Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 27.01.2014, 05:21   #1
Aivaria
 
Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D - Standard

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D



Hallo,

mir fiel heute beim Programmieren auf, dass mein Visual Studio bedeutsam länger brauch ein Programm zu starten / debuggen, als ich es sonst gewohnt bin. Beim genaueren betrachten anderer Programme fiel mir dort das gleiche Verhalten auf.
Visual Studio brauch etwa 5-10 Sekunden, um ein leeres Skript zu starten. Andere Programme brauchen ähnlich lange. Seit wann das genau ist, kann ich leider nicht sagen, da ich Visual Studio mehr als einen Monat nicht genutzt hatte.

Ich habe vor etwa 1-2 Wochen nach Zip-Passwort Knackern gesucht, und bei einem bei der Installation nicht aufgepasst, und mir eine Toolbar Installiert. Welche das war weiß ich leider nicht mehr (Mittlerweile ist sie entfernt);

Weil ich verdacht auf einen Virenbefall habe, habe ich mit Avast! einen komplett Scan durchgeführt (Alle Festplatten, sowie Archive durchsucht), ohne einen Fund.
Bei einem HijackThis Scan hab ich einige Auffälligkeiten entdeckt.

Code:
ATTFilter
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 04:53:41, on 27.01.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
D:\Program Files\AVAST Software\Avast\AvastUI.exe
D:\Program Files (x86)\Mozilla Firefox\firefox.exe
D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Users\jan\Desktop\Virenscan\HiJackThis204.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - D:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "D:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SDTray] "d:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [Skype] "D:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "D:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [puush] D:\Program Files (x86)\puush\puush.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_170_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O10 - Unknown file in Winsock LSP: d:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: d:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{A6B82ABF-A18A-4A82-9CFC-31FA580BD0E9}: NameServer = 192.168.2.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - d:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - d:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - d:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - D:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6857 bytes
         
Ich wollte daraufhin Spybot S&D installieren, bekam bei der Installation einen Fehler, dass die Installation fehlgeschlagen ist. Das Programm befindet sich scheinbar trotzdem auf meinem Rechner, teilt mir jedoch mit, dass Dateien fehlen oder Defekt sind, und lässt mich deswegen auch keinen Scan machen. Update habe ich versucht, jedoch zeigt Spybot S&D kurz danach keine Aktivität mehr (Habe 5 Minuten gewartet, ohne das etwas geschehen ist).

Hier nun die Logfiles aus der Anleitung

FRST.txt
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-01-2014 02
Ran by jan (administrator) on RUPPY on 27-01-2014 04:29:24
Running from C:\Users\jan\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVAST Software) D:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) D:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(hxxp://tortoisesvn.net) D:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Microsoft Corporation) D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Logitech Inc.) D:\Program Files\Logitech Gaming Software\LCore.exe
(Realtek Semiconductor) D:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Skype Technologies S.A.) D:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
() D:\Program Files (x86)\puush\puush.exe
(AVAST Software) D:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) D:\Program Files\Windows Media Player\wmpnetwk.exe
(Valve Corporation) D:\Program Files (x86)\Common Files\Steam\SteamService.exe
(The Eraser Project) D:\Program Files\Eraser\Eraser.exe
(hxxp://tortoisesvn.net) D:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Mozilla Corporation) D:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Safer-Networking Ltd.) D:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) D:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) D:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) D:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Dominik Reichl) D:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
(Mozilla Corporation) D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Users\jan\Downloads\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Launch LCore] - D:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] - D:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7506136 2013-12-06] (Realtek Semiconductor)
HKLM\...\Run: [Eraser] - D:\Program Files\Eraser\Eraser.exe [980920 2012-05-22] (The Eraser Project)
HKLM-x32\...\Run: [Adobe ARM] - D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] - D:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-27] (AVAST Software)
HKLM-x32\...\Run: [SDTray] - d:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKCU\...\Run: [Skype] - D:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - D:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-25] (Valve Corporation)
HKCU\...\Run: [puush] - D:\Program Files (x86)\puush\puush.exe [567880 2013-09-07] ()
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_170_Plugin.exe -update plugin [839560 2014-01-05] (Adobe Systems Incorporated)
MountPoints2: {89973821-1c46-11e3-965a-d43d7ed8b963} - G:\setup.exe
HKU\UpdatusUser\...\Run: [Skype] - D:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\UpdatusUser\...\Run: [Steam] - D:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-25] (Valve Corporation)
HKU\UpdatusUser\...\Run: [puush] - D:\Program Files (x86)\puush\puush.exe [567880 2013-09-07] ()
HKU\UpdatusUser\...\Run: [DAEMON Tools Lite] - D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2B560EFCECA8CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - d:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - d:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - d:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - D:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{A6B82ABF-A18A-4A82-9CFC-31FA580BD0E9}: [NameServer]192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default
FF Homepage: about:home
FF NetworkProxy: "autoconfig_url", "https://mediahint.com/default.pac"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - d:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - d:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - D:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - D:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - D:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - D:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - d:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - d:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - d:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - d:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - D:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - d:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: ProxTube - Unblock YouTube - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\ich@maltegoetz.de [2014-01-21]
FF Extension: KeeFox - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\keefox@chris.tomlinson [2014-01-04]
FF Extension: ChatZilla - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2014-01-16]
FF Extension: Live HTTP Headers - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a} [2013-10-10]
FF Extension: Media Hint - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\mediahint@jetpack.xpi [2013-10-21]
FF Extension: NoScript - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-09-11]
FF Extension: Web Developer - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2013-10-23]
FF Extension: Adblock Plus - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-04]
FF Extension: DownThemAll! - C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\kx5g19zz.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-10-20]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - D:\Program Files\AVAST Software\Avast\WebRep\FF [2013-09-04]

