C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\rzr-cod4.exe (Trojan.Agent.CK)

Dabadu · 14.03.2014, 16:56

Yo,

hab nach 3 Monaten mal wieder Malwarebytes durchlaufen lassen (Quick-Scan) und festgestellt, dass 40 infizierte Dateien gefunden wurden. Habe danach einen vollständigen Scan durchführen lassen, und diese Datei wurde gefunden: C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\rzr-cod4.exe (Trojan.Agent.CK). Wäre sehr dankbar, wenn ihr mir helfen könntet. Hier die Logfiles des Quick- und des vollständigen Scans.

Code:

ATTFilter

inMalwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.14.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
* :: *-PC [Administrator]

3/14/2014 1:50:24 PM
mbam-log-2014-03-14 (13-50-24).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 222623
Laufzeit: 16 Minute(n), 26 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKLM\SOFTWARE\Vittalia\AxtanInstaller (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 2
C:\Users\*\AppData\Local\TNT2 (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660 (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 37
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\passport.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\TNT2UserPS.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\Autorun.inf (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\crx.tar (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\GameApps.ini (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\GameConsole.exe (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\GameEngine.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\GLOBALUNINSTALL.TNT (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\hmac.1.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\iestage2.1.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\IEToolbar.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\IEToolbar64.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\INSTALL.TNT (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\log.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\MinecraftShims64.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\npTNT2.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\npTNT2Ghost.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\PARTNER.TNT (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\passport64.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\pinnedSearch.htm (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\pinnedSearch_FindWide.htm (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\progress.1.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\regsvr.1.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\RemoteSkin.wms (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\sqlite.1.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\tnt2chrome.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\TNT2User.exe (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\TNT2UserPS64.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\TntMagicDel.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\UnInjLib.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\UnInjLib64.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\UNINSTALL.TNT (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\UninstallDlg.1.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\untar.1.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\UPDATE.TNT (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\xpi.tar (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*\AppData\Local\TNT2\2.0.0.1660\zipunzip.1.dll (PUP.Optional.TidyNetwork.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.14.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16521
* :: *-PC [Administrator]

3/14/2014 2:23:44 PM
mbam-log-2014-03-14 (14-23-44).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 349377
Laufzeit: 2 Stunde(n), 8 Minute(n), 59 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\rzr-cod4.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

schrauber · 14.03.2014, 18:30

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Modern Warfare legal bezogen?

Dabadu · 14.03.2014, 19:21

nee

schande über mich... habs aber mittlerweile gelöscht, falls es das wieder gut macht

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by * (administrator) on *-PC on 14-03-2014 18:54:01
Running from C:\Users\*\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(hxxp://libusb-win32.sourceforge.net) C:\Windows\system32\libusbd-nt.exe
(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files\AVG SafeGuard toolbar\vprot.exe
(BitTorrent Inc.) C:\Users\Oscar\AppData\Roaming\uTorrent\uTorrent.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
() C:\Program Files\Opera\20.0.1387.77\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [UnlockerAssistant] - C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM\...\Run: [vProt] - C:\Program Files\AVG SafeGuard toolbar\vprot.exe [2539544 2014-03-02] ()
HKLM\...\Run: [PowerDVD13Agent] - C:\Program Files\CyberLink\PowerDVD13\PowerDVD13Agent.exe [513048 2013-03-20] (CyberLink Corp.)
HKLM\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-09-18] (Microsoft Corporation)
HKU\S-1-5-21-84106292-2503607969-1038246017-1000\...\Run: [DAEMON Tools Lite] - "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-84106292-2503607969-1038246017-1000\...\Run: [RGSC] - C:\Program Files\ROCKSTAR GAMES\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\S-1-5-21-84106292-2503607969-1038246017-1000\...\Run: [uTorrent] - C:\Users\*\AppData\Roaming\uTorrent\uTorrent.exe [900440 2013-11-16] (BitTorrent Inc.)
HKU\S-1-5-21-84106292-2503607969-1038246017-1000\...\Run: [Facebook Update] - C:\Users\*\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-07] (Facebook Inc.)
Startup: C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk
ShortcutTarget: Telegram.lnk -> C:\Users\*\AppData\Roaming\Telegram Win (Unofficial)\Telegram.exe (Telegram (Unofficial))

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x48D7ACA054A6CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={BAB428FD-72DC-4188-B31B-EBDCF237C189}&mid=ad931bb430d24064aa5dfa25baefac9d-d992dfdaa26c0a971724beb9a1f882010dc3d268&lang=en&ds=ad011&coid=avgtbdisad&pr=sa&d=2013-12-07 22:52:28&v=17.1.2.1&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.0.0.248\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.0.0.248\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Oscar\AppData\Roaming\Mozilla\Firefox\Profiles\z4yqkme1.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll (AVG Technologies)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\*\AppData\Roaming\Mozilla\Firefox\Profiles\z4yqkme1.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-15]
FF Extension: Virtual DJ Toolbar - C:\Users\*\AppData\Roaming\Mozilla\Firefox\Profiles\z4yqkme1.default\Extensions\toolbar_VDJ-V7@apn.ask.com.xpi [2013-07-29]
FF Extension: Adblock Plus - C:\Users\*\AppData\Roaming\Mozilla\Firefox\Profiles\z4yqkme1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-04]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.0.0.248
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.0.0.248 [2014-03-02]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (Docs) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-31]
CHR Extension: (Google Drive) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-31]
CHR Extension: (YouTube) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-31]
CHR Extension: (Google Search) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-31]
CHR Extension: (Chrome In-App Payments service) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (Gmail) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-31]
CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG SafeGuard toolbar\ChromeExt\17.3.0.49\avg.crx [2013-12-29]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)
R2 libusbd; C:\Windows\System32\libusbd-nt.exe [18944 2005-03-09] (hxxp://libusb-win32.sourceforge.net)
R2 vToolbarUpdater18.0.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [1759768 2014-03-02] (AVG Secure Search)
S2 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

