154344 _____ C:\Windows\system32\perfc007.dat
2013-12-26 11:48 - 2009-07-14 06:13 - 01649524 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk
2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-24 00:04 - 2012-04-22 05:06 - 01622868 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-23 19:18 - 2012-01-20 19:22 - 00065160 _____ C:\Users\Boronian\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-23 18:34 - 2009-07-14 05:45 - 00299664 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-23 18:31 - 2013-12-23 17:21 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-22 13:55 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2
2013-12-22 13:45 - 2012-11-29 20:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-22 13:45 - 2012-01-20 23:43 - 00000000 ____D C:\ProgramData\Skype
2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2
2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk
2013-12-22 07:33 - 2012-01-20 23:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-22 07:28 - 2013-12-02 01:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher
2013-12-21 08:45 - 2013-12-21 08:44 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt
2013-12-19 21:33 - 2014-01-07 19:01 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-12-19 21:33 - 2014-01-07 19:01 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-12-19 21:33 - 2013-05-24 03:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-12-19 21:33 - 2013-05-24 03:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-12-19 21:33 - 2012-01-20 23:36 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-12-19 21:33 - 2012-01-20 23:36 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-12-19 19:53 - 2012-01-20 23:37 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-12-19 19:53 - 2012-01-20 23:37 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-12-19 18:34 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-12-19 06:01 - 2012-10-19 14:59 - 03539040 _____ C:\Windows\system32\nvcoproc.bin
2013-12-14 17:58 - 2013-08-15 01:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 17:56 - 2012-01-21 00:44 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-14 17:49 - 2012-04-24 18:17 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TS3Client
2013-12-14 01:15 - 2013-11-19 23:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA Corporation
2013-12-14 01:15 - 2013-05-24 03:39 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA
2013-12-14 01:15 - 2012-01-20 23:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-14 01:14 - 2012-01-20 23:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-12 21:35 - 2012-02-24 19:37 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle
2013-12-11 19:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-11 02:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-11 02:09 - 2012-11-07 17:52 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 02:09 - 2012-04-02 16:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 02:09 - 2012-01-20 23:25 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 02:04 - 2013-12-11 02:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-11 02:04 - 2013-12-11 02:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-11 02:04 - 2013-12-11 02:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-11 02:04 - 2013-12-11 02:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-11 02:04 - 2013-12-11 02:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-11 02:04 - 2013-12-11 02:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-11 02:04 - 2013-12-11 02:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-10 03:13 - 2013-10-30 00:41 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-12-10 03:13 - 2013-10-30 00:41 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

Some content of TEMP:
====================
C:\Users\Boronian\AppData\Local\Temp\htmlayout.dll
C:\Users\Boronian\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Boronian\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Boronian\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Boronian\AppData\Local\Temp\nvStInst.exe
C:\Users\Boronian\AppData\Local\Temp\Quarantine.exe
C:\Users\Boronian\AppData\Local\Temp\SHSetup.exe
C:\Users\Boronian\AppData\Local\Temp\toolbar3011458.exe
C:\Users\Boronian\AppData\Local\Temp\toolbar3061488.exe
C:\Users\Boronian\AppData\Local\Temp\uninstall21498232.exe
C:\Users\Boronian\AppData\Local\Temp\uninstall21498248.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-02 11:39

==================== End Of Log ============================
         
--- --- ---

--- --- ---



*schaut gespannt und abwartend*
__________________

Alt 10.01.2014, 10:39   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Win7 , 64 bit --  (Firefox) Nation-zoom Befall. - Standard

Win7 , 64 bit -- (Firefox) Nation-zoom Befall.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 11.01.2014, 09:09   #5
Boronian
 
Win7 , 64 bit --  (Firefox) Nation-zoom Befall. - Standard

Win7 , 64 bit -- (Firefox) Nation-zoom Befall.



soo sorry für die späte Antwort..aber Arbeitstag verhinderte früheres posten.

puhh.. 11 std scannen.. hier nun aber die Logs.. einen Fehler scheint er noch erkannt zu haben.