==================== Services (Whitelisted) =================

S4 AdobeARMservice; D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432 2013-12-21] (Adobe Systems Incorporated)
R2 avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-27] (AVAST Software)
S4 DAUpdaterSvc; D:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-12] (BioWare)
S4 Desura Install Service; d:\Program Files (x86)\Common Files\Desura\desura_service.exe [131912 2013-09-24] (Desura Pty Ltd)
S3 fussvc; D:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
S4 Intel(R) Capability Licensing Service Interface; D:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation)
S4 Intel(R) Capability Licensing Service TCP IP Interface; D:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S4 ISCTAgent; D:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-01] ()
S4 nvUpdatusService; d:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [1364256 2013-10-27] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-29] ()
R2 SDScannerService; d:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; d:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
S2 SkypeUpdate; D:\Program Files (x86)\Skype\Updater\Updater.exe [171680 2013-09-05] (Skype Technologies)
R2 SQLWriter; D:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [129624 2012-02-11] (Microsoft Corporation)
R3 Steam Client Service; d:\Program Files (x86)\Common Files\Steam\SteamService.exe [571816 2014-01-25] (Valve Corporation)
S4 Stereo Service; d:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [414496 2013-10-23] (NVIDIA Corporation)
S3 Te.Service; D:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
R2 wlidsvc; D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2291568 2009-08-18] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-27] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-27] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-09-13] (DT Soft Ltd)
S3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-01] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-01] ()
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
S3 NTIOLib_1_0_4; D:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 VSPerfDrv110; D:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 cpuz136; \??\C:\Users\jan\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
S3 iusb3hub; system32\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc; system32\DRIVERS\iusb3xhc.sys [x]
S3 MSICDSetup; \??\E:\CDriver64.sys [x]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 04:29 - 2014-01-27 04:29 - 00015208 _____ C:\Users\jan\Downloads\FRST.txt
2014-01-27 04:29 - 2014-01-27 04:29 - 00000000 ____D C:\FRST
2014-01-27 04:24 - 2014-01-27 04:24 - 02078208 _____ (Farbar) C:\Users\jan\Downloads\FRST64.exe
2014-01-27 04:23 - 2014-01-27 04:23 - 00050477 _____ C:\Users\jan\Downloads\Defogger.exe
2014-01-27 04:23 - 2014-01-27 04:23 - 00000538 _____ C:\Users\jan\Downloads\defogger_disable.log
2014-01-27 04:23 - 2014-01-27 04:23 - 00000168 _____ C:\Users\jan\defogger_reenable
2014-01-27 04:07 - 2014-01-27 04:07 - 00001250 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-01-27 04:06 - 2014-01-27 04:24 - 00000000 ____D D:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-27 04:06 - 2014-01-27 04:07 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-27 04:06 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-01-27 03:57 - 2014-01-27 03:57 - 40658208 _____ (Safer-Networking Ltd.                                       ) C:\Users\jan\Downloads\spybot-2.2.exe
2014-01-27 03:55 - 2014-01-27 03:58 - 00006585 _____ C:\Users\jan\Downloads\hijackthis.log
2014-01-27 03:55 - 2014-01-27 03:55 - 00388608 _____ (Trend Micro Inc.) C:\Users\jan\Downloads\HiJackThis204.exe
2014-01-26 22:46 - 2014-01-26 22:46 - 00001674 _____ C:\Users\Public\Desktop\Eraser.lnk
2014-01-26 22:46 - 2014-01-26 22:46 - 00000000 ____D D:\Program Files\Eraser
2014-01-26 22:45 - 2014-01-26 22:45 - 09110456 _____ (The Eraser Project) C:\Users\jan\Downloads\Eraser_6.0.10.2620.exe
2014-01-25 15:56 - 2014-01-25 15:57 - 00000000 ____D C:\Users\jan\Desktop\Neuer Ordner (5)
2014-01-22 21:41 - 2014-01-22 21:47 - 69437443 _____ C:\Users\jan\Downloads\wm_1.30.4_beta_r593.zip
2014-01-22 10:46 - 2014-01-22 10:46 - 03351206 _____ C:\Users\jan\Downloads\powder-89.0-win32.zip
2014-01-21 14:36 - 2014-01-21 14:39 - 00000000 ____D C:\AdwCleaner
2014-01-21 14:36 - 2014-01-21 14:36 - 01236282 _____ C:\Users\jan\Downloads\adwcleaner.exe
2014-01-21 05:36 - 2014-01-26 15:21 - 00000000 ____D C:\Users\jan\AppData\Local\TSVNCache
2014-01-20 20:43 - 2014-01-20 20:44 - 36797892 _____ C:\Users\jan\Downloads\vx_rtp102e.zip
2014-01-20 20:40 - 2009-10-23 00:00 - 00761856 _____ C:\Windows\SysWOW64\RGSS104J.dll
2014-01-20 20:40 - 2009-10-23 00:00 - 00758272 _____ C:\Windows\SysWOW64\RGSS104E.dll
2014-01-20 20:40 - 2007-05-11 00:00 - 00685056 _____ C:\Windows\SysWOW64\RGSS103J.dll
2014-01-20 20:40 - 2005-08-30 00:00 - 00781312 _____ C:\Windows\SysWOW64\RGSS102J.dll
2014-01-20 20:40 - 2005-08-30 00:00 - 00778752 _____ C:\Windows\SysWOW64\RGSS102E.dll
2014-01-20 20:40 - 2005-08-30 00:00 - 00771584 _____ C:\Windows\SysWOW64\RGSS100J.dll
2014-01-20 20:37 - 2014-01-20 20:37 - 22994937 _____ (Enterbrain                                                  ) C:\Users\jan\Downloads\xp_rtp104e.exe
2014-01-20 20:35 - 2014-01-20 21:19 - 00000000 ____D C:\Users\jan\AppData\Roaming\TortoiseSVN
2014-01-20 20:35 - 2014-01-20 20:35 - 00000000 ____D C:\Users\jan\AppData\Roaming\Subversion
2014-01-20 20:24 - 2014-01-20 20:24 - 00000000 ____D D:\Program Files\TortoiseSVN
2014-01-20 20:24 - 2014-01-20 20:24 - 00000000 ____D D:\Program Files\Common Files\TortoiseOverlays
2014-01-20 17:24 - 2014-01-20 17:27 - 19361792 _____ C:\Users\jan\Downloads\TortoiseSVN-1.8.4.24972-x64-svn-1.8.5.msi
2014-01-20 15:59 - 2013-11-27 04:53 - 53629063 _____ C:\Users\jan\Downloads\1385524417861.zip
2014-01-19 21:02 - 2014-01-19 21:02 - 00000000 ____D D:\Program Files (x86)\K-Lite Codec Pack
2014-01-19 21:02 - 2013-12-01 14:10 - 00257624 _____ C:\Windows\system32\unrar64.dll
2014-01-19 21:02 - 2013-12-01 14:10 - 00218200 _____ C:\Windows\SysWOW64\unrar.dll
2014-01-19 21:01 - 2014-01-19 21:01 - 27145161 _____ (                                                            ) C:\Users\jan\Downloads\K-Lite_Codec_Pack_1020_Full.exe
2014-01-19 21:01 - 2014-01-19 21:01 - 00614784 _____ (Chip Digital GmbH) C:\Users\jan\Downloads\K Lite Codec Pack Full - CHIP-Downloader.exe
2014-01-19 20:13 - 2014-01-19 20:13 - 00000000 ____D C:\Users\jan\Documents\Activision
2014-01-18 22:53 - 2014-01-18 22:57 - 00000000 ____D C:\Users\jan\Downloads\hacked
2014-01-18 22:38 - 2014-01-18 22:38 - 09671801 _____ C:\Users\jan\Downloads\DotNetZipLib-DevKit-v1.9.zip
2014-01-18 22:08 - 2014-01-18 22:08 - 00000000 ____D D:\Program Files (x86)\PicoZipRT
2014-01-18 22:07 - 2014-01-18 22:07 - 00861616 _____ (Download Manager                              ) C:\Users\jan\Downloads\setup.exe
2014-01-18 22:06 - 2014-01-18 22:06 - 00665840 _____ (Conduit) C:\Users\jan\Downloads\PicoZipRT.exe
2014-01-18 21:57 - 2014-01-18 22:04 - 00000000 ____D D:\Program Files (x86)\Appnimi
2014-01-18 21:57 - 2014-01-18 22:04 - 00000000 ____D C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Appnimi
2014-01-18 21:57 - 2014-01-18 21:57 - 00000000 ____D C:\Users\jan\AppData\Local\Appnimi ZIP Password Kit
2014-01-18 21:55 - 2014-01-18 21:55 - 05191673 _____ C:\Users\jan\Downloads\Appnimi-ZIP-Password-Kit-Setup-Free-20130911-1.0.zip
2014-01-18 21:52 - 2014-01-18 21:52 - 00000000 ____D D:\Program Files (x86)\FDRLab
2014-01-18 21:51 - 2014-01-18 21:51 - 00739276 _____ (FDRLab Data Recovery Centre                                 ) C:\Users\jan\Downloads\zip_password_tool_setup.exe
2014-01-17 22:40 - 2014-01-17 22:40 - 00000000 ____D C:\Windows\pss
2014-01-15 18:43 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 18:43 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 18:43 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 18:43 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 18:43 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 18:43 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 18:43 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 18:43 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 18:43 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-12 17:16 - 2014-01-12 17:16 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-01-12 17:16 - 2014-01-12 17:16 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-01-12 17:16 - 2014-01-12 17:16 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-01-12 17:16 - 2014-01-12 17:16 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-01-12 17:16 - 2014-01-12 17:16 - 00000000 ____D D:\Program Files (x86)\OpenAL