R2 ACEDRV07; C:\Windows\system32\drivers\ACEDRV07.sys [101376 2013-12-17] (Protect Software GmbH)
R2 aswFsBlk; C:\Windows\system32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\system32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [177864 2013-08-30] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-03-02] (AVG Technologies)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-08-03] (DT Soft Ltd)
R3 libusb0; C:\Windows\System32\drivers\libusb0.sys [33792 2005-03-09] ()
S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [95304 2011-11-10] (MotioninJoy)
U0 qyolha; C:\Windows\System32\drivers\dnxm.sys [54016 2014-03-14] ()
S3 USBET; C:\Windows\System32\DRIVERS\ETdrv.sys [5127680 2012-11-26] (Etron)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [76560 2013-03-19] (CyberLink Corp.)
S3 catchme; \??\C:\Users\*\AppData\Local\Temp\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () <===== ATTENTION Necurs Rootkit?
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-14 18:54 - 2014-03-14 18:54 - 00014403 _____ () C:\Users\*\Desktop\FRST.txt
2014-03-14 18:37 - 2014-03-14 18:54 - 00000000 ____D () C:\FRST
2014-03-14 18:36 - 2014-03-14 18:36 - 01145856 _____ (Farbar) C:\Users\*\Desktop\FRST.exe
2014-03-14 16:35 - 2014-03-14 16:35 - 00054016 _____ () C:\Windows\system32\Drivers\dnxm.sys
2014-03-14 15:02 - 2014-03-14 15:09 - 00000000 ____D () C:\Users\*\Downloads\The 2013 AVN Awards
2014-03-14 14:58 - 2014-03-14 14:59 - 00123684 _____ () C:\Users\*\Downloads\[kickass.to]the.2013.avn.awards.torrent
2014-03-14 13:37 - 2014-03-14 13:37 - 00000000 ____D () C:\Users\*\Downloads\dfghyuj4i5y61g65fd165tyumacbookserspfkg,p
2014-03-14 13:27 - 2014-03-14 13:33 - 76148284 _____ () C:\Users\*\Downloads\dfghyuj4i5y61g65fd165tyumacbookserspfkg,p.rar
2014-03-14 06:08 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 06:08 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 06:08 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 06:08 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-14 06:08 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-14 06:08 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 06:08 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 06:08 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-14 06:08 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-14 06:08 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 06:08 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-14 06:08 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-14 06:08 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 06:08 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-14 06:08 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-14 06:08 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 06:08 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 06:08 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 06:08 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 06:08 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 06:08 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 06:08 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-14 06:08 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-14 06:08 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 06:08 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 16:34 - 2014-03-13 16:34 - 00000000 ____D () C:\Users\*\Downloads\SaturnDE-Eminem_-_The_Marshall_Mathers_LP2-13_03_2014
2014-03-13 16:27 - 2014-03-13 16:31 - 194320416 _____ () C:\Users\*\Downloads\SaturnDE-Eminem_-_The_Marshall_Mathers_LP2-13_03_2014.zip
2014-03-12 23:01 - 2014-03-12 23:01 - 00000004 _____ () C:\Users\*\Desktop\HHHDVD.txt
2014-03-12 19:25 - 2014-03-12 20:01 - 00000000 ____D () C:\Users\*\Downloads\WWE.TripleH.Thy.Kingdom.Come.2013.BDRip.x264-19977
2014-03-12 19:20 - 2014-03-12 19:20 - 00607018 _____ () C:\Users\*\Downloads\[kickass.to]wwe.tripleh.thy.kingdom.come.2013.bdrip.x264.19977.sparrow.torrent
2014-03-12 16:07 - 2014-03-12 16:07 - 00000000 ____D () C:\Users\*\Downloads\BAD RELIGION - (1990) AGAINST THE GRAIN
2014-03-12 16:06 - 2014-03-12 16:06 - 00000000 ____D () C:\Users\*\Downloads\Blink-182-Enema-of-the-State-(1999)
2014-03-12 14:25 - 2014-03-12 14:39 - 00000000 ____D () C:\Users\*\Downloads\WWE.Themes
2014-03-12 11:20 - 2014-03-12 11:21 - 00539337 _____ () C:\Users\*\Downloads\[kickass.to]wwe.stone.cold.steve.austin.the.bottom.line.2011.dvdrip.xvid.u3f.torrent
2014-03-12 11:13 - 2014-03-12 11:14 - 00025058 _____ () C:\Users\*\Downloads\[kickass.to]wwe.cm.punk.best.in.the.world.2012.dvdrip.x264.nwchd.torrent
2014-03-12 11:00 - 2014-03-12 11:00 - 00056966 _____ () C:\Users\*\Downloads\[kickass.to]wwe.themes.torrent
2014-03-11 16:30 - 2014-03-11 16:30 - 00112352 _____ () C:\Users\*\Downloads\[kickass.to]vivid.back.door.to.chyna (1).torrent
2014-03-11 16:27 - 2014-03-11 16:30 - 00112352 _____ () C:\Users\*\Downloads\[kickass.to]vivid.back.door.to.chyna.torrent
2014-03-11 15:33 - 2014-03-11 15:33 - 00010967 _____ () C:\Users\*\Downloads\975B432C628850E7E889BF90AAF5AD636DF0E4A7.torrent
2014-03-11 15:32 - 2014-03-11 22:41 - 00000000 ____D () C:\Users\*\Downloads\WWE Divas Playboy Collection
2014-03-11 15:31 - 2014-03-11 15:31 - 00078420 _____ () C:\Users\*\Downloads\[kickass.to]wwe.divas.playboy.collection.torrent
2014-03-11 15:28 - 2014-03-11 15:28 - 00034330 _____ () C:\Users\*\Downloads\[kickass.to]tiffany.playboy.photoshoots.torrent
2014-03-11 13:38 - 2014-03-11 13:38 - 00098317 _____ () C:\Users\*\Downloads\[kickass.to]myfriendshotmom.13.06.27.brandi.love.xxx.1080p.mp4.ktr.torrent
2014-03-10 17:02 - 2014-03-10 17:03 - 00026729 _____ () C:\Users\*\Downloads\[kickass.to]mysistershotfriend.christy.mack.2013.480p.mp4.torrent
2014-03-09 21:23 - 2014-03-09 21:23 - 00000000 ____D () C:\Users\*\Documents\Telltale Games
2014-03-09 21:23 - 2014-03-09 21:23 - 00000000 ____D () C:\ProgramData\REVOLT
2014-03-09 20:27 - 2014-03-09 20:27 - 00002511 _____ () C:\Users\*\Desktop\Play The Walking Dead nosTEAM.lnk
2014-03-09 18:38 - 2014-03-09 18:38 - 00017595 _____ () C:\Users\*\Downloads\[kickass.to]the.walking.dead.episodes.1.2.3.4.5.pc.full.game.nosteam.torrent
2014-03-09 14:43 - 2014-03-09 14:43 - 00023338 _____ () C:\Users\*\Downloads\[kickass.to]bloc.party.silent.alarm.2005.only1joe.320mp3.torrent
2014-03-09 13:24 - 2014-03-09 13:24 - 00011108 _____ () C:\Users\*\Downloads\[kickass.to]jet.get.born.2cd.limited.edition.2005.by.smelly.torrent
2014-03-09 13:23 - 2014-03-09 13:23 - 00039001 _____ () C:\Users\*\Downloads\[kickass.to]ok.go.oh.no.torrent
2014-03-09 13:21 - 2014-03-09 13:21 - 00013823 _____ () C:\Users\*\Downloads\[kickass.to]yellowcard.ocean.avenue.2003.torrent
2014-03-08 11:15 - 2014-03-08 11:15 - 00015492 _____ () C:\Users\*\Downloads\[kickass.to]blur.blur.pop.rock.1997.mp3.housezz.cd.torrent
2014-03-08 09:26 - 2014-03-08 09:26 - 00013612 _____ () C:\Users\*\Downloads\[kickass.to]dirtymasseur.christy.mack.science.friction.04.10.2013.torrent
2014-03-05 23:42 - 2014-03-05 23:42 - 00006929 _____ () C:\Users\*\Downloads\[kickass.to]jan.delay.wir.kinder.vom.bahnhof.soul.de.2009.noir.torrent
2014-03-05 23:27 - 2014-03-05 23:27 - 00019905 _____ () C:\Users\*\Downloads\[kickass.to]udo.lindenberg.stark.wie.zwei.torrent
2014-03-03 21:21 - 2014-03-03 21:21 - 00026767 _____ () C:\Users\*\Downloads\[kickass.to]juliaannlive.oiled.up.foursome.julia.ann.lisa.ann.torrent
2014-03-03 20:38 - 2014-03-03 20:38 - 00014898 _____ () C:\Users\*\Downloads\[kickass.to]coldplay.viva.la.vida.or.death.and.all.his.friends.2008.al.torrent
2014-03-03 18:14 - 2014-03-03 18:14 - 00000000 ____D () C:\Users\*\AppData\Local\Skype
2014-03-03 18:12 - 2014-03-03 18:12 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-03 18:12 - 2014-03-03 18:12 - 00000000 ___RD () C:\Program Files\Skype
2014-03-03 18:12 - 2014-03-03 18:12 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-02 12:32 - 2014-03-02 12:32 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-02-27 17:34 - 2014-02-27 17:34 - 00000013 _____ () C:\Users\*\Desktop\Mamas Passwort.txt
2014-02-27 17:14 - 2014-03-14 18:10 - 00000000 ____D () C:\Users\*\AppData\Roaming\Telegram Win (Unofficial)
2014-02-27 17:14 - 2014-02-27 17:14 - 00001050 _____ () C:\Users\*\Desktop\Telegram.lnk
2014-02-27 17:14 - 2014-02-27 17:14 - 00000000 ____D () C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Win (Unofficial)
2014-02-25 19:14 - 2014-02-27 18:29 - 00000000 ____D () C:\SocketeQ
2014-02-25 18:46 - 2014-02-25 18:46 - 04595712 _____ () C:\Users\*\Downloads\pcap526_x86.msi
2014-02-25 18:09 - 2014-02-25 18:09 - 00000000 ____D () C:\Users\*\.android
2014-02-25 18:02 - 2014-02-25 18:14 - 00000000 ____D () C:\Users\*\.VirtualBox
2014-02-25 18:01 - 2014-02-25 18:01 - 00001076 _____ () C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2014-02-25 18:00 - 2014-02-25 18:00 - 00000000 ____D () C:\Program Files\Oracle
2014-02-25 18:00 - 2013-12-18 17:39 - 00203024 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2014-02-25 18:00 - 2013-12-18 17:38 - 00103696 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2014-02-25 17:54 - 2014-02-27 17:12 - 00000000 ____D () C:\Users\*\AppData\Local\Genymobile
2014-02-25 17:51 - 2014-02-25 17:51 - 00000000 ____D () C:\Program Files\Genymobile
2014-02-24 22:27 - 2014-02-24 22:27 - 00028028 _____ () C:\Users\*\Downloads\[kickass.to]louis.armstrong.hot.fives.and.sevens.vol.1.4.torrent
2014-02-24 21:00 - 2014-02-24 21:00 - 00112669 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.sexy.hot.xxx.dvdrip.xvid.nympho.torrent
2014-02-24 21:00 - 2014-02-24 21:00 - 00021590 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.teenlicious.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00023428 _____ () C:\Users\*\Downloads\[kickass.to]hard.candy.4.gabriella.fox.avi.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00017098 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.s01.gabriella.fox.nude.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00015984 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.from.bad.girls.torrent
2014-02-23 22:24 - 2014-02-23 22:24 - 00021280 _____ () C:\Users\*\Downloads\77721BCFCAA7D492025A4DAD79C432993CE3558B.torrent
2014-02-23 22:21 - 2014-02-23 22:21 - 00017304 _____ () C:\Users\*\Downloads\[kickass.to]the.very.best.of.louis.armstrong.2cd.torrent
2014-02-23 19:26 - 2014-02-23 19:26 - 00003663 _____ () C:\Users\*\Downloads\[kickass.to]miles.davis.kind.of.blue.50th.anniversary.collectors.edition.2008.torrent
2014-02-23 19:24 - 2014-02-23 19:24 - 00012028 _____ () C:\Users\*\Downloads\[katproxy.com]miles.davis.best.of.2007.jazz.torrent
2014-02-22 14:13 - 2014-02-22 14:13 - 00018958 _____ () C:\Users\*\Downloads\[kickass.to]chicago.1930.pc.torrent
2014-02-22 14:11 - 2014-02-22 14:11 - 00016621 _____ () C:\Users\*\Downloads\[kickass.to]pc.game.driver.3.driv3r.399mb.luv2break.rar.torrent
2014-02-22 13:52 - 2014-02-22 13:52 - 00017648 _____ () C:\Users\*\Downloads\[kickass.to]the.very.best.of.louis.armstrong.2cd.mp3.torrent