____________________

ESET log

Code:
ATTFilter
 ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=aa09feac3533b34999c8a36c5695fc88
# engine=16607
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-11 07:42:45
# local_time=2014-01-11 08:42:45 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5122 16777214 0 11 22889872 138212361 0 0
# compatibility_mode=5893 16776574 100 94 798727 141056015 0 0
# scanned=388821
# found=1
# cleaned=0
# scan_time=39918
sh=80585BEB547B8B6BF11444D79B5EB02F232C610C ft=0 fh=0000000000000000 vn="a variant of Win32/Kryptik.BEQH trojan" ac=I fn="E:\BORONIAN-PC\Backup Set 2013-12-30 214713\Backup Files 2014-01-03 170002\Backup files 2.zip"
         
Sec check log

Code:
ATTFilter
  Results of screen317's Security Check version 0.99.78  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
AVG AntiVirus 2014            
G Data TotalProtection 2014   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Spybot - Search & Destroy 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 AVG PC TuneUp 2014  
 AVG PC TuneUp 2014 (de-DE) 
 JavaFX 2.1.1    
 Java 7 Update 45  
 Adobe Flash Player 11.9.900.170  
 Adobe Reader 10.1.8 Adobe Reader out of Date!  
 Mozilla Firefox 20.0.1 Firefox out of Date!  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Spybot Teatimer.exe is disabled! 
 AVG avgwdsvc.exe 
 Malwarebytes' Anti-Malware mbamscheduler.exe   
 GData Firewall GDFwSvcx64.exe  
 GData Firewall GDFirewallTray.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
FRST Log


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 01
Ran by Boronian (administrator) on BORONIAN-PC on 11-01-2014 09:24:54
Running from E:\Downloads\DL zeug\Downloadkram von  Mozilla\Antiviren zeug
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) D:\Programe\GData\AVK\AVKWCtlx64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) D:\Programe\GData\AVK\AVKService.exe
(G Data Software AG) D:\Programe\GData\AVKBackup\AVKBackupService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(G Data Software) D:\Programe\GData\TSNxG\TSNxGService.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2.exe
(LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2-ui.exe
(LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe
(G Data Software AG) D:\Programe\GData\Firewall\GDFwSvcx64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) E:\Steam\Steam.exe
(Spotify Ltd) C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(G Data Software AG) D:\Programe\GData\Firewall\GDFirewallTray.exe
(G Data Software AG) D:\Programe\GData\AVKTray\AVKTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
() C:\Program Files (x86)\ESO Survey Live\ESOSurveyLive.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AvkBap64.exe
(Mozilla Corporation) D:\Programe\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [790552 2007-04-26] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe [1793048 2007-04-26] (Logitech Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [GDFirewallTray] - D:\Programe\GData\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - D:\Programe\GData\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - E:\Hamachi Server Client\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [ICQ] - C:\Users\Boronian\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-02] (ICQ)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-26] (Spotify Ltd)
MountPoints2: {1f795429-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {1f7954c2-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {e34c18a5-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {e34c22ea-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA10BD39CBBD7CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - DefaultScope {05D862FD-4E4A-47EF-A6CA-8342AA21DB4D} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - {05D862FD-4E4A-47EF-A6CA-8342AA21DB4D} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{CA2430EE-77B2-48D8-B22D-1A6C66CE6AA5}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