2014-01-12 16:45 - 2014-01-12 16:47 - 00000000 ____D D:\Program Files (x86)\mIRC
2014-01-12 16:45 - 2014-01-12 16:47 - 00000000 ____D C:\Users\jan\AppData\Roaming\mIRC
2014-01-12 16:45 - 2014-01-12 16:45 - 00000878 _____ C:\Users\Public\Desktop\mIRC.lnk
2014-01-12 11:44 - 2014-01-12 11:44 - 00000000 ____D C:\Users\jan\AppData\Roaming\StarDrive
2014-01-12 11:11 - 2014-01-12 11:44 - 00000000 ____D C:\Users\jan\Documents\Endless Space
2014-01-11 13:33 - 2012-11-28 07:26 - 00483328 _____ (Simon Tatham) C:\Users\jan\Desktop\putty.exe
2014-01-11 01:17 - 2014-01-11 00:13 - 1861694976 _____ C:\Users\jan\Desktop\Debian.vhd
2014-01-10 22:43 - 2014-01-10 22:43 - 00000000 ____D C:\Users\jan\.ssh
2014-01-09 23:48 - 2014-01-27 04:00 - 00000000 ____D C:\Windows\Minidump
2014-01-09 23:30 - 2014-01-09 23:32 - 290455552 _____ C:\Users\jan\Downloads\debian-7.3.0-i386-netinst.iso
2014-01-09 23:17 - 2014-01-11 01:27 - 00000000 ____D C:\Users\jan\VirtualBox VMs
2014-01-09 23:10 - 2014-01-26 22:44 - 00000000 ____D C:\Users\jan\.VirtualBox
2014-01-09 23:10 - 2014-01-09 23:10 - 00000973 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2014-01-09 23:10 - 2013-12-18 17:19 - 00252688 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2014-01-09 23:09 - 2014-01-09 23:09 - 00000000 ____D D:\Program Files\Oracle
2014-01-09 23:09 - 2013-12-18 17:16 - 00126736 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2014-01-09 22:37 - 2014-01-09 22:37 - 00000000 ____D D:\Program Files (x86)\Git
2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\jan\AppData\Roaming\Composer
2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\jan\AppData\Local\Composer
2014-01-09 22:17 - 2014-01-09 22:17 - 00000000 ____D D:\Program Files (x86)\ComposerSetup
2014-01-09 22:17 - 2014-01-09 22:17 - 00000000 ____D C:\ProgramData\ComposerSetup
2014-01-09 21:24 - 2014-01-09 21:24 - 00000000 ____D C:\Users\jan\.WebIde70
2014-01-09 21:23 - 2014-01-09 21:23 - 00000798 _____ C:\Users\Public\Desktop\JetBrains PhpStorm 7.1.lnk
2014-01-06 23:41 - 2014-01-06 23:41 - 00000000 ____D C:\Users\jan\AppData\Local\Intel_Corporation
2014-01-06 23:40 - 2014-01-06 23:40 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_INETMON_01011.Wdf
2014-01-06 23:40 - 2013-08-01 17:01 - 00029088 _____ C:\Windows\system32\Drivers\INETMON.sys
2014-01-06 23:20 - 2014-01-06 23:20 - 00004614 _____ C:\Windows\DPINST.LOG
2014-01-04 07:33 - 2014-01-04 07:33 - 00000000 _____ C:\Users\jan\agent.log
2014-01-04 07:24 - 2014-01-04 07:24 - 00001910 _____ C:\Users\Public\Desktop\Live Update 5.lnk
2014-01-04 07:24 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll
2014-01-04 06:44 - 2014-01-04 06:44 - 00000000 ____D C:\Users\jan\Desktop\7816v16
2014-01-04 06:39 - 2014-01-04 06:39 - 00000000 ____D D:\Program Files\Realtek
2014-01-04 06:39 - 2014-01-04 06:39 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2014-01-04 06:39 - 2013-12-10 20:20 - 03771352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-01-04 06:39 - 2013-12-10 10:17 - 00693385 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-01-04 06:39 - 2013-12-09 16:15 - 01998104 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2014-01-04 06:39 - 2013-12-09 16:15 - 01727256 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2014-01-04 06:39 - 2013-12-06 17:29 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-01-04 06:39 - 2013-12-05 20:21 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-01-04 06:39 - 2013-12-04 16:27 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-01-04 06:39 - 2013-11-26 17:26 - 00618200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-01-04 06:39 - 2013-11-25 15:59 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-01-04 06:39 - 2013-11-25 15:59 - 02588888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-01-04 06:39 - 2013-11-14 15:49 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-01-04 06:39 - 2013-11-13 18:52 - 01013504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-01-04 06:39 - 2013-11-13 18:10 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-01-04 06:39 - 2013-11-13 18:07 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-01-04 06:39 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-01-04 06:39 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-01-04 06:39 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-01-04 06:39 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-01-04 06:39 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-01-04 06:39 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-01-04 06:39 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-01-04 06:39 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-01-04 06:39 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-01-04 06:39 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-01-04 06:39 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-01-04 06:39 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-01-04 06:39 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-01-04 06:39 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-01-04 06:39 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-01-04 06:39 - 2009-11-18 07:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-01-04 06:38 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-01-04 06:38 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-01-04 06:38 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-01-04 06:38 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-01-04 06:37 - 2014-01-04 06:37 - 00000000 ____D D:\Program Files (x86)\Realtek
2014-01-04 06:27 - 2014-01-04 06:27 - 00000000 _____ C:\Windows\SysWOW64\agent.log
2014-01-04 06:26 - 2014-01-08 20:50 - 00000000 ____D D:\Program Files\Intel
2014-01-04 06:26 - 2014-01-08 20:50 - 00000000 ____D D:\Program Files (x86)\Intel
2014-01-04 06:26 - 2014-01-08 20:50 - 00000000 ____D C:\ProgramData\Intel
2014-01-04 06:26 - 2014-01-04 06:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-01-04 06:11 - 2014-01-04 06:11 - 00000988 _____ C:\Users\jan\Desktop\KeePass 2.lnk
2014-01-01 02:05 - 2014-01-01 02:05 - 00000000 ____D C:\Users\jan\Documents\Another World
2013-12-30 02:52 - 2013-12-30 02:52 - 00000000 ____D C:\Users\jan\Desktop\SS
2013-12-29 19:22 - 2013-12-29 19:22 - 00000000 ____D C:\Users\jan\AppData\Local\My Games
2013-12-29 18:18 - 2014-01-12 20:31 - 00281688 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-12-29 18:18 - 2013-12-29 18:18 - 00000000 ____D C:\Users\jan\AppData\Local\PunkBuster
2013-12-29 17:53 - 2014-01-12 20:31 - 00281688 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-29 17:53 - 2014-01-12 19:14 - 00281688 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-29 17:53 - 2013-12-29 18:57 - 00000000 ____D C:\Users\jan\AppData\Local\Ubisoft Game Launcher
2013-12-29 17:53 - 2013-12-29 17:53 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-29 17:53 - 2013-12-29 17:53 - 00001076 _____ C:\Users\jan\Desktop\Uplay.lnk
2013-12-29 17:53 - 2013-12-29 17:53 - 00000000 ____D D:\Program Files (x86)\Ubisoft
2013-12-29 17:53 - 2013-12-29 17:53 - 00000000 ____D C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-29 09:35 - 2013-12-29 09:35 - 00000000 ____D D:\Program Files (x86)\Dungeon Defenders
2013-12-29 09:35 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-12-29 09:35 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-12-29 09:35 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-12-29 09:35 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-12-29 09:35 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-12-29 09:35 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-12-29 09:35 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-12-29 09:35 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-12-29 09:34 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-12-29 09:34 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-12-29 09:34 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-12-29 09:34 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-12-29 09:34 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-12-29 09:34 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-12-29 09:34 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-12-28 08:02 - 2013-12-28 08:03 - 00000000 ____D C:\Users\jan\Desktop\DF
2013-12-28 08:02 - 2013-12-28 08:02 - 00000000 ____D C:\Users\jan\Desktop\DwarfTherapist-0.6.12