2014-02-22 13:20 - 2014-02-22 13:20 - 00012029 _____ () C:\Users\*\Downloads\[kickass.to]miles.davis.best.of.2007.jazz.torrent
2014-02-22 12:40 - 2014-02-22 12:40 - 00019952 _____ () C:\Users\*\Downloads\[kickass.to]dizzy.gillespie.the.very.best.of.dizz.torrent
2014-02-22 12:16 - 2014-02-22 12:16 - 00015242 _____ () C:\Users\*\Downloads\[kickass.to]ray.charles.ultimate.hits.collection.1999.v2.torrent
2014-02-22 11:51 - 2014-02-22 11:51 - 00028425 _____ () C:\Users\*\Downloads\[kickass.to]genius.the.ultimate.ray.charles.collection.genegeter.com.torrent
2014-02-22 11:44 - 2014-02-22 11:44 - 00000849 _____ () C:\Users\*\Downloads\Water.mid
2014-02-22 11:44 - 2014-02-22 11:44 - 00000849 _____ () C:\Users\*\Downloads\Water (1).mid
2014-02-22 11:01 - 2014-02-22 11:01 - 00014306 _____ () C:\Users\*\Downloads\[kickass.to]frank.sinatra.i.ve.got.the.world.on.a.string.the.very.best.of.frank.sinatra.2012.torrent
2014-02-22 11:00 - 2014-02-22 11:00 - 00017563 _____ () C:\Users\*\Downloads\[kickass.to]frank.sinatra.the.very.best.of.september.of.my.years.torrent
2014-02-21 22:04 - 2014-02-21 22:04 - 00038388 _____ () C:\Users\*\Downloads\90985-The-Godfather-1972-3CD-23.976fps-EN-37kB-TurkceAltyazi-org.zip
2014-02-21 22:01 - 2014-02-21 22:01 - 00041692 _____ () C:\Users\*\Downloads\the-godfather_english-530951.zip
2014-02-21 21:45 - 2014-02-21 21:45 - 00041586 _____ () C:\Users\*\Downloads\the-godfather_english-272081.zip
2014-02-21 21:25 - 2014-02-21 21:25 - 00022243 _____ () C:\Users\*\Downloads\[kickass.to]the.godfather.trilogy.part.1.2.3.dvdrip.torrent
2014-02-21 19:13 - 2014-02-21 19:13 - 00017551 _____ () C:\Users\*\Downloads\236367-cro-raop-premium-edition.torrent
2014-02-21 17:07 - 2014-02-21 17:08 - 00017605 _____ () C:\Users\*\Downloads\Kraftklub_-_Mit_K_(2012).torrent
2014-02-16 22:55 - 2004-12-10 09:06 - 00327680 _____ (On2.com Inc.) C:\Windows\system32\vp6dec.ax
2014-02-16 19:58 - 2014-02-16 19:58 - 00000000 ____D () C:\Users\*\Documents\3DReaperDX
2014-02-16 17:56 - 2014-02-16 17:56 - 00011392 _____ () C:\Users\*\Downloads\[kickass.to]pc.game.hitman.2.silent.assasin.iso.torrent
2014-02-16 10:05 - 2014-02-16 10:06 - 02062051 _____ (Roman Lut ) C:\Users\*\Downloads\3DRipperDXSetup.exe
2014-02-16 10:05 - 2014-02-16 10:05 - 00011141 _____ () C:\Users\*\Downloads\[kickass.to]scarface.the.world.is.yours.rus.eng.texture.fix.in.description.repacked.by.rg.origami.torrent
2014-02-16 09:55 - 2014-02-16 09:55 - 00017165 _____ () C:\Users\*\Downloads\[kickass.to]the.godfather.pc.game.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00020605 _____ () C:\Users\*\Downloads\[kickass.to]playboy.sa.60th.anniversary.our.annual.no.swim.suit.edition.january.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00017201 _____ () C:\Users\*\Downloads\[kickass.to]playboy.special.collector.s.edition.girls.and.cars.february.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00017060 _____ () C:\Users\*\Downloads\[kickass.to]playboy.special.collector.s.edition.the.butt.issue.january.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00000000 ____D () C:\Users\*\Downloads\Playboy Special Collector’s Edition Girls and Cars - February 2014
2014-02-13 23:22 - 2014-02-13 23:23 - 00000000 ____D () C:\Users\*\Downloads\Shindy - NWA + NWA 2.0
2014-02-13 17:35 - 2014-02-13 17:35 - 00000000 ____D () C:\Program Files\Creative
2014-02-13 17:35 - 2002-06-06 14:38 - 00139264 _____ (Creative Technology Ltd) C:\Windows\system32\eax.dll
2014-02-13 10:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 22:08 - 2014-02-12 22:08 - 00026542 _____ () C:\Users\*\Downloads\[kickass.to]dirtymasseur.gia.dimarco.ass.massage.brazzers.new.december.03.2013.torrent
2014-02-12 22:08 - 2014-02-12 22:08 - 00019754 _____ () C:\Users\*\Downloads\[kickass.to]real.wife.stories.gia.dimarco.housewife.by.day.whore.by.night.november.4.2013.sd.torrent
2014-02-12 22:08 - 2014-02-12 22:08 - 00016259 _____ () C:\Users\*\Downloads\[kickass.to]bigtitsinuniform.gia.dimarco.dirty.gia.01.12.2012.torrent
2014-02-12 22:07 - 2014-02-12 22:08 - 00280464 _____ () C:\Users\*\Downloads\[kickass.to]doctoradventures.13.03.28.gia.dimarco.slutty.recovery.xxx.1080p.mp4.ktr.torrent
2014-02-12 21:57 - 2014-02-12 21:57 - 00370280 _____ (Afterdawn.com) C:\Users\*\Downloads\RedtubeVideoDownloaderv329.exe
2014-02-12 20:56 - 2014-02-13 17:03 - 00000000 ____D () C:\Users\*\Documents\Max Payne Savegames
2014-02-12 14:49 - 2014-02-12 14:49 - 00011467 _____ () C:\Users\*\Downloads\[kickass.to]max.payne.1.2.torrent
2014-02-12 14:38 - 2014-02-12 14:38 - 00020984 _____ () C:\Users\*\Downloads\[kickass.to]mafia.the.city.of.lost.heaven.pc.game.torrent
2014-02-12 14:33 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 14:33 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 14:33 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 14:33 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-03-14 18:54 - 2014-03-14 18:54 - 00014403 _____ () C:\Users\*\Desktop\FRST.txt
2014-03-14 18:54 - 2014-03-14 18:37 - 00000000 ____D () C:\FRST
2014-03-14 18:54 - 2013-08-04 12:11 - 00000000 ____D () C:\Users\*\AppData\Roaming\uTorrent
2014-03-14 18:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-14 18:52 - 2013-09-10 18:04 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-03-14 18:50 - 2013-09-29 17:15 - 00000000 ____D () C:\ProgramData\MAGIX
2014-03-14 18:41 - 2013-09-28 09:56 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-14 18:36 - 2014-03-14 18:36 - 01145856 _____ (Farbar) C:\Users\*\Desktop\FRST.exe
2014-03-14 18:34 - 2013-08-04 01:47 - 01514483 _____ () C:\Windows\WindowsUpdate.log
2014-03-14 18:13 - 2009-07-14 05:34 - 00009904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-14 18:13 - 2009-07-14 05:34 - 00009904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-14 18:10 - 2014-02-27 17:14 - 00000000 ____D () C:\Users\*\AppData\Roaming\Telegram Win (Unofficial)
2014-03-14 18:08 - 2013-11-07 21:03 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-84106292-2503607969-1038246017-1000UA.job
2014-03-14 16:35 - 2014-03-14 16:35 - 00054016 _____ () C:\Windows\system32\Drivers\dnxm.sys
2014-03-14 16:35 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Speech
2014-03-14 15:09 - 2014-03-14 15:02 - 00000000 ____D () C:\Users\*\Downloads\The 2013 AVN Awards
2014-03-14 14:59 - 2014-03-14 14:58 - 00123684 _____ () C:\Users\*\Downloads\[kickass.to]the.2013.avn.awards.torrent
2014-03-14 14:14 - 2009-07-14 05:33 - 00366560 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 14:13 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-14 14:13 - 2009-07-14 05:39 - 00035088 _____ () C:\Windows\setupact.log
2014-03-14 14:12 - 2013-08-03 17:31 - 00054004 _____ () C:\Windows\PFRO.log
2014-03-14 14:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Branding
2014-03-14 13:37 - 2014-03-14 13:37 - 00000000 ____D () C:\Users\*\Downloads\dfghyuj4i5y61g65fd165tyumacbookserspfkg,p
2014-03-14 13:33 - 2014-03-14 13:27 - 76148284 _____ () C:\Users\*\Downloads\dfghyuj4i5y61g65fd165tyumacbookserspfkg,p.rar
2014-03-14 06:12 - 2013-10-11 22:11 - 00000000 ____D () C:\Program Files\Opera
2014-03-13 21:08 - 2013-11-07 21:03 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-84106292-2503607969-1038246017-1000Core.job
2014-03-13 20:50 - 2013-08-04 12:33 - 00000000 ____D () C:\Users\*\AppData\Roaming\vlc
2014-03-13 16:34 - 2014-03-13 16:34 - 00000000 ____D () C:\Users\*\Downloads\SaturnDE-Eminem_-_The_Marshall_Mathers_LP2-13_03_2014
2014-03-13 16:31 - 2014-03-13 16:27 - 194320416 _____ () C:\Users\*\Downloads\SaturnDE-Eminem_-_The_Marshall_Mathers_LP2-13_03_2014.zip
2014-03-12 23:01 - 2014-03-12 23:01 - 00000004 _____ () C:\Users\*\Desktop\HHHDVD.txt
2014-03-12 20:01 - 2014-03-12 19:25 - 00000000 ____D () C:\Users\*\Downloads\WWE.TripleH.Thy.Kingdom.Come.2013.BDRip.x264-19977
2014-03-12 19:20 - 2014-03-12 19:20 - 00607018 _____ () C:\Users\*\Downloads\[kickass.to]wwe.tripleh.thy.kingdom.come.2013.bdrip.x264.19977.sparrow.torrent
2014-03-12 16:47 - 2013-08-03 17:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-12 16:47 - 2013-08-03 17:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 16:47 - 2013-08-03 17:38 - 00000000 ____D () C:\Users\*\AppData\Local\Adobe
2014-03-12 16:07 - 2014-03-12 16:07 - 00000000 ____D () C:\Users\*\Downloads\BAD RELIGION - (1990) AGAINST THE GRAIN
2014-03-12 16:06 - 2014-03-12 16:06 - 00000000 ____D () C:\Users\*\Downloads\Blink-182-Enema-of-the-State-(1999)
2014-03-12 14:39 - 2014-03-12 14:25 - 00000000 ____D () C:\Users\*\Downloads\WWE.Themes
2014-03-12 11:21 - 2014-03-12 11:20 - 00539337 _____ () C:\Users\*\Downloads\[kickass.to]wwe.stone.cold.steve.austin.the.bottom.line.2011.dvdrip.xvid.u3f.torrent
2014-03-12 11:18 - 2013-09-10 18:03 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2014-03-12 11:14 - 2014-03-12 11:13 - 00025058 _____ () C:\Users\*\Downloads\[kickass.to]wwe.cm.punk.best.in.the.world.2012.dvdrip.x264.nwchd.torrent
2014-03-12 11:00 - 2014-03-12 11:00 - 00056966 _____ () C:\Users\*\Downloads\[kickass.to]wwe.themes.torrent
2014-03-11 22:41 - 2014-03-11 15:32 - 00000000 ____D () C:\Users\*\Downloads\WWE Divas Playboy Collection
2014-03-11 16:30 - 2014-03-11 16:30 - 00112352 _____ () C:\Users\*\Downloads\[kickass.to]vivid.back.door.to.chyna (1).torrent
2014-03-11 16:30 - 2014-03-11 16:27 - 00112352 _____ () C:\Users\*\Downloads\[kickass.to]vivid.back.door.to.chyna.torrent
2014-03-11 15:33 - 2014-03-11 15:33 - 00010967 _____ () C:\Users\*\Downloads\975B432C628850E7E889BF90AAF5AD636DF0E4A7.torrent
2014-03-11 15:31 - 2014-03-11 15:31 - 00078420 _____ () C:\Users\*\Downloads\[kickass.to]wwe.divas.playboy.collection.torrent
2014-03-11 15:28 - 2014-03-11 15:28 - 00034330 _____ () C:\Users\*\Downloads\[kickass.to]tiffany.playboy.photoshoots.torrent
2014-03-11 13:38 - 2014-03-11 13:38 - 00098317 _____ () C:\Users\*\Downloads\[kickass.to]myfriendshotmom.13.06.27.brandi.love.xxx.1080p.mp4.ktr.torrent
2014-03-10 17:03 - 2014-03-10 17:02 - 00026729 _____ () C:\Users\*\Downloads\[kickass.to]mysistershotfriend.christy.mack.2013.480p.mp4.torrent
2014-03-09 21:23 - 2014-03-09 21:23 - 00000000 ____D () C:\Users\*\Documents\Telltale Games
2014-03-09 21:23 - 2014-03-09 21:23 - 00000000 ____D () C:\ProgramData\REVOLT
2014-03-09 20:27 - 2014-03-09 20:27 - 00002511 _____ () C:\Users\*\Desktop\Play The Walking Dead nosTEAM.lnk
2014-03-09 18:38 - 2014-03-09 18:38 - 00017595 _____ () C:\Users\*\Downloads\[kickass.to]the.walking.dead.episodes.1.2.3.4.5.pc.full.game.nosteam.torrent
2014-03-09 15:14 - 2013-09-14 17:27 - 00000000 ____D () C:\Users\*\AppData\Roaming\Audacity
2014-03-09 14:43 - 2014-03-09 14:43 - 00023338 _____ () C:\Users\*\Downloads\[kickass.to]bloc.party.silent.alarm.2005.only1joe.320mp3.torrent
2014-03-09 13:24 - 2014-03-09 13:24 - 00011108 _____ () C:\Users\*\Downloads\[kickass.to]jet.get.born.2cd.limited.edition.2005.by.smelly.torrent
2014-03-09 13:23 - 2014-03-09 13:23 - 00039001 _____ () C:\Users\*\Downloads\[kickass.to]ok.go.oh.no.torrent