FireFox:
========
FF ProfilePath: C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Extension: Adblock Plus - C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; D:\Programe\GData\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; D:\Programe\GData\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG)
R2 GDBackupSvc; D:\Programe\GData\AVKBackup\AVKBackupService.exe [1947768 2013-08-21] (G Data Software AG)
R3 GDFwSvc; D:\Programe\GData\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
S3 GDTunerSvc; D:\Programe\GData\AVKTuner\AVKTunerService.exe [1711568 2013-02-25] (G Data Software AG)
R2 Hamachi2Svc; E:\Hamachi Server Client\hamachi-2.exe [2210640 2013-11-29] (LogMeIn Inc.)
R2 MBAMScheduler; D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-07-09] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
R2 TSNxGService; D:\Programe\GData\TSNxG\TSNxGService.exe [257512 2013-02-25] (G Data Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099000 2013-10-30] (AVG)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG)

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2013-12-01] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-30] (G Data Software AG)
R3 gddcd; C:\Windows\system32\drivers\gddcd64.sys [79704 2013-10-23] (G Data Software AG)
R1 gddcv; C:\Windows\system32\drivers\gddcv64.sys [59736 2013-10-23] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-30] (G Data Software AG)
S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon64.sys [31608 2012-01-20] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2013-09-30] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-10-23] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-01-03] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-30] (G Data Software AG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2013-12-01] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [98760 2013-10-23] (G Data Software)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-10 23:01 - 2014-01-10 23:01 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Awesomium
2014-01-10 01:39 - 2014-01-10 02:33 - 00000000 ____D C:\Users\Boronian\AppData\Local\SingularityViewer64
2014-01-10 01:39 - 2014-01-10 01:39 - 00000808 _____ C:\Users\Public\Desktop\Singularity (64 bit) Viewer.lnk
2014-01-09 20:00 - 2014-01-09 20:00 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-09 20:00 - 2014-01-09 20:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-09 19:49 - 2014-01-09 19:49 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk
2014-01-09 15:58 - 2014-01-09 15:58 - 00000878 _____ C:\Users\Boronian\Desktop\JRT.txt
2014-01-09 15:41 - 2014-01-09 15:41 - 00000000 ____D C:\Windows\ERUNT
2014-01-09 15:29 - 2014-01-09 15:33 - 00000000 ____D C:\AdwCleaner
2014-01-09 11:40 - 2014-01-11 09:05 - 00000000 ____D C:\FRST
2014-01-09 11:38 - 2014-01-09 11:41 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug
2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log
2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable
2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe
2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat
2014-01-08 12:28 - 2014-01-09 19:55 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live
2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation                                    ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 19:01 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-07 19:01 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-07 19:01 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-07 19:01 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-07 19:01 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-07 19:01 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA
2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db
2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0
2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18
2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\ProgramData\RHelpers
2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-03 19:20 - 2014-01-05 03:15 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext
2014-01-03 19:20 - 2014-01-04 19:09 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt
2014-01-03 19:20 - 2014-01-04 19:08 - 00000000 ____D C:\ProgramData\Updater
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android
2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe
2014-01-03 13:57 - 2014-01-05 13:25 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm
2014-01-03 13:57 - 2014-01-03 14:00 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm
2014-01-03 13:47 - 2014-01-03 13:48 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe
2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk
2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal
2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-01-02 10:13 - 2014-01-10 21:16 - 00003351 _____ C:\Windows\setupact.log
2014-01-02 10:13 - 2014-01-07 20:49 - 00037784 _____ C:\Windows\PFRO.log
2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log
2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-01-02 04:15 - 2013-10-30 11:27 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-01-02 04:15 - 2013-10-30 11:27 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-01-02 04:14 - 2013-10-30 11:27 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG
2014-01-02 04:13 - 2013-10-30 11:27 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-01-02 04:13 - 2013-10-30 11:27 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-01-02 04:09 - 2014-01-02 04:39 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-02 04:09 - 2014-01-02 04:16 - 00000000 ____D C:\ProgramData\AVG
2014-01-02 04:05 - 2014-01-02 04:06 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe
2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM
2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe
2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014
2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-02 03:49 - 2014-01-02 03:50 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software
2014-01-02 03:48 - 2014-01-02 04:12 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-02 03:46 - 2014-01-11 08:07 - 00000000 ____D C:\ProgramData\MFAData
2014-01-02 03:46 - 2014-01-02 04:05 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014
2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe
2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData
2014-01-01 13:46 - 2014-01-01 13:47 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe
2014-01-01 13:37 - 2014-01-10 09:53 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife
2014-01-01 13:37 - 2014-01-01 13:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife
2013-12-27 04:04 - 2013-12-27 04:02 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt
2013-12-26 11:16 - 2014-01-01 12:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify
2013-12-26 11:16 - 2013-12-30 21:38 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify
2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk
2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-23 17:21 - 2013-12-23 18:31 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-23 17:21 - 2013-12-23 18:31 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-23 01:43 - 2013-11-23 20:26 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433193.dll
2013-12-23 01:43 - 2013-11-23 20:26 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433193.dll
2013-12-22 08:00 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2
2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2
2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk
2013-12-21 08:44 - 2013-12-21 08:45 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt
2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google
2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-17 17:20 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-17 17:20 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle

==================== One Month Modified Files and Folders =======

2014-01-11 09:18 - 2012-07-25 21:14 - 00001294 _____ C:\Users\Boronian\Desktop\kira pw.txt
2014-01-11 09:09 - 2012-11-07 17:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-11 09:05 - 2014-01-09 11:40 - 00000000 ____D C:\FRST
2014-01-11 08:43 - 2012-01-20 18:55 - 01081371 _____ C:\Windows\WindowsUpdate.log
2014-01-11 08:07 - 2014-01-02 03:46 - 00000000 ____D C:\ProgramData\MFAData
2014-01-11 03:25 - 2012-01-20 23:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Skype
2014-01-10 23:01 - 2014-01-10 23:01 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Awesomium
2014-01-10 21:25 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-10 21:25 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-10 21:21 - 2012-10-21 12:59 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F8FB1A55-F516-4C27-87C4-A40A3EFF1E4F}
2014-01-10 21:18 - 2013-06-05 23:33 - 00000000 ____D C:\Users\Boronian\AppData\Local\LogMeIn Hamachi
2014-01-10 21:16 - 2014-01-02 10:13 - 00003351 _____ C:\Windows\setupact.log
2014-01-10 21:16 - 2012-01-20 23:37 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-10 21:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-10 09:53 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife
2014-01-10 02:33 - 2014-01-10 01:39 - 00000000 ____D C:\Users\Boronian\AppData\Local\SingularityViewer64
2014-01-10 01:39 - 2014-01-10 01:39 - 00000808 _____ C:\Users\Public\Desktop\Singularity (64 bit) Viewer.lnk
2014-01-09 20:00 - 2014-01-09 20:00 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-09 20:00 - 2014-01-09 20:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-09 20:00 - 2012-01-20 23:43 - 00000000 ____D C:\ProgramData\Skype
2014-01-09 19:55 - 2014-01-08 12:28 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-09 19:49 - 2014-01-09 19:49 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk
2014-01-09 15:58 - 2014-01-09 15:58 - 00000878 _____ C:\Users\Boronian\Desktop\JRT.txt
2014-01-09 15:41 - 2014-01-09 15:41 - 00000000 ____D C:\Windows\ERUNT
2014-01-09 15:33 - 2014-01-09 15:29 - 00000000 ____D C:\AdwCleaner
2014-01-09 15:33 - 2012-01-20 23:55 - 00000000 ____D C:\ProgramData\ICQ
2014-01-09 15:33 - 2012-01-20 18:56 - 00000000 ___RD C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-09 13:40 - 2012-06-22 11:31 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\U3
2014-01-09 12:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-09 11:41 - 2014-01-09 11:38 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug
2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log
2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable
2014-01-09 11:36 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian
2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe
2014-01-09 10:58 - 2012-09-02 12:57 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-09 10:34 - 2012-01-20 18:56 - 00001421 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google
2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat
2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live
2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live
2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk
2014-01-07 21:53 - 2013-11-08 21:37 - 00000759 _____ C:\Users\Boronian\Desktop\abo´s.txt
2014-01-07 20:49 - 2014-01-02 10:13 - 00037784 _____ C:\Windows\PFRO.log
2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\RHelpers
2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes
2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation                                    ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 19:08 - 2012-01-20 23:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA
2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db
2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0
2014-01-05 13:25 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm
2014-01-05 03:15 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext
2014-01-05 01:03 - 2013-06-07 18:26 - 00000000 __SHD C:\#GDATA.Trash.Store#
2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18
2014-01-04 19:09 - 2014-01-03 19:20 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt
2014-01-04 19:08 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\Updater
2014-01-04 18:18 - 2013-07-15 18:27 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache
2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android
2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe
2014-01-03 14:00 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm
2014-01-03 13:48 - 2014-01-03 13:47 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe
2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk
2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal
2014-01-03 10:57 - 2012-03-24 14:46 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2014-01-03 10:19 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian\AppData\Local\VirtualStore