==================== One Month Modified Files and Folders =======

2014-01-27 04:29 - 2014-01-27 04:29 - 00015208 _____ C:\Users\jan\Downloads\FRST.txt
2014-01-27 04:29 - 2014-01-27 04:29 - 00000000 ____D C:\FRST
2014-01-27 04:26 - 2013-09-03 22:39 - 00000000 ____D C:\Users\jan\AppData\Roaming\Skype
2014-01-27 04:24 - 2014-01-27 04:24 - 02078208 _____ (Farbar) C:\Users\jan\Downloads\FRST64.exe
2014-01-27 04:24 - 2014-01-27 04:06 - 00000000 ____D D:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-27 04:23 - 2014-01-27 04:23 - 00050477 _____ C:\Users\jan\Downloads\Defogger.exe
2014-01-27 04:23 - 2014-01-27 04:23 - 00000538 _____ C:\Users\jan\Downloads\defogger_disable.log
2014-01-27 04:23 - 2014-01-27 04:23 - 00000168 _____ C:\Users\jan\defogger_reenable
2014-01-27 04:23 - 2013-09-03 21:52 - 00000000 ____D C:\Users\jan
2014-01-27 04:21 - 2009-07-14 05:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 04:21 - 2009-07-14 05:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 04:12 - 2013-09-04 18:35 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-27 04:07 - 2014-01-27 04:07 - 00001250 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-01-27 04:07 - 2014-01-27 04:06 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-27 04:00 - 2014-01-09 23:48 - 00000000 ____D C:\Windows\Minidump
2014-01-27 03:58 - 2014-01-27 03:55 - 00006585 _____ C:\Users\jan\Downloads\hijackthis.log
2014-01-27 03:57 - 2014-01-27 03:57 - 40658208 _____ (Safer-Networking Ltd.                                       ) C:\Users\jan\Downloads\spybot-2.2.exe
2014-01-27 03:55 - 2014-01-27 03:55 - 00388608 _____ (Trend Micro Inc.) C:\Users\jan\Downloads\HiJackThis204.exe
2014-01-27 03:00 - 2013-09-03 21:52 - 01912073 _____ C:\Windows\WindowsUpdate.log
2014-01-26 22:46 - 2014-01-26 22:46 - 00001674 _____ C:\Users\Public\Desktop\Eraser.lnk
2014-01-26 22:46 - 2014-01-26 22:46 - 00000000 ____D D:\Program Files\Eraser
2014-01-26 22:45 - 2014-01-26 22:45 - 09110456 _____ (The Eraser Project) C:\Users\jan\Downloads\Eraser_6.0.10.2620.exe
2014-01-26 22:44 - 2014-01-09 23:10 - 00000000 ____D C:\Users\jan\.VirtualBox
2014-01-26 22:44 - 2013-10-09 19:57 - 00000600 _____ C:\Users\jan\AppData\Local\PUTTY.RND
2014-01-26 22:44 - 2013-09-03 22:41 - 00000000 ____D C:\Users\jan\AppData\Roaming\KeePass
2014-01-26 19:52 - 2013-09-03 22:41 - 00000000 ____D C:\Users\jan\Documents\Keepas
2014-01-26 17:37 - 2013-09-04 18:32 - 00000000 ____D D:\Program Files (x86)\Steam
2014-01-26 17:36 - 2009-07-14 18:58 - 00699416 _____ C:\Windows\system32\perfh007.dat
2014-01-26 17:36 - 2009-07-14 18:58 - 00149556 _____ C:\Windows\system32\perfc007.dat
2014-01-26 17:36 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-26 17:30 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-26 15:21 - 2014-01-21 05:36 - 00000000 ____D C:\Users\jan\AppData\Local\TSVNCache
2014-01-25 15:57 - 2014-01-25 15:56 - 00000000 ____D C:\Users\jan\Desktop\Neuer Ordner (5)
2014-01-25 14:21 - 2013-09-04 18:27 - 00000000 ____D C:\Users\jan\AppData\Roaming\TS3Client
2014-01-25 02:41 - 2013-12-12 13:46 - 00000000 ____D C:\Users\jan\AppData\Roaming\RenPy
2014-01-24 23:09 - 2013-11-07 20:14 - 00000000 ____D C:\Users\jan\AppData\Local\CrashDumps
2014-01-24 20:24 - 2013-10-05 18:40 - 00000000 ____D C:\Users\jan\Documents\Visual Studio 2012
2014-01-24 16:34 - 2013-09-04 18:19 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-22 10:46 - 2014-01-22 10:46 - 03351206 _____ C:\Users\jan\Downloads\powder-89.0-win32.zip
2014-01-21 14:39 - 2014-01-21 14:36 - 00000000 ____D C:\AdwCleaner
2014-01-21 14:37 - 2013-09-03 22:33 - 00000948 _____ C:\Users\jan\Desktop\Mozilla Firefox.lnk
2014-01-21 14:37 - 2013-09-03 21:52 - 00000862 _____ C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-21 14:36 - 2014-01-21 14:36 - 01236282 _____ C:\Users\jan\Downloads\adwcleaner.exe
2014-01-20 21:19 - 2014-01-20 20:35 - 00000000 ____D C:\Users\jan\AppData\Roaming\TortoiseSVN
2014-01-20 20:44 - 2014-01-20 20:43 - 36797892 _____ C:\Users\jan\Downloads\vx_rtp102e.zip
2014-01-20 20:37 - 2014-01-20 20:37 - 22994937 _____ (Enterbrain                                                  ) C:\Users\jan\Downloads\xp_rtp104e.exe
2014-01-20 20:35 - 2014-01-20 20:35 - 00000000 ____D C:\Users\jan\AppData\Roaming\Subversion
2014-01-20 20:24 - 2014-01-20 20:24 - 00000000 ____D D:\Program Files\TortoiseSVN
2014-01-20 20:24 - 2014-01-20 20:24 - 00000000 ____D D:\Program Files\Common Files\TortoiseOverlays
2014-01-20 17:27 - 2014-01-20 17:24 - 19361792 _____ C:\Users\jan\Downloads\TortoiseSVN-1.8.4.24972-x64-svn-1.8.5.msi
2014-01-19 21:02 - 2014-01-19 21:02 - 00000000 ____D D:\Program Files (x86)\K-Lite Codec Pack
2014-01-19 21:01 - 2014-01-19 21:01 - 27145161 _____ (                                                            ) C:\Users\jan\Downloads\K-Lite_Codec_Pack_1020_Full.exe
2014-01-19 21:01 - 2014-01-19 21:01 - 00614784 _____ (Chip Digital GmbH) C:\Users\jan\Downloads\K Lite Codec Pack Full - CHIP-Downloader.exe
2014-01-19 20:19 - 2013-09-05 06:16 - 00471679 _____ C:\Windows\DirectX.log
2014-01-19 20:13 - 2014-01-19 20:13 - 00000000 ____D C:\Users\jan\Documents\Activision
2014-01-19 15:13 - 2013-09-04 21:54 - 00256122 _____ C:\Windows\PFRO.log
2014-01-19 00:24 - 2013-09-05 12:05 - 00000000 ____D C:\Users\jan\Documents\my games
2014-01-18 22:57 - 2014-01-18 22:53 - 00000000 ____D C:\Users\jan\Downloads\hacked
2014-01-18 22:38 - 2014-01-18 22:38 - 09671801 _____ C:\Users\jan\Downloads\DotNetZipLib-DevKit-v1.9.zip
2014-01-18 22:08 - 2014-01-18 22:08 - 00000000 ____D D:\Program Files (x86)\PicoZipRT
2014-01-18 22:08 - 2011-06-11 00:58 - 00773680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll
2014-01-18 22:08 - 2011-06-11 00:58 - 00420912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll
2014-01-18 22:07 - 2014-01-18 22:07 - 00861616 _____ (Download Manager                              ) C:\Users\jan\Downloads\setup.exe
2014-01-18 22:06 - 2014-01-18 22:06 - 00665840 _____ (Conduit) C:\Users\jan\Downloads\PicoZipRT.exe
2014-01-18 22:04 - 2014-01-18 21:57 - 00000000 ____D D:\Program Files (x86)\Appnimi
2014-01-18 22:04 - 2014-01-18 21:57 - 00000000 ____D C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Appnimi
2014-01-18 21:57 - 2014-01-18 21:57 - 00000000 ____D C:\Users\jan\AppData\Local\Appnimi ZIP Password Kit
2014-01-18 21:55 - 2014-01-18 21:55 - 05191673 _____ C:\Users\jan\Downloads\Appnimi-ZIP-Password-Kit-Setup-Free-20130911-1.0.zip
2014-01-18 21:52 - 2014-01-18 21:52 - 00000000 ____D D:\Program Files (x86)\FDRLab
2014-01-18 21:51 - 2014-01-18 21:51 - 00739276 _____ (FDRLab Data Recovery Centre                                 ) C:\Users\jan\Downloads\zip_password_tool_setup.exe
2014-01-17 22:40 - 2014-01-17 22:40 - 00000000 ____D C:\Windows\pss