2014-03-09 13:21 - 2014-03-09 13:21 - 00013823 _____ () C:\Users\*\Downloads\[kickass.to]yellowcard.ocean.avenue.2003.torrent
2014-03-08 12:24 - 2013-09-07 21:46 - 00000000 ____D () C:\Users\*\AppData\Roaming\Skype
2014-03-08 11:15 - 2014-03-08 11:15 - 00015492 _____ () C:\Users\*\Downloads\[kickass.to]blur.blur.pop.rock.1997.mp3.housezz.cd.torrent
2014-03-08 09:26 - 2014-03-08 09:26 - 00013612 _____ () C:\Users\*\Downloads\[kickass.to]dirtymasseur.christy.mack.science.friction.04.10.2013.torrent
2014-03-06 15:27 - 2013-12-29 20:39 - 00000000 ____D () C:\Program Files\Full Tilt Poker.Eu
2014-03-05 23:42 - 2014-03-05 23:42 - 00006929 _____ () C:\Users\*\Downloads\[kickass.to]jan.delay.wir.kinder.vom.bahnhof.soul.de.2009.noir.torrent
2014-03-05 23:27 - 2014-03-05 23:27 - 00019905 _____ () C:\Users\*\Downloads\[kickass.to]udo.lindenberg.stark.wie.zwei.torrent
2014-03-04 16:44 - 2014-01-20 12:33 - 00008004 _____ () C:\Users\*\Desktop\Rap.txt
2014-03-03 21:21 - 2014-03-03 21:21 - 00026767 _____ () C:\Users\*\Downloads\[kickass.to]juliaannlive.oiled.up.foursome.julia.ann.lisa.ann.torrent
2014-03-03 20:38 - 2014-03-03 20:38 - 00014898 _____ () C:\Users\*\Downloads\[kickass.to]coldplay.viva.la.vida.or.death.and.all.his.friends.2008.al.torrent
2014-03-03 18:14 - 2014-03-03 18:14 - 00000000 ____D () C:\Users\*\AppData\Local\Skype
2014-03-03 18:13 - 2013-09-07 21:46 - 00000000 ____D () C:\ProgramData\Skype
2014-03-03 18:12 - 2014-03-03 18:12 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-03 18:12 - 2014-03-03 18:12 - 00000000 ___RD () C:\Program Files\Skype
2014-03-03 18:12 - 2014-03-03 18:12 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-02 12:33 - 2013-12-07 22:51 - 00003748 _____ () C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml
2014-03-02 12:32 - 2014-03-02 12:32 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-03-02 12:32 - 2013-12-07 22:52 - 00042784 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-03-02 12:32 - 2013-12-07 22:51 - 00000000 ____D () C:\Program Files\AVG SafeGuard toolbar
2014-03-01 05:30 - 2014-03-14 06:08 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-14 06:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-14 06:08 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-14 06:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-14 06:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-14 06:08 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-14 06:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-14 06:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-14 06:08 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-14 06:08 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-14 06:08 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-14 06:08 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-14 06:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-14 06:08 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-14 06:08 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-14 06:08 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-14 06:08 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-14 06:08 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-14 06:08 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-14 06:08 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-14 06:08 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-14 06:08 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-27 22:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-27 18:37 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-27 18:29 - 2014-02-25 19:14 - 00000000 ____D () C:\SocketeQ
2014-02-27 17:14 - 2014-02-27 17:14 - 00001050 _____ () C:\Users\*\Desktop\Telegram.lnk
2014-02-27 17:14 - 2014-02-27 17:14 - 00000000 ____D () C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Win (Unofficial)
2014-02-27 17:12 - 2014-02-25 17:54 - 00000000 ____D () C:\Users\*\AppData\Local\Genymobile
2014-02-25 18:46 - 2014-02-25 18:46 - 04595712 _____ () C:\Users\*\Downloads\pcap526_x86.msi
2014-02-25 18:14 - 2014-02-25 18:02 - 00000000 ____D () C:\Users\*\.VirtualBox
2014-02-25 18:09 - 2014-02-25 18:09 - 00000000 ____D () C:\Users\*\.android
2014-02-25 18:09 - 2013-08-03 16:55 - 00000000 ____D () C:\Users\*
2014-02-25 18:01 - 2014-02-25 18:01 - 00001076 _____ () C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2014-02-25 18:00 - 2014-02-25 18:00 - 00000000 ____D () C:\Program Files\Oracle
2014-02-25 17:51 - 2014-02-25 17:51 - 00000000 ____D () C:\Program Files\Genymobile
2014-02-24 22:27 - 2014-02-24 22:27 - 00028028 _____ () C:\Users\*\Downloads\[kickass.to]louis.armstrong.hot.fives.and.sevens.vol.1.4.torrent
2014-02-24 21:59 - 2013-09-10 18:40 - 00000000 ____D () C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-24 21:00 - 2014-02-24 21:00 - 00112669 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.sexy.hot.xxx.dvdrip.xvid.nympho.torrent
2014-02-24 21:00 - 2014-02-24 21:00 - 00021590 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.teenlicious.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00023428 _____ () C:\Users\*\Downloads\[kickass.to]hard.candy.4.gabriella.fox.avi.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00017098 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.s01.gabriella.fox.nude.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00015984 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.from.bad.girls.torrent
2014-02-23 22:24 - 2014-02-23 22:24 - 00021280 _____ () C:\Users\*\Downloads\77721BCFCAA7D492025A4DAD79C432993CE3558B.torrent
2014-02-23 22:21 - 2014-02-23 22:21 - 00017304 _____ () C:\Users\*\Downloads\[kickass.to]the.very.best.of.louis.armstrong.2cd.torrent
2014-02-23 19:26 - 2014-02-23 19:26 - 00003663 _____ () C:\Users\*\Downloads\[kickass.to]miles.davis.kind.of.blue.50th.anniversary.collectors.edition.2008.torrent
2014-02-23 19:24 - 2014-02-23 19:24 - 00012028 _____ () C:\Users\*\Downloads\[katproxy.com]miles.davis.best.of.2007.jazz.torrent
2014-02-22 14:13 - 2014-02-22 14:13 - 00018958 _____ () C:\Users\*\Downloads\[kickass.to]chicago.1930.pc.torrent
2014-02-22 14:11 - 2014-02-22 14:11 - 00016621 _____ () C:\Users\*\Downloads\[kickass.to]pc.game.driver.3.driv3r.399mb.luv2break.rar.torrent
2014-02-22 13:52 - 2014-02-22 13:52 - 00017648 _____ () C:\Users\*\Downloads\[kickass.to]the.very.best.of.louis.armstrong.2cd.mp3.torrent
2014-02-22 13:20 - 2014-02-22 13:20 - 00012029 _____ () C:\Users\*\Downloads\[kickass.to]miles.davis.best.of.2007.jazz.torrent
2014-02-22 12:40 - 2014-02-22 12:40 - 00019952 _____ () C:\Users\*\Downloads\[kickass.to]dizzy.gillespie.the.very.best.of.dizz.torrent
2014-02-22 12:16 - 2014-02-22 12:16 - 00015242 _____ () C:\Users\*\Downloads\[kickass.to]ray.charles.ultimate.hits.collection.1999.v2.torrent
2014-02-22 11:51 - 2014-02-22 11:51 - 00028425 _____ () C:\Users\*\Downloads\[kickass.to]genius.the.ultimate.ray.charles.collection.genegeter.com.torrent
2014-02-22 11:44 - 2014-02-22 11:44 - 00000849 _____ () C:\Users\*\Downloads\Water.mid
2014-02-22 11:44 - 2014-02-22 11:44 - 00000849 _____ () C:\Users\*\Downloads\Water (1).mid
2014-02-22 11:01 - 2014-02-22 11:01 - 00014306 _____ () C:\Users\*\Downloads\[kickass.to]frank.sinatra.i.ve.got.the.world.on.a.string.the.very.best.of.frank.sinatra.2012.torrent
2014-02-22 11:00 - 2014-02-22 11:00 - 00017563 _____ () C:\Users\*\Downloads\[kickass.to]frank.sinatra.the.very.best.of.september.of.my.years.torrent
2014-02-21 22:04 - 2014-02-21 22:04 - 00038388 _____ () C:\Users\*\Downloads\90985-The-Godfather-1972-3CD-23.976fps-EN-37kB-TurkceAltyazi-org.zip
2014-02-21 22:01 - 2014-02-21 22:01 - 00041692 _____ () C:\Users\*\Downloads\the-godfather_english-530951.zip
2014-02-21 21:45 - 2014-02-21 21:45 - 00041586 _____ () C:\Users\*\Downloads\the-godfather_english-272081.zip
2014-02-21 21:25 - 2014-02-21 21:25 - 00022243 _____ () C:\Users\*\Downloads\[kickass.to]the.godfather.trilogy.part.1.2.3.dvdrip.torrent
2014-02-21 17:08 - 2014-02-21 17:07 - 00017605 _____ () C:\Users\*\Downloads\Kraftklub_-_Mit_K_(2012).torrent
2014-02-16 22:39 - 2013-09-01 22:02 - 00056841 _____ () C:\Windows\DirectX.log
2014-02-16 19:58 - 2014-02-16 19:58 - 00000000 ____D () C:\Users\*\Documents\3DReaperDX
2014-02-16 17:56 - 2014-02-16 17:56 - 00011392 _____ () C:\Users\*\Downloads\[kickass.to]pc.game.hitman.2.silent.assasin.iso.torrent
2014-02-16 10:06 - 2014-02-16 10:05 - 02062051 _____ (Roman Lut ) C:\Users\*\Downloads\3DRipperDXSetup.exe
2014-02-16 10:05 - 2014-02-16 10:05 - 00011141 _____ () C:\Users\*\Downloads\[kickass.to]scarface.the.world.is.yours.rus.eng.texture.fix.in.description.repacked.by.rg.origami.torrent
2014-02-16 09:55 - 2014-02-16 09:55 - 00017165 _____ () C:\Users\*\Downloads\[kickass.to]the.godfather.pc.game.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00020605 _____ () C:\Users\*\Downloads\[kickass.to]playboy.sa.60th.anniversary.our.annual.no.swim.suit.edition.january.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00017201 _____ () C:\Users\*\Downloads\[kickass.to]playboy.special.collector.s.edition.girls.and.cars.february.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00017060 _____ () C:\Users\*\Downloads\[kickass.to]playboy.special.collector.s.edition.the.butt.issue.january.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00000000 ____D () C:\Users\*\Downloads\Playboy Special Collector’s Edition Girls and Cars - February 2014
2014-02-13 23:23 - 2014-02-13 23:22 - 00000000 ____D () C:\Users\*\Downloads\Shindy - NWA + NWA 2.0
2014-02-13 17:35 - 2014-02-13 17:35 - 00000000 ____D () C:\Program Files\Creative
2014-02-13 17:03 - 2014-02-12 20:56 - 00000000 ____D () C:\Users\*\Documents\Max Payne Savegames
2014-02-13 16:43 - 2014-01-19 00:24 - 00000778 _____ () C:\Users\*\Desktop\All Time Favorites.txt
2014-02-13 10:08 - 2013-09-14 14:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 10:05 - 2013-08-31 22:57 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-13 10:02 - 2013-08-03 17:02 - 00788084 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-12 22:08 - 2014-02-12 22:08 - 00026542 _____ () C:\Users\*\Downloads\[kickass.to]dirtymasseur.gia.dimarco.ass.massage.brazzers.new.december.03.2013.torrent
2014-02-12 22:08 - 2014-02-12 22:08 - 00019754 _____ () C:\Users\*\Downloads\[kickass.to]real.wife.stories.gia.dimarco.housewife.by.day.whore.by.night.november.4.2013.sd.torrent
2014-02-12 22:08 - 2014-02-12 22:08 - 00016259 _____ () C:\Users\*\Downloads\[kickass.to]bigtitsinuniform.gia.dimarco.dirty.gia.01.12.2012.torrent
2014-02-12 22:08 - 2014-02-12 22:07 - 00280464 _____ () C:\Users\*\Downloads\[kickass.to]doctoradventures.13.03.28.gia.dimarco.slutty.recovery.xxx.1080p.mp4.ktr.torrent
2014-02-12 21:57 - 2014-02-12 21:57 - 00370280 _____ (Afterdawn.com) C:\Users\*\Downloads\RedtubeVideoDownloaderv329.exe
2014-02-12 14:49 - 2014-02-12 14:49 - 00011467 _____ () C:\Users\*\Downloads\[kickass.to]max.payne.1.2.torrent
2014-02-12 14:38 - 2014-02-12 14:38 - 00020984 _____ () C:\Users\*\Downloads\[kickass.to]mafia.the.city.of.lost.heaven.pc.game.torrent