2014-01-03 10:08 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log
2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-01-02 04:39 - 2014-01-02 04:09 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-02 04:39 - 2012-07-26 22:26 - 00000000 ____D C:\ProgramData\DriverGenius
2014-01-02 04:39 - 2012-01-20 23:27 - 00000000 ____D C:\Users\Boronian\AppData\Local\Downloaded Installations
2014-01-02 04:32 - 2012-01-20 18:47 - 00000000 ____D C:\Windows\Panther
2014-01-02 04:16 - 2014-01-02 04:09 - 00000000 ____D C:\ProgramData\AVG
2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG
2014-01-02 04:12 - 2014-01-02 03:48 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-02 04:06 - 2014-01-02 04:05 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe
2014-01-02 04:05 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014
2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM
2014-01-02 03:52 - 2012-01-20 23:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQ
2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe
2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014
2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-02 03:50 - 2014-01-02 03:49 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG
2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software
2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe
2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData
2014-01-01 13:54 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife
2014-01-01 13:47 - 2014-01-01 13:46 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe
2014-01-01 12:43 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify
2013-12-30 21:38 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify
2013-12-27 04:02 - 2013-12-27 04:04 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt
2013-12-26 11:52 - 2012-04-29 09:39 - 00000000 ____D C:\Program Files (x86)\Gameforge
2013-12-26 11:48 - 2009-07-14 18:58 - 00709908 _____ C:\Windows\system32\perfh007.dat
2013-12-26 11:48 - 2009-07-14 18:58 - 00154344 _____ C:\Windows\system32\perfc007.dat
2013-12-26 11:48 - 2009-07-14 06:13 - 01649524 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk
2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-24 00:04 - 2012-04-22 05:06 - 01622868 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-23 19:18 - 2012-01-20 19:22 - 00065160 _____ C:\Users\Boronian\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-23 18:34 - 2009-07-14 05:45 - 00299664 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-23 18:31 - 2013-12-23 17:21 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-23 18:31 - 2013-12-23 17:21 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-22 13:55 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2
2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2
2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk
2013-12-22 07:33 - 2012-01-20 23:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-22 07:28 - 2013-12-02 01:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher
2013-12-21 08:45 - 2013-12-21 08:44 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt
2013-12-19 21:33 - 2014-01-07 19:01 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-12-19 21:33 - 2014-01-07 19:01 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-12-19 21:33 - 2014-01-07 19:01 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-12-19 21:33 - 2013-05-24 03:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-12-19 21:33 - 2013-05-24 03:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-12-19 21:33 - 2012-10-19 14:58 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-12-19 21:33 - 2012-01-20 23:36 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-12-19 21:33 - 2012-01-20 23:36 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-12-19 19:53 - 2012-01-20 23:37 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-12-19 19:53 - 2012-01-20 23:37 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-12-19 19:53 - 2012-01-20 23:37 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-12-19 18:34 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-12-19 06:01 - 2012-10-19 14:59 - 03539040 _____ C:\Windows\system32\nvcoproc.bin
2013-12-14 17:58 - 2013-08-15 01:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 17:56 - 2012-01-21 00:44 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-14 17:49 - 2012-04-24 18:17 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TS3Client
2013-12-14 01:15 - 2013-11-19 23:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA Corporation
2013-12-14 01:15 - 2013-05-24 03:39 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA
2013-12-14 01:15 - 2012-01-20 23:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-14 01:14 - 2012-01-20 23:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-12 21:35 - 2012-02-24 19:37 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle

Some content of TEMP:
====================
C:\Users\Boronian\AppData\Local\Temp\htmlayout.dll
C:\Users\Boronian\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Boronian\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Boronian\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Boronian\AppData\Local\Temp\nvStInst.exe
C:\Users\Boronian\AppData\Local\Temp\Quarantine.exe
C:\Users\Boronian\AppData\Local\Temp\SHSetup.exe
C:\Users\Boronian\AppData\Local\Temp\toolbar3011458.exe
C:\Users\Boronian\AppData\Local\Temp\toolbar3061488.exe
C:\Users\Boronian\AppData\Local\Temp\uninstall21498232.exe
C:\Users\Boronian\AppData\Local\Temp\uninstall21498248.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-02 11:39

==================== End Of Log ============================
         
--- --- ---


welchen Virenscanner kannst du mir, nebst GData empfehlen, käulich zu erwerben? Scheinbar konnte meiner diese Flut nicht zurückhalten. MalwareBytes werde ich auf jedenfall eine Lizens holen.


Geändert von Boronian (11.01.2014 um 09:31 Uhr)

Alt 11.01.2014, 15:33   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Win7 , 64 bit --  (Firefox) Nation-zoom Befall. - Standard

Win7 , 64 bit -- (Firefox) Nation-zoom Befall.



Ich empfehle immer Emsisoft, aber bitte nur ein AV nutzen.

Der Fund ist im Backup auf E:, dieses löschen.

Fertig

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun


Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
--> Win7 , 64 bit -- (Firefox) Nation-zoom Befall.

Alt 12.01.2014, 06:11   #7
Boronian
 
Win7 , 64 bit --  (Firefox) Nation-zoom Befall. - Standard

Win7 , 64 bit -- (Firefox) Nation-zoom Befall.



Grüß dich

Abschlussbericht:
---------------

Code:
ATTFilter
 # DelFix v10.6 - Datei am 12/01/2014 um 06:00:02 erstellt
# Aktualisiert am 11/11/2013 von Xplode
# Benutzer : Boronian - BORONIAN-PC
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)

~ Aktiviere die Benutzerkontensteuerung ... OK

~ Entferne die Bereinigungsprogramme ...

Gelöscht : C:\FRST
Gelöscht : C:\AdwCleaner
Gelöscht : C:\Users\Boronian\Desktop\JRT.txt
Gelöscht : C:\Users\Boronian\Downloads\Defogger.exe
Gelöscht : C:\Users\Boronian\Downloads\defogger_disable.log
Gelöscht : HKLM\SOFTWARE\AdwCleaner

~ Erstelle ein Backup der Registrierungsdatenbank ... OK

~ Lösche die Wiederherstellungspunkte ...

Gelöscht : RP #383 [Removed SpyHunter | 01/09/2014 09:57:34]
Gelöscht : RP #384 [Removed SpyHunter | 01/09/2014 18:53:10]
Gelöscht : RP #385 [Removed SpyHunter | 01/09/2014 18:55:03]
Gelöscht : RP #386 [Removed Skype™ 6.11 | 01/09/2014 18:57:21]
Gelöscht : RP #387 [Windows-Sicherung | 01/10/2014 20:27:41]

Ein neuer Wiederherstellungspunkt wurde erstellt !