2014-01-17 21:20 - 2013-09-03 22:29 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-16 06:31 - 2009-07-14 05:45 - 00325808 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 23:40 - 2013-09-04 23:11 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 23:39 - 2013-09-04 23:11 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-12 20:31 - 2013-12-29 18:18 - 00281688 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2014-01-12 20:31 - 2013-12-29 17:53 - 00281688 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-12 19:14 - 2013-12-29 17:53 - 00281688 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-12 17:16 - 2014-01-12 17:16 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-01-12 17:16 - 2014-01-12 17:16 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-01-12 17:16 - 2014-01-12 17:16 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-01-12 17:16 - 2014-01-12 17:16 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-01-12 17:16 - 2014-01-12 17:16 - 00000000 ____D D:\Program Files (x86)\OpenAL
2014-01-12 16:47 - 2014-01-12 16:45 - 00000000 ____D D:\Program Files (x86)\mIRC
2014-01-12 16:47 - 2014-01-12 16:45 - 00000000 ____D C:\Users\jan\AppData\Roaming\mIRC
2014-01-12 16:45 - 2014-01-12 16:45 - 00000878 _____ C:\Users\Public\Desktop\mIRC.lnk
2014-01-12 11:44 - 2014-01-12 11:44 - 00000000 ____D C:\Users\jan\AppData\Roaming\StarDrive
2014-01-12 11:44 - 2014-01-12 11:11 - 00000000 ____D C:\Users\jan\Documents\Endless Space
2014-01-12 01:48 - 2013-12-15 12:00 - 00000000 ____D C:\Users\jan\AppData\Local\Game Dev Tycoon - Steam
2014-01-11 15:31 - 2013-09-24 16:56 - 00000000 ____D C:\Users\jan\AppData\Roaming\FileZilla
2014-01-11 01:27 - 2014-01-09 23:17 - 00000000 ____D C:\Users\jan\VirtualBox VMs
2014-01-11 00:13 - 2014-01-11 01:17 - 1861694976 _____ C:\Users\jan\Desktop\Debian.vhd
2014-01-10 22:43 - 2014-01-10 22:43 - 00000000 ____D C:\Users\jan\.ssh
2014-01-09 23:32 - 2014-01-09 23:30 - 290455552 _____ C:\Users\jan\Downloads\debian-7.3.0-i386-netinst.iso
2014-01-09 23:10 - 2014-01-09 23:10 - 00000973 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2014-01-09 23:09 - 2014-01-09 23:09 - 00000000 ____D D:\Program Files\Oracle
2014-01-09 22:37 - 2014-01-09 22:37 - 00000000 ____D D:\Program Files (x86)\Git
2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\jan\AppData\Roaming\Composer
2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\jan\AppData\Local\Composer
2014-01-09 22:17 - 2014-01-09 22:17 - 00000000 ____D D:\Program Files (x86)\ComposerSetup
2014-01-09 22:17 - 2014-01-09 22:17 - 00000000 ____D C:\ProgramData\ComposerSetup
2014-01-09 21:24 - 2014-01-09 21:24 - 00000000 ____D C:\Users\jan\.WebIde70
2014-01-09 21:23 - 2014-01-09 21:23 - 00000798 _____ C:\Users\Public\Desktop\JetBrains PhpStorm 7.1.lnk
2014-01-09 21:23 - 2013-09-12 12:33 - 00000000 ____D C:\Users\jan\.WebIde60
2014-01-09 21:23 - 2013-09-12 12:32 - 00000000 ____D D:\Program Files (x86)\JetBrains
2014-01-09 21:16 - 2013-10-28 19:07 - 00734699 _____ C:\Users\jan\Desktop\FTB_Launcher.jar
2014-01-09 21:16 - 2013-09-04 18:44 - 00000000 ____D C:\Users\jan\AppData\Roaming\ftblauncher
2014-01-08 21:56 - 2014-01-08 21:56 - 00530764 _____ C:\Users\jan\Downloads\WGRPG Dev 0.33.1.jar
2014-01-08 20:51 - 2013-09-03 22:29 - 00000000 ____D D:\Program Files (x86)\NVIDIA Corporation
2014-01-08 20:50 - 2014-01-04 06:26 - 00000000 ____D D:\Program Files\Intel
2014-01-08 20:50 - 2014-01-04 06:26 - 00000000 ____D D:\Program Files (x86)\Intel
2014-01-08 20:50 - 2014-01-04 06:26 - 00000000 ____D C:\ProgramData\Intel
2014-01-08 20:50 - 2013-09-03 22:25 - 01593956 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-06 23:41 - 2014-01-06 23:41 - 00000000 ____D C:\Users\jan\AppData\Local\Intel_Corporation
2014-01-06 23:40 - 2014-01-06 23:40 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_INETMON_01011.Wdf
2014-01-06 23:20 - 2014-01-06 23:20 - 00004614 _____ C:\Windows\DPINST.LOG
2014-01-05 12:55 - 2013-09-04 18:35 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-05 12:55 - 2013-09-04 18:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-05 12:55 - 2013-09-04 18:35 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-04 18:09 - 2013-09-07 22:21 - 00007665 _____ C:\Users\jan\AppData\Local\resmon.resmoncfg
2014-01-04 07:41 - 2013-09-04 18:07 - 00000000 ____D C:\Users\jan\AppData\Local\KeePass
2014-01-04 07:33 - 2014-01-04 07:33 - 00000000 _____ C:\Users\jan\agent.log
2014-01-04 07:24 - 2014-01-04 07:24 - 00001910 _____ C:\Users\Public\Desktop\Live Update 5.lnk
2014-01-04 07:24 - 2013-09-03 22:20 - 00000000 ____D D:\Program Files (x86)\MSI
2014-01-04 06:44 - 2014-01-04 06:44 - 00000000 ____D C:\Users\jan\Desktop\7816v16
2014-01-04 06:39 - 2014-01-04 06:39 - 00000000 ____D D:\Program Files\Realtek
2014-01-04 06:39 - 2014-01-04 06:39 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2014-01-04 06:38 - 2013-09-13 10:25 - 00000000 ___HD D:\Program Files (x86)\InstallShield Installation Information
2014-01-04 06:37 - 2014-01-04 06:37 - 00000000 ____D D:\Program Files (x86)\Realtek
2014-01-04 06:27 - 2014-01-04 06:27 - 00000000 _____ C:\Windows\SysWOW64\agent.log
2014-01-04 06:26 - 2014-01-04 06:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-01-04 06:11 - 2014-01-04 06:11 - 00000988 _____ C:\Users\jan\Desktop\KeePass 2.lnk
2014-01-04 06:11 - 2013-09-03 22:40 - 00000000 ____D D:\Program Files (x86)\KeePass Password Safe 2
2014-01-01 02:05 - 2014-01-01 02:05 - 00000000 ____D C:\Users\jan\Documents\Another World
2013-12-30 02:52 - 2013-12-30 02:52 - 00000000 ____D C:\Users\jan\Desktop\SS
2013-12-29 19:22 - 2013-12-29 19:22 - 00000000 ____D C:\Users\jan\AppData\Local\My Games
2013-12-29 18:57 - 2013-12-29 17:53 - 00000000 ____D C:\Users\jan\AppData\Local\Ubisoft Game Launcher
2013-12-29 18:18 - 2013-12-29 18:18 - 00000000 ____D C:\Users\jan\AppData\Local\PunkBuster
2013-12-29 17:53 - 2013-12-29 17:53 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-29 17:53 - 2013-12-29 17:53 - 00001076 _____ C:\Users\jan\Desktop\Uplay.lnk
2013-12-29 17:53 - 2013-12-29 17:53 - 00000000 ____D D:\Program Files (x86)\Ubisoft
2013-12-29 17:53 - 2013-12-29 17:53 - 00000000 ____D C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-29 09:37 - 2013-11-09 11:23 - 00000000 ____D C:\Users\jan\AppData\Local\Paint.NET
2013-12-29 09:35 - 2013-12-29 09:35 - 00000000 ____D D:\Program Files (x86)\Dungeon Defenders
2013-12-28 10:21 - 2013-11-03 22:11 - 00000000 ____D C:\Users\jan\AppData\Roaming\Audacity
2013-12-28 08:03 - 2013-12-28 08:02 - 00000000 ____D C:\Users\jan\Desktop\DF
2013-12-28 08:02 - 2013-12-28 08:02 - 00000000 ____D C:\Users\jan\Desktop\DwarfTherapist-0.6.12
2013-12-28 07:05 - 2013-11-17 00:48 - 00000000 ____D C:\Users\jan\Desktop\Gorleben