Some content of TEMP:
====================
C:\Users\*\AppData\Local\Temp\AutoRun.exe
C:\Users\*\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\*\AppData\Local\Temp\EAInstall.dll
C:\Users\*\AppData\Local\Temp\eauninstall.exe
C:\Users\*\AppData\Local\Temp\FileSystemView.dll
C:\Users\*\AppData\Local\Temp\GLB1A2B.EXE
C:\Users\*\AppData\Local\Temp\The Godfather The Game_uninst.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 10:22

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by * at 2014-03-14 18:55:05
Running from C:\Users\*\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Disabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Disabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

µTorrent (HKCU\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
AmoK DelayDel 1.2 (HKLM\...\AmoK DelayDel) (Version: 1.2 - AmoK - The Art of Coding)
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 2.0.4 (HKLM\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)
AudioCon (HKLM\...\AudioCon) (Version: 1.0 - Basement Softworks)
avast! Free Antivirus (HKLM\...\avast) (Version: 8.0.1497.0 - AVAST Software)
AVG SafeGuard toolbar (HKLM\...\AVG SafeGuard toolbar) (Version: 18.0.0.248 - AVG Technologies)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CyberLink PowerDVD 13 (HKLM\...\InstallShield_{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}) (Version: 13.0.2720.57 - CyberLink Corp.)
CyberLink PowerDVD 13 (Version: 13.0.2720.57 - CyberLink Corp.) Hidden
Dart Pro 1.0 (HKLM\...\{D11A5A14-84B6-4BE5-B4A1-11E00DE0B78B}) (Version: 1.0.0 - Hofmann EDV-Beratung)
Dart.O.Mat 501 (R2D2) (HKLM\...\InstallShield_{0F93411B-7262-414F-B452-F1BE4767990E}) (Version: 3.1.1.1 - Sheriff Productions)
Dart.O.Mat 501 (R2D2) (Version: 3.1.1.1 - Sheriff Productions) Hidden
Dart2010 3.0.6 (HKLM\...\Dart2010) (Version: 3.0.6 - Klaus Sobieray)
Dartmachine 4.2.3 (HKLM\...\DartMachine_is1) (Version:  - Kai Pfeiffer)
EAX Unified (HKLM\...\EAX Unified) (Version:  - )
foobar2000 v1.2.9 (HKLM\...\foobar2000) (Version: 1.2.9 - Peter Pawlowski)
Free M4a to MP3 Converter 8.0 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free WMA to MP3 Converter 1.16 (HKLM\...\Free WMA to MP3 Converter_is1) (Version:  - Jodix Technologies Ltd.)
Free YouTube to MP3 Converter version 3.12.17.1125 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.17.1125 - DVDVideoSoft Ltd.)
Full Tilt Poker.Eu (HKLM\...\{127BEFB3-24B2-4B44-8E99-AD22C2A5A8ED}) (Version: 5.4.2.WIN.FullTilt.EU - )
Google Update Helper (Version: 1.3.21.123 - Google Inc.) Hidden
Grand Theft Auto IV (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Intel(R) TV Wizard (HKLM\...\TVWiz) (Version:  - Intel Corporation)
iTunes (HKLM\...\{C8EBB0DE-5655-4D32-99E1-9447E702A89F}) (Version: 11.1.2.32 - Apple Inc.)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
LibUSB-Win32-0.1.10.1 (HKLM\...\LibUSB-Win32_is1) (Version: 0.1.10.1 - LibUSB-Win32)
MAGIX Music Maker 2014 Premium Update (Version: 20.0.3.45 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 24.0 (x86 de) (HKLM\...\Mozilla Firefox 24.0 (x86 de)) (Version: 24.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NVIDIA PhysX (HKLM\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
OpenOffice 4.0.1 (HKLM\...\{47F460DA-D1BE-4D85-8DF2-AA1F31D3445F}) (Version: 4.01.9714 - Apache Software Foundation)
Opera Stable 20.0.1387.77 (HKLM\...\Opera 20.0.1387.77) (Version: 20.0.1387.77 - Opera Software ASA)
Oracle VM VirtualBox 4.3.6 (HKLM\...\{F56CC4E6-DFC4-4B87-BAE9-C605C305E05C}) (Version: 4.3.6 - Oracle Corporation)
Skype™ 6.14 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
Switch Sound File Converter (HKLM\...\Switch) (Version: 4.52 - NCH Software)
Telegram Win (Unofficial) version 0.4.2 (HKCU\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.4.2 - Telegram (Unofficial))
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Virtual DJ Toolbar (HKLM\...\{56444A2D-5637-006A-76A7-A758B70C0300}) (Version: 12.3.0.1001 - APN, LLC)
VirtualDJ Home FREE (HKLM\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
VLC media player 2.0.8 (HKLM\...\VLC media player) (Version: 2.0.8 - VideoLAN)
Webcam Videocap (HKLM\...\{ED1674F5-5165-49BF-B546-AE5343111540}) (Version: 1.0.3.7 - ETRON)
WinDirStat 1.1.2 (HKCU\...\WinDirStat) (Version:  - )
Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Zynewave Podium Free 2.42 (HKLM\...\{7084A4CC-F87D-4972-9954-942BDEC59313}) (Version: 2.42 - Zynewave)