~ Stelle die Systemeinstellungen wieder her ... OK

########## - EOF - ##########
         
Ich werd mich , sobald ich aus dem koma erwacht bin, im forum dankend melden.

Lieben Gruß

Boronian

Alt 12.01.2014, 09:21   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Win7 , 64 bit --  (Firefox) Nation-zoom Befall. - Standard

Win7 , 64 bit -- (Firefox) Nation-zoom Befall.



Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Win7 , 64 bit -- (Firefox) Nation-zoom Befall.
adblock, converter, defender, downloader, esgscanner.sys, explorer, flash player, gdata, iexplore.exe, launch, lollipop.exe, mobogenie, mobogenie entfernen, nationzoom, nationzoom entfernen, neustart, ntdll.dll, programm, refresh, registry, richtlinie, security, server, services.exe, spotify web helper, spyhunter, spyhunter entfernen, svchost.exe, totalprotection, updates, windows, winlogon.exe, youtube downloader




Ähnliche Themen: Win7 , 64 bit -- (Firefox) Nation-zoom Befall.


  1. Nation Zoom
    Plagegeister aller Art und deren Bekämpfung - 16.03.2014 (1)
  2. Nation Zoom erscheint beim Öffnen von Int. Explorer und Firefox, Windows 7
    Plagegeister aller Art und deren Bekämpfung - 04.03.2014 (55)
  3. Nation Zoom
    Log-Analyse und Auswertung - 26.01.2014 (9)
  4. Win7 - Nation Zoom, Optimizer Pro usw
    Log-Analyse und Auswertung - 14.01.2014 (6)
  5. Nation Zoom entfernen
    Log-Analyse und Auswertung - 13.01.2014 (24)
  6. Nach versehentlichem Download öffnen sich im IE Firefox und Google Chrome Nation Zoom Seiten
    Plagegeister aller Art und deren Bekämpfung - 09.01.2014 (5)
  7. Nation Zoom
    Log-Analyse und Auswertung - 08.01.2014 (1)
  8. Problemm mit Nation Zoom
    Log-Analyse und Auswertung - 08.01.2014 (6)
  9. Virus Nation Zoom
    Log-Analyse und Auswertung - 07.01.2014 (27)
  10. Nation Zoom Virus
    Log-Analyse und Auswertung - 06.01.2014 (11)
  11. Windows 7: Nation Zoom
    Log-Analyse und Auswertung - 29.12.2013 (9)
  12. nation zoom
    Plagegeister aller Art und deren Bekämpfung - 22.12.2013 (6)
  13. nation zoom
    Plagegeister aller Art und deren Bekämpfung - 21.12.2013 (1)
  14. Windows 7 Firefox zeigt immer Nation Zoom als Startseite
    Log-Analyse und Auswertung - 18.12.2013 (12)
  15. Ich habe das Problem das ich Nation Zoom nicht mehr aus Firefox herausbekomme!!
    Log-Analyse und Auswertung - 17.12.2013 (13)
  16. Nation Zoom Virus
    Plagegeister aller Art und deren Bekämpfung - 17.12.2013 (7)
  17. Nation Zoom entfernen
    Anleitungen, FAQs & Links - 22.11.2013 (2)

Zum Thema Win7 , 64 bit -- (Firefox) Nation-zoom Befall. - Grüße Ich hab mir im Netz die schädliche Seite Nation-zoom eingefangen und auch zu spät recherchiert, das SpyHunter nicht hilft, sondern eher das ganze noch verschlimmert. Natürlich prompt ausgeführt und - Win7 , 64 bit -- (Firefox) Nation-zoom Befall....
Archiv
Du betrachtest: Win7 , 64 bit -- (Firefox) Nation-zoom Befall. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.