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-20 18:01

==================== End Of Log ============================
         
Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-01-2014 02
Ran by jan at 2014-01-27 04:29:38
Running from C:\Users\jan\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

 Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
 Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
.sol Editor 1.1.0.1 (x32 Version: 1.1.0.1 - alexisisaac.net)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
AC3Filter 2.6.0b (x32 Version: 2.6.0b - Alexander Vigovsky)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player ActiveX (x32 Version: 9.0.124.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Amnesia: The Dark Descent (x32 Version:  - Frictional Games)
Another World (x32 Version:  - Eric Chahi)
Audacity 2.0.5 (x32 Version: 2.0.5 - Audacity Team)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Camtasia Studio 8 (x32 Version: 8.1.2.1344 - TechSmith Corporation)
Castle Story (x32 Version:  - Sauropod Studio)
Centration Alpha (x32 Version:  - )
Cheat Engine 6.3 (x32 Version:  - Cheat Engine)
Cities in Motion 2 (x32 Version:  - Colossal Order Ltd.)
Composer - Php Dependency Manager (x32 Version:  - getcomposer.org)
Counter-Strike: Source (x32 Version:  - Valve)
Cube World version 0.0.1 (x32 Version: 0.0.1 - Picroma)
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
Darksiders (x32 Version:  - Vigil Games)
Desura (x32 Version: 100.53 - Desura)
Desura: Project Zomboid (x32 Version: Alpha - The Indie Stone)
Deus Ex: Human Revolution (x32 Version:  - Eidos Montreal)
Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Divinity II: Developer's Cut (x32 Version:  - Larian Studios)
Don't Starve (x32 Version:  - Klei Entertainment)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Dragon Age: Origins - Ultimate Edition (x32 Version:  - BioWare)
Dungeon Defenders (x32 Version:  - Trendy Entertainment)
EA Download Manager (x32 Version: 5.0.0.255 - Electronic Arts, Inc.)
Endless Space (x32 Version:  - AMPLITUDE Studios)
Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.21009.00 - Microsoft Corporation)
Eraser 6.0.10.2620 (Version: 6.0.2620 - The Eraser Project)
Erforderliche Komponenten für SSDT  (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Evil Genius (x32 Version:  - Elixir Studios)
Fable III (x32 Version:  - Lionhead Studios)
Far Cry® 3 (x32 Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
FileZilla Client 3.7.3 (x32 Version: 3.7.3 - Tim Kosse)
FINAL FANTASY VII (x32 Version:  - Square Enix)
FINAL FANTASY VIII (x32 Version:  - SQUARE ENIX)
Folk Tale (x32 Version:  - Games Foundry)
Fraps (remove only) (x32 Version:  - )
FTL: Faster Than Light (x32 Version:  - Subset Games)
Game Dev Tycoon (x32 Version:  - Greenheart Games)
Garry's Mod (x32 Version:  - Facepunch Studios) <==== ATTENTION
Git version 1.8.5.2-preview20131230 (x32 Version: 1.8.5.2-preview20131230 - The Git Development Community)
Gnomoria (x32 Version:  - Robotronic Games)
Godus (x32 Version:  - )
Grand Theft Auto IV (x32 Version:  - Rockstar North)
Grand Theft Auto: Episodes from Liberty City (x32 Version:  - Rockstar North / Toronto)
Gunpoint (x32 Version:  - Suspicious Developments)
Half-Life (x32 Version:  - Valve)
Half-Life 2 (x32 Version:  - Valve)
Half-Life 2: Episode One (x32 Version:  - Valve)
Half-Life 2: Episode Two (x32 Version:  - Valve)
Hydrophobia: Prophecy (x32 Version:  - Dark Energy Digital Ltd.)
IIS 8.0 Express (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (Version:  - )
IIS Express Application Compatibility Database for x86 (Version:  - )
Impire (x32 Version:  - Cyanide Montreal)
Infestation Survivor Stories version 1.0 (x32 Version: 1.0 - OP Productions LLC)
Intel(R) Smart Connect Technology (Version: 4.2.40.2418 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden
Java 7 Update 17 (x32 Version: 7.0.170 - Oracle)
Java 7 Update 25 (x32 Version: 7.0.250 - Oracle)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 45 (x32 Version: 6.0.450 - Oracle)
JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden
JavaScript Tooling (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
JetBrains PhpStorm 7.1 (x32 Version: 133.326 - JetBrains s.r.o.)
KeePass Password Safe 2.24 (x32 Version: 2.24 - Dominik Reichl)
Kenshi (x32 Version:  - Lo-Fi Games)
Kerbal Space Program (x32 Version:  - Squad)
Killing Floor (x32 Version:  - Tripwire Interactive)
K-Lite Codec Pack 10.2.0 Full (x32 Version: 10.2.0 - )
LAME v3.99.3 (for Windows) (x32 Version:  - )
LibreOffice 4.1.1.2 (x32 Version: 4.1.1.2 - The Document Foundation)
Little Fighter (x32 Version:  - )
Live Update 5 (x32 Version: 5.0.112 - MSI)
LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.50 (Version: 8.50.281 - Logitech Inc.)
Magic 2014 Demo (x32 Version:  - Stainless Games)
Magicka (x32 Version:  - Arrowhead Game Studios)
Metro 2033 (x32 Version:  - 4A Games)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20715.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (x32 Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.60517 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.60517 - Microsoft Corporation) Hidden
Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x32 Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (x32 Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012  x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation)
Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Git (x32 Version: 0.9.5.0 - Microsoft)
Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.26 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Web Deploy 3.0 (Version: 3.1236.1631 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 - deu (x32 Version: 1.2.40308.0 - Microsoft Corporation) Hidden
Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 (x32 Version: 1.2.40308.0 - Microsoft Corporation) Hidden
Microsoft Web Platform Installer 4.0 (Version: 4.0.1622 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60 - Microsoft Corporation)
mIRC (x32 Version: 7.32 - mIRC Co. Ltd.)
Monster Loves You! (x32 Version:  - Radial Games Corp)
Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0 - Mozilla)
Mozilla Firefox 26.0 (x86 de) (HKCU Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 25.0 - Mozilla)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (HKCU Version: 24.2.0 - Mozilla)
NEO Scavenger (x32 Version:  - Blue Bottle Games)
Notepad++ (x32 Version: 6.4.5 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 1.15.2 (Version: 1.15.2 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
OpenAL (x32 Version:  - )
Oracle VM VirtualBox 4.3.6 (Version: 4.3.6 - Oracle Corporation)
Paint.NET v3.5.11 (Version: 3.61.0 - dotPDN LLC)
Papers, Please (x32 Version:  - 3909)
Password Recovery Bundle 2013 (x32 Version:  - Top Password Software, Inc.)
PicoZip Recovery Tool 1.02 (x32 Version: 1.02 - Softchitect)
Plants vs. Zombies: Game of the Year (x32 Version:  - PopCap Games, Inc.)
PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
Prison Architect (x32 Version:  - Introversion Software)
Project Zomboid (x32 Version:  - Indie Stone Studios)
PROTOTYPE 2 (x32 Version:  - Radical Entertainment)
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
puush (x32 Version: 1.0.0.0 - Dean Herbert)
Rags Suite (x32 Version: 2.4.0 - RagsGame)
RAPTOR-GAMING LG2 (x32 Version: 1.00.0000 - My Company Name)
Realtek Ethernet Controller Driver (x32 Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.7111 - Realtek Semiconductor Corp.)
Reus (x32 Version:  - Abbey Games)
RGSS-RTP Standard (x32 Version: 1.04 - Enterbrain)
RPG Maker VX RTP (x32 Version: 1.02 - Enterbrain)
Saints Row IV (x32 Version:  - Deep Silver Volition)
Saints Row: The Third (x32 Version:  - Volition)
Scribblenauts Unlimited (x32 Version:  - 5th Cell Media)
Shotcut (x32 Version:  - )
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Space Engineers (x32 Version:  - )
Spacebase DF-9 (x32 Version:  - Double Fine)
Spellforce 2: Gold Edition (x32 Version:  - Phenomic)
Spybot - Search & Destroy (x32 Version: 2.2.25 - Safer-Networking Ltd.)
Star Ruler (x32 Version:  - Blind Mind Studios)
Star Wars Jedi Knight: Jedi Academy (x32 Version:  - Raven Software)
Starbound (x32 Version:  - )
StarCraft II (x32 Version: 2.0.11.26825 - Blizzard Entertainment)
StarDrive (x32 Version:  - Zero Sum Games)
Startopia (x32 Version:  - )
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Synergy (x32 Version:  - Synergy Team)
Team Fortress 2 (x32 Version:  - Valve)
TeamSpeak 3 Client (Version: 3.0.11 - TeamSpeak Systems GmbH)
Terraria (x32 Version:  - Re-Logic)
The Elder Scrolls V: Skyrim (x32 Version:  - Bethesda Game Studios)
The Guild II: Renaissance (x32 Version:  - Rune Forge)
The Witcher 2: Assassins of Kings Enhanced Edition (x32 Version:  - CD Projekt RED)
The Witcher: Enhanced Edition (x32 Version:  - CD Projekt RED)
TortoiseSVN 1.8.4.24972 (64 bit) (Version: 1.8.24972 - TortoiseSVN)
Trine 2 (x32 Version:  - Frozenbyte)
Update for  (KB2504637) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219 - Microsoft Corporation)
Uplay (x32 Version: 2.0 - Ubisoft)
Vampire: The Masquerade - Bloodlines (x32 Version:  - Troika Games)
Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Update 3 (KB2707250) (x32 Version: 11.0.60610 - Microsoft Corporation)
Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9201.20602 - Microsoft Corporation) Hidden
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0 - Microsoft Corporation)
Windows App Certification Kit Native Components (Version: 8.59.29736 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (x32 Version: 8.59.29750 - Microsoft Corporation) Hidden
Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601 - Microsoft) Hidden
Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601 - Microsoft) Hidden
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (Version: 11.0.51106 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
XCOM: Enemy Unknown (x32 Version:  - Firaxis Games)
Zeno Clash (x32 Version:  - ACE Team)