==================== Restore Points  =========================

14-03-2014 17:45:28 Removed Facebook Video Calling 2.0.0.447
14-03-2014 17:46:36 Removed Facebook Video Calling 2.0.0.447
14-03-2014 17:47:44 Removed MAGIX Burn routines
14-03-2014 17:50:48 Removed NHL® 09
14-03-2014 17:52:16 Entfernt Rockstar Games Social Club
14-03-2014 17:52:57 Removed Text-To-Speech-Runtime

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0BCF96B3-5CDC-4907-A0DA-496FE1560AF4} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-84106292-2503607969-1038246017-1000Core => C:\Users\Oscar\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-07] (Facebook Inc.)
Task: {32663766-B353-4834-9A9C-094383FA13D5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {8DA84440-2D64-41E4-B440-5A157FF18575} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-84106292-2503607969-1038246017-1000UA => C:\Users\Oscar\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-07] (Facebook Inc.)
Task: {D1344030-4F56-45F0-B1D3-4CAD240880AF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-84106292-2503607969-1038246017-1000Core.job => C:\Users\Oscar\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-84106292-2503607969-1038246017-1000UA.job => C:\Users\Oscar\AppData\Local\Facebook\Update\FacebookUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-03-14 14:08 - 2014-03-14 13:10 - 02283008 _____ () C:\Program Files\AVAST Software\Avast\defs\14031400\algo.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-02 12:32 - 2014-03-02 12:32 - 00159768 _____ () C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe
2014-03-02 12:32 - 2014-03-02 12:32 - 00519704 _____ () C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\log4cplusU.dll
2010-07-04 22:32 - 2010-07-04 22:32 - 00004608 _____ () C:\Program Files\Unlocker\UnlockerHook.dll
2010-07-04 20:51 - 2010-07-04 20:51 - 00017408 _____ () C:\Program Files\Unlocker\UnlockerAssistant.exe
2013-12-07 22:51 - 2014-03-02 12:32 - 02539544 _____ () C:\Program Files\AVG SafeGuard toolbar\vprot.exe
2014-03-14 06:12 - 2014-03-12 12:40 - 00908640 _____ () C:\Program Files\Opera\20.0.1387.77\libglesv2.dll
2014-03-14 06:12 - 2014-03-12 12:40 - 00108896 _____ () C:\Program Files\Opera\20.0.1387.77\libegl.dll
2014-03-14 06:12 - 2014-03-12 12:40 - 00895328 _____ () C:\Program Files\Opera\20.0.1387.77\ffmpegsumo.dll
2014-03-12 16:41 - 2014-03-12 16:47 - 16276872 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll
2014-03-14 06:12 - 2014-03-12 12:40 - 01380192 _____ () C:\Program Files\Opera\20.0.1387.77\opera_crashreporter.exe
2013-07-30 23:21 - 2013-07-30 23:21 - 00144896 _____ () C:\Program Files\VideoLAN\VLC\libvlc.dll
2013-07-30 23:22 - 2013-07-30 23:22 - 02376192 _____ () C:\Program Files\VideoLAN\VLC\libvlccore.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00282112 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00084992 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00086528 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00114688 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00071680 _____ () C:\Program Files\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00224768 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00134656 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00293888 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00081408 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00079360 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00469504 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00693760 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00074240 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00120320 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libzip_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00071168 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00143360 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 01405440 _____ () C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00335872 _____ () C:\Program Files\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 01285120 _____ () C:\Program Files\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00087552 _____ () C:\Program Files\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00229888 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00072704 _____ () C:\Program Files\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 11387904 _____ () C:\Program Files\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00325632 _____ () C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00122368 _____ () C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00077312 _____ () C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00074240 _____ () C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00071680 _____ () C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00221696 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00074240 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 01338880 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00086016 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 01759232 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00076288 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00393728 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00181248 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00072192 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00387584 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00279552 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00968704 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00340480 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libopus_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00076800 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00078336 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00287232 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00074752 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00077312 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 08026112 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00740352 _____ () C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00086016 _____ () C:\Program Files\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00077824 _____ () C:\Program Files\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00403968 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00172032 _____ () C:\Program Files\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00085504 _____ () C:\Program Files\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00076800 _____ () C:\Program Files\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00111104 _____ () C:\Program Files\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00074240 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00075264 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00091136 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00071680 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00073216 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00076800 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00071680 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00071680 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00070656 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00115712 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00218112 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00107520 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00164864 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 01551872 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00072192 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00070144 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00073216 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00071680 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00071680 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00070656 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00082432 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00069632 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00076288 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
2013-07-30 23:21 - 2013-07-30 23:21 - 00085504 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll
2010-07-04 22:32 - 2010-07-04 22:32 - 00010752 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Biometric Coprocessor
Description: Biometric Coprocessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/14/2014 06:30:03 PM) (Source: Application Error) (User: )
Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17514, time stamp: 0x4ce796f3
Faulting module name: misosh.dll_unloaded, version: 0.0.0.0, time stamp: 0x483589d4
Exception code: 0xc0000005
Fault offset: 0x03ea1057
Faulting process id: 0xcd0
Faulting application start time: 0xExplorer.EXE0
Faulting application path: Explorer.EXE1
Faulting module path: Explorer.EXE2
Report Id: Explorer.EXE3

Error: (03/14/2014 11:40:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14820

Error: (03/14/2014 11:40:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14820

Error: (03/14/2014 11:40:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/14/2014 11:40:45 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9828

Error: (03/14/2014 11:40:45 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9828

Error: (03/14/2014 11:40:45 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/14/2014 11:40:40 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4976

Error: (03/14/2014 11:40:40 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4976

Error: (03/14/2014 11:40:40 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (03/14/2014 02:17:14 PM) (Source: Service Control Manager) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error: 
%%2

Error: (03/14/2014 02:09:31 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (03/14/2014 01:42:54 PM) (Source: volsnap) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (03/14/2014 10:01:47 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition.

Error: (03/14/2014 09:27:09 AM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

Error: (03/14/2014 06:04:27 AM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom0, is not ready for access yet.

Error: (03/14/2014 06:04:25 AM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

Error: (03/13/2014 07:43:28 PM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom0, is not ready for access yet.

Error: (03/13/2014 01:51:01 AM) (Source: volsnap) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (03/12/2014 11:24:33 AM) (Source: volsnap) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.


Microsoft Office Sessions:
=========================
Error: (03/14/2014 06:30:03 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175144ce796f3misosh.dll_unloaded0.0.0.0483589d4c000000503ea1057cd001cf3f874f7ca8b5C:\Windows\Explorer.EXEmisosh.dll46008c4f-ab9e-11e3-85e5-00218654d596

Error: (03/14/2014 11:40:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14820

Error: (03/14/2014 11:40:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14820

Error: (03/14/2014 11:40:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/14/2014 11:40:45 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9828

Error: (03/14/2014 11:40:45 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9828

Error: (03/14/2014 11:40:45 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/14/2014 11:40:40 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4976

Error: (03/14/2014 11:40:40 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4976

Error: (03/14/2014 11:40:40 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info =========================== 

Percentage of memory in use: 86%
Total physical RAM: 2006.3 MB
Available physical RAM: 267.62 MB
Total Pagefile: 4012.59 MB
Available Pagefile: 1762.93 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.38 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:74.43 GB) (Free:7.87 GB) NTFS
Drive e: (EMIL_UND_DIE_DETEKTIVE) (CDROM) (Total:7.67 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 75 GB) (Disk ID: 03EF1304)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 15.03.2014, 12:05

Zitat:

Startup: C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk
ShortcutTarget: Telegram.lnk -> C:\Users\*\AppData\Roaming\Telegram Win (Unofficial)\Telegram.exe (Telegram (Unofficial))

Kennste das?

Dabadu · 15.03.2014, 12:12

Ja, das ist die Windows-Version vom Instant-Messenger Telegram. Ist das das Problem?

schrauber · 15.03.2014, 17:47

Nö, ich kenne es nur nit

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Dabadu · 15.03.2014, 20:09

Eset

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=4736076ad9eac840bc9cf5d2d8703f83
# engine=17462
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-15 06:32:14
# local_time=2014-03-15 07:32:14 (+0100, W. Europe Standard Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 61 2936068 171618206 0 0
# compatibility_mode=5893 16776573 100 94 1090659 146539525 0 0
# scanned=135587
# found=0
# cleaned=0
# scan_time=5699