==================== Restore Points  =========================

21-01-2014 13:32:54 Windows Update
24-01-2014 15:39:48 Windows Update
26-01-2014 21:46:14 Installed Eraser 6.0.10.2620

==================== Hosts content: ==========================

2014-01-10 20:05 - 2014-01-10 22:56 - 00000896 ____A C:\Windows\system32\Drivers\etc\hosts
192.168.2.104       kiwigaming.de
192.168.2.104       dsa.kiwigaming.de


==================== Scheduled Tasks (whitelisted) =============

Task: {0E6B9BD0-C6C1-487F-A4F5-706457D745C1} - \Desk 365 RunAsStdUser No Task File
Task: {170F59A7-C49A-4883-8432-5DAF14914EEA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-05] (Adobe Systems Incorporated)
Task: {D5963FD4-5466-4F00-AB99-EA6658BAFD70} - System32\Tasks\avast! Emergency Update => D:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-27] (AVAST Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-11-24 13:37 - 2013-11-24 13:37 - 00075504 _____ () D:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2013-11-24 13:36 - 2013-11-24 13:36 - 00088304 _____ () D:\Program Files\TortoiseSVN\bin\libsasl.dll
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () d:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-01-09 22:37 - 2013-12-27 22:35 - 00721571 _____ () d:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () d:\Program Files (x86)\Notepad++\NppShell_05.dll
2014-01-26 15:22 - 2014-01-26 11:54 - 02166272 _____ () D:\Program Files\AVAST Software\Avast\defs\14012600\algo.dll
2014-01-27 01:32 - 2014-01-26 20:21 - 02166272 _____ () D:\Program Files\AVAST Software\Avast\defs\14012601\algo.dll
2013-11-24 12:48 - 2013-11-24 12:48 - 00065264 _____ () D:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll
2013-11-24 12:48 - 2013-11-24 12:48 - 00071408 _____ () D:\Program Files\TortoiseSVN\bin\libsasl32.dll
2014-01-08 18:31 - 2013-12-12 23:19 - 00142848 _____ () D:\Program Files (x86)\Steam\libavresample-1.dll
2014-01-08 18:31 - 2013-11-05 02:12 - 00890592 _____ () D:\Program Files (x86)\Steam\libavutil-52.dll
2013-08-21 13:18 - 2014-01-11 00:33 - 00717312 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2013-08-28 12:47 - 2014-01-25 01:06 - 01138088 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-08-07 10:31 - 2014-01-11 00:33 - 20625832 _____ () D:\Program Files (x86)\Steam\bin\libcef.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () D:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () D:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () D:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-12-04 17:26 - 2013-12-04 17:26 - 19336120 _____ () D:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-20 10:54 - 2013-12-20 10:54 - 03559024 _____ () D:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-27 04:06 - 2013-05-16 10:55 - 00113496 _____ () d:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-01-27 04:06 - 2013-05-16 10:55 - 00416600 _____ () d:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-01-27 04:06 - 2012-08-23 10:38 - 00574840 _____ () d:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-01-27 04:06 - 2013-05-16 10:55 - 00161112 _____ () d:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-01-27 04:06 - 2012-04-03 17:06 - 00565640 _____ () d:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-01-27 04:06 - 2013-05-16 10:55 - 00113496 _____ () D:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-01-27 04:06 - 2013-05-16 10:55 - 00416600 _____ () D:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-01-27 04:06 - 2013-05-16 10:55 - 00161112 _____ () D:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-12-13 23:53 - 2013-12-13 23:53 - 03017840 _____ () D:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-12-13 23:53 - 2013-12-13 23:53 - 00158832 _____ () D:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-12-13 23:53 - 2013-12-13 23:53 - 00023152 _____ () D:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:E8BE05FA

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/26/2014 11:41:07 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 1900. Meldungs-ID: [0x2509].

Error: (01/26/2014 11:30:52 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 4500. Meldungs-ID: [0x2509].

Error: (01/26/2014 11:24:34 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 4960. Meldungs-ID: [0x2509].

Error: (01/26/2014 10:51:00 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 6092. Meldungs-ID: [0x2509].

Error: (01/26/2014 10:46:14 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : RtlConvertNtFilePathToWin32Path() failed.

System Error:
0xC0000039 (unresolvable).

Error: (01/26/2014 10:46:14 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : RtlConvertNtFilePathToWin32Path() failed.

System Error:
0xC0000039 (unresolvable).

Error: (01/26/2014 05:31:12 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (01/26/2014 03:21:58 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (01/25/2014 04:02:15 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 292. Meldungs-ID: [0x2509].

Error: (01/25/2014 10:47:05 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall


System errors:
=============
Error: (01/27/2014 02:50:34 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 02:50:34 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 02:50:34 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 02:50:34 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 02:50:34 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 01:35:52 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 01:35:52 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 01:35:52 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 01:35:52 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error: (01/27/2014 01:35:52 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.


Microsoft Office Sessions:
=========================
Error: (01/26/2014 11:41:07 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 1900. Meldungs-ID: [0x2509].

Error: (01/26/2014 11:30:52 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 4500. Meldungs-ID: [0x2509].

Error: (01/26/2014 11:24:34 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 4960. Meldungs-ID: [0x2509].

Error: (01/26/2014 10:51:00 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 6092. Meldungs-ID: [0x2509].

Error: (01/26/2014 10:46:14 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddCoreCsiFiles : RtlConvertNtFilePathToWin32Path() failed.

System Error:
0xC0000039 (unresolvable)

Error: (01/26/2014 10:46:14 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddCoreCsiFiles : RtlConvertNtFilePathToWin32Path() failed.

System Error:
0xC0000039 (unresolvable)

Error: (01/26/2014 05:31:12 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (01/26/2014 03:21:58 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (01/25/2014 04:02:15 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.18408 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 292. Meldungs-ID: [0x2509].

Error: (01/25/2014 10:47:05 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall


==================== Memory info =========================== 

Percentage of memory in use: 24%
Total physical RAM: 16328.59 MB
Available physical RAM: 12284.16 MB
Total Pagefile: 18326.77 MB
Available Pagefile: 14526 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.24 GB) (Free:52.09 GB) NTFS
Drive d: (Programme) (Fixed) (Total:931.51 GB) (Free:528.53 GB) NTFS
Drive f: (Backup) (Fixed) (Total:931.51 GB) (Free:661.41 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (Debian 7.3.0 i38) (CDROM) (Total:0.27 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: A6169831)
Partition 1: (Not Active) - (Size=119 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: AFB3AFB3)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 87C23EA9)
Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
GMER im Anhang.

Mit freundlichem Gruß
Aivaria

Alt 27.01.2014, 07:07   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D - Standard

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D



hi,

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________

__________________

Alt 27.01.2014, 21:28   #3
Aivaria
 
Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D - Standard

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D



Hallo,

mbar gab nur einen Fund, und dieser ist mir bekannt (ist ein Prototyp für einen Server von mir geschrieben.)

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.01.27.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
jan :: RUPPY [administrator]

27.01.2014 20:59:13
mbar-log-2014-01-27 (20-59-13).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 296746
Time elapsed: 3 minute(s), 35 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\jan\Desktop\Gorleben\Server.exe (Spyware.Password) -> No action taken.

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         
__________________

Alt 28.01.2014, 15:37   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D - Standard

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D



Deaktiviere mal Avast so, dass es auch bei Neustart aus ist, dann rebooten und nochmal testen.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 28.01.2014, 16:28   #5
Aivaria
 
Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D - Standard

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D



mbar hat nun das gleiche Ergebnis gehabt:
Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.01.28.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
jan :: RUPPY [administrator]

28.01.2014 15:41:31
mbar-log-2014-01-28 (15-41-31).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 296003
Time elapsed: 3 minute(s), 39 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\jan\Desktop\Gorleben\Server.exe (Spyware.Password) -> No action taken.

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         


Alt 29.01.2014, 10:52   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D - Standard

Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D



Sorry, mit nochmal testen meinte ich eigentlich den Speed des Rechners, deine Probleme und so, ob die mit AV aus immer noch da sind
__________________
--> Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D

Antwort

Themen zu Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D
adblock, amplitude, antivirus, bho, desktop, fehler, festplatte, firefox, flash player, helper, hijack, hijackthis, home, homepage, iexplore.exe, launch, logfile, mozilla, prozess, realtek, refresh, registry, safer networking, scan, security, sekunden, software, starten, svchost.exe, virtualbox, windows




Ähnliche Themen: Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D


  1. Verdächtige Datei gestartet --> Installation mehrer Programme
    Plagegeister aller Art und deren Bekämpfung - 20.02.2015 (19)
  2. Nach Installation von DVDstyler kein Internet mehr und Programme lassen sich nicht starten
    Plagegeister aller Art und deren Bekämpfung - 27.01.2015 (13)
  3. nach Installation von adobe reader Probleme mit öffnen andere Programme
    Log-Analyse und Auswertung - 22.10.2014 (3)
  4. Nach Installation von SUPER2014 Programme aus Installationsübersicht verschwunden
    Log-Analyse und Auswertung - 24.04.2014 (9)
  5. win 8 hat beim starten probleme, programme EAC und dbPowamp spinnen
    Plagegeister aller Art und deren Bekämpfung - 27.12.2013 (3)
  6. Spybot S&D Log / Installation von Malwarebytes etc fehlgeschlageb bzw verhindert!
    Log-Analyse und Auswertung - 15.02.2013 (7)
  7. Wie Programme starten auf Laufwerk D?
    Alles rund um Windows - 23.08.2010 (7)
  8. Antivir und Spybot lassen sich nicht mehr starten
    Plagegeister aller Art und deren Bekämpfung - 25.01.2010 (5)
  9. malwarebytes und spybot werden im taskmanager zwar angezeigt starten aber nicht mehr!
    Log-Analyse und Auswertung - 17.01.2009 (1)
  10. WinXP-SP3: Bitdefender 10: Vsserv-Dienst lässt sich bei Installation nicht starten
    Alles rund um Windows - 16.01.2009 (3)
  11. Nach Spybot-Installation lahmes Inet
    Log-Analyse und Auswertung - 06.12.2008 (7)
  12. Programme starten nicht (exe)
    Log-Analyse und Auswertung - 21.01.2008 (0)
  13. Hilfe!!! CD Laufwerk springt immer auf & Spybot lässt sich nicht starten.
    Log-Analyse und Auswertung - 08.01.2008 (0)
  14. Spybot: Installation als Admin?
    Alles rund um Windows - 18.11.2007 (1)
  15. XP und Programme starten im langsamer!
    Log-Analyse und Auswertung - 12.08.2007 (6)
  16. Probleme mit dem PC, Programme lassen sich nicht starten
    Log-Analyse und Auswertung - 22.07.2007 (4)
  17. DEFAULT-ORDNER (nach SpyBot-Installation)
    Alles rund um Windows - 22.03.2005 (12)

Zum Thema Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D - Hallo, mir fiel heute beim Programmieren auf, dass mein Visual Studio bedeutsam länger brauch ein Programm zu starten / debuggen, als ich es sonst gewohnt bin. Beim genaueren betrachten anderer - Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D...
Archiv
Du betrachtest: Programme Starten zeitlich verzöger, Probleme bei Installation von Spybot S&D auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.