Security Check

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.80  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Firewall Enabled!  
avast! Antivirus   
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:````````` 
 SpywareBlaster 5.0    
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 51  
 Adobe Flash Player 	12.0.0.77  
 Adobe Reader XI  
 Mozilla Firefox 24.0 Firefox out of Date!  
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C: 7% 
````````````````````End of Log``````````````````````

FRST

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by * (administrator) on DABADU-PC on 15-03-2014 19:50:57
Running from C:\Users\*\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(hxxp://libusb-win32.sourceforge.net) C:\Windows\system32\libusbd-nt.exe
(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
() C:\Program Files\AVG SafeGuard toolbar\vprot.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
() C:\Program Files\Opera\20.0.1387.77\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files\Opera\20.0.1387.77\opera.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [UnlockerAssistant] - C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM\...\Run: [vProt] - C:\Program Files\AVG SafeGuard toolbar\vprot.exe [2539544 2014-03-02] ()
HKLM\...\Run: [PowerDVD13Agent] - C:\Program Files\CyberLink\PowerDVD13\PowerDVD13Agent.exe [513048 2013-03-20] (CyberLink Corp.)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-09-18] (Microsoft Corporation)
HKU\S-1-5-21-84106292-2503607969-1038246017-1000\...\Run: [DAEMON Tools Lite] - "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-84106292-2503607969-1038246017-1000\...\Run: [RGSC] - C:\Program Files\ROCKSTAR GAMES\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\S-1-5-21-84106292-2503607969-1038246017-1000\...\Run: [uTorrent] - C:\Users\*\AppData\Roaming\uTorrent\uTorrent.exe [900440 2013-11-16] (BitTorrent Inc.)
Startup: C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk
ShortcutTarget: Telegram.lnk -> C:\Users\*\AppData\Roaming\Telegram Win (Unofficial)\Telegram.exe (Telegram (Unofficial))

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x48D7ACA054A6CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={BAB428FD-72DC-4188-B31B-EBDCF237C189}&mid=ad931bb430d24064aa5dfa25baefac9d-d992dfdaa26c0a971724beb9a1f882010dc3d268&lang=en&ds=ad011&coid=avgtbdisad&pr=sa&d=2013-12-07 22:52:28&v=17.1.2.1&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.0.0.248\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.0.0.248\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\*\AppData\Roaming\Mozilla\Firefox\Profiles\z4yqkme1.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll (AVG Technologies)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\*\AppData\Roaming\Mozilla\Firefox\Profiles\z4yqkme1.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-15]
FF Extension: Virtual DJ Toolbar - C:\Users\*\AppData\Roaming\Mozilla\Firefox\Profiles\z4yqkme1.default\Extensions\toolbar_VDJ-V7@apn.ask.com.xpi [2013-07-29]
FF Extension: Adblock Plus - C:\Users\*\AppData\Roaming\Mozilla\Firefox\Profiles\z4yqkme1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-04]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.0.0.248
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.0.0.248 [2014-03-02]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (Docs) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-31]
CHR Extension: (Google Drive) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-31]
CHR Extension: (YouTube) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-31]
CHR Extension: (Google Search) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-31]
CHR Extension: (Chrome In-App Payments service) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (Gmail) - C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-31]
CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG SafeGuard toolbar\ChromeExt\17.3.0.49\avg.crx [2013-12-29]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)
R2 libusbd; C:\Windows\System32\libusbd-nt.exe [18944 2005-03-09] (hxxp://libusb-win32.sourceforge.net)
R2 vToolbarUpdater18.0.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [1759768 2014-03-02] (AVG Secure Search)
S2 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

R2 ACEDRV07; C:\Windows\system32\drivers\ACEDRV07.sys [101376 2013-12-17] (Protect Software GmbH)
R2 aswFsBlk; C:\Windows\system32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\system32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [177864 2013-08-30] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-03-02] (AVG Technologies)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-08-03] (DT Soft Ltd)
R3 libusb0; C:\Windows\System32\drivers\libusb0.sys [33792 2005-03-09] ()
S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [95304 2011-11-10] (MotioninJoy)
S3 USBET; C:\Windows\System32\DRIVERS\ETdrv.sys [5127680 2012-11-26] (Etron)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [76560 2013-03-19] (CyberLink Corp.)
S3 catchme; \??\C:\Users\*\AppData\Local\Temp\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () <===== ATTENTION Necurs Rootkit?
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-15 19:43 - 2014-03-15 19:44 - 00987442 _____ () C:\Users\*\Downloads\SecurityCheck.exe
2014-03-15 17:48 - 2014-03-15 17:50 - 02347384 _____ (ESET) C:\Users\*\Downloads\esetsmartinstaller_enu.exe
2014-03-14 18:55 - 2014-03-14 19:04 - 00029000 _____ () C:\Users\*\Desktop\Addition.txt
2014-03-14 18:54 - 2014-03-15 19:50 - 00014341 _____ () C:\Users\*\Desktop\FRST.txt
2014-03-14 18:37 - 2014-03-15 19:50 - 00000000 ____D () C:\FRST
2014-03-14 18:36 - 2014-03-14 18:36 - 01145856 _____ (Farbar) C:\Users\*\Desktop\FRST.exe
2014-03-14 15:02 - 2014-03-14 15:09 - 00000000 ____D () C:\Users\*\Downloads\The 2013 AVN Awards
2014-03-14 14:58 - 2014-03-14 14:59 - 00123684 _____ () C:\Users\*\Downloads\[kickass.to]the.2013.avn.awards.torrent
2014-03-14 13:37 - 2014-03-14 13:37 - 00000000 ____D () C:\Users\*\Downloads\dfghyuj4i5y61g65fd165tyumacbookserspfkg,p
2014-03-14 13:27 - 2014-03-14 13:33 - 76148284 _____ () C:\Users\*\Downloads\dfghyuj4i5y61g65fd165tyumacbookserspfkg,p.rar
2014-03-14 06:08 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 06:08 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 06:08 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 06:08 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-14 06:08 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-14 06:08 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 06:08 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 06:08 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-14 06:08 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-14 06:08 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 06:08 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-14 06:08 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-14 06:08 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 06:08 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-14 06:08 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-14 06:08 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 06:08 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 06:08 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 06:08 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 06:08 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 06:08 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 06:08 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-14 06:08 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-14 06:08 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 06:08 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 16:34 - 2014-03-13 16:34 - 00000000 ____D () C:\Users\*\Downloads\SaturnDE-Eminem_-_The_Marshall_Mathers_LP2-13_03_2014
2014-03-13 16:27 - 2014-03-13 16:31 - 194320416 _____ () C:\Users\*\Downloads\SaturnDE-Eminem_-_The_Marshall_Mathers_LP2-13_03_2014.zip
2014-03-12 23:01 - 2014-03-12 23:01 - 00000004 _____ () C:\Users\*\Desktop\HHHDVD.txt
2014-03-12 19:20 - 2014-03-12 19:20 - 00607018 _____ () C:\Users\*\Downloads\[kickass.to]wwe.tripleh.thy.kingdom.come.2013.bdrip.x264.19977.sparrow.torrent
2014-03-12 16:07 - 2014-03-12 16:07 - 00000000 ____D () C:\Users\*\Downloads\BAD RELIGION - (1990) AGAINST THE GRAIN
2014-03-12 16:06 - 2014-03-12 16:06 - 00000000 ____D () C:\Users\*\Downloads\Blink-182-Enema-of-the-State-(1999)
2014-03-12 14:25 - 2014-03-12 14:39 - 00000000 ____D () C:\Users\*\Downloads\WWE.Themes
2014-03-12 11:20 - 2014-03-12 11:21 - 00539337 _____ () C:\Users\*\Downloads\[kickass.to]wwe.stone.cold.steve.austin.the.bottom.line.2011.dvdrip.xvid.u3f.torrent
2014-03-12 11:13 - 2014-03-12 11:14 - 00025058 _____ () C:\Users\*\Downloads\[kickass.to]wwe.cm.punk.best.in.the.world.2012.dvdrip.x264.nwchd.torrent
2014-03-12 11:00 - 2014-03-12 11:00 - 00056966 _____ () C:\Users\*\Downloads\[kickass.to]wwe.themes.torrent
2014-03-11 16:30 - 2014-03-11 16:30 - 00112352 _____ () C:\Users\*\Downloads\[kickass.to]vivid.back.door.to.chyna (1).torrent
2014-03-11 16:27 - 2014-03-11 16:30 - 00112352 _____ () C:\Users\*\Downloads\[kickass.to]vivid.back.door.to.chyna.torrent
2014-03-11 15:33 - 2014-03-11 15:33 - 00010967 _____ () C:\Users\*\Downloads\975B432C628850E7E889BF90AAF5AD636DF0E4A7.torrent
2014-03-11 15:32 - 2014-03-11 22:41 - 00000000 ____D () C:\Users\*\Downloads\WWE Divas Playboy Collection
2014-03-11 15:31 - 2014-03-11 15:31 - 00078420 _____ () C:\Users\*\Downloads\[kickass.to]wwe.divas.playboy.collection.torrent
2014-03-11 15:28 - 2014-03-11 15:28 - 00034330 _____ () C:\Users\*\Downloads\[kickass.to]tiffany.playboy.photoshoots.torrent
2014-03-11 13:38 - 2014-03-11 13:38 - 00098317 _____ () C:\Users\*\Downloads\[kickass.to]myfriendshotmom.13.06.27.brandi.love.xxx.1080p.mp4.ktr.torrent
2014-03-10 17:02 - 2014-03-10 17:03 - 00026729 _____ () C:\Users\*\Downloads\[kickass.to]mysistershotfriend.christy.mack.2013.480p.mp4.torrent
2014-03-09 21:23 - 2014-03-09 21:23 - 00000000 ____D () C:\Users\*\Documents\Telltale Games
2014-03-09 21:23 - 2014-03-09 21:23 - 00000000 ____D () C:\ProgramData\REVOLT
2014-03-09 20:27 - 2014-03-09 20:27 - 00002511 _____ () C:\Users\*\Desktop\Play The Walking Dead nosTEAM.lnk
2014-03-09 18:38 - 2014-03-09 18:38 - 00017595 _____ () C:\Users\*\Downloads\[kickass.to]the.walking.dead.episodes.1.2.3.4.5.pc.full.game.nosteam.torrent
2014-03-09 14:43 - 2014-03-09 14:43 - 00023338 _____ () C:\Users\*\Downloads\[kickass.to]bloc.party.silent.alarm.2005.only1joe.320mp3.torrent
2014-03-09 13:24 - 2014-03-09 13:24 - 00011108 _____ () C:\Users\*\Downloads\[kickass.to]jet.get.born.2cd.limited.edition.2005.by.smelly.torrent
2014-03-09 13:23 - 2014-03-09 13:23 - 00039001 _____ () C:\Users\*\Downloads\[kickass.to]ok.go.oh.no.torrent
2014-03-09 13:21 - 2014-03-09 13:21 - 00013823 _____ () C:\Users\*\Downloads\[kickass.to]yellowcard.ocean.avenue.2003.torrent
2014-03-08 11:15 - 2014-03-08 11:15 - 00015492 _____ () C:\Users\*\Downloads\[kickass.to]blur.blur.pop.rock.1997.mp3.housezz.cd.torrent
2014-03-08 09:26 - 2014-03-08 09:26 - 00013612 _____ () C:\Users\*\Downloads\[kickass.to]dirtymasseur.christy.mack.science.friction.04.10.2013.torrent
2014-03-05 23:42 - 2014-03-05 23:42 - 00006929 _____ () C:\Users\*\Downloads\[kickass.to]jan.delay.wir.kinder.vom.bahnhof.soul.de.2009.noir.torrent
2014-03-05 23:27 - 2014-03-05 23:27 - 00019905 _____ () C:\Users\*\Downloads\[kickass.to]udo.lindenberg.stark.wie.zwei.torrent
2014-03-03 21:21 - 2014-03-03 21:21 - 00026767 _____ () C:\Users\*\Downloads\[kickass.to]juliaannlive.oiled.up.foursome.julia.ann.lisa.ann.torrent
2014-03-03 20:38 - 2014-03-03 20:38 - 00014898 _____ () C:\Users\*\Downloads\[kickass.to]coldplay.viva.la.vida.or.death.and.all.his.friends.2008.al.torrent
2014-03-03 18:14 - 2014-03-03 18:14 - 00000000 ____D () C:\Users\*\AppData\Local\Skype
2014-03-03 18:12 - 2014-03-03 18:12 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-03 18:12 - 2014-03-03 18:12 - 00000000 ___RD () C:\Program Files\Skype
2014-03-03 18:12 - 2014-03-03 18:12 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-02 12:32 - 2014-03-02 12:32 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-02-27 17:34 - 2014-02-27 17:34 - 00000013 _____ () C:\Users\*\Desktop\Mamas Passwort.txt
2014-02-27 17:14 - 2014-03-14 18:10 - 00000000 ____D () C:\Users\*\AppData\Roaming\Telegram Win (Unofficial)
2014-02-27 17:14 - 2014-02-27 17:14 - 00001050 _____ () C:\Users\*\Desktop\Telegram.lnk
2014-02-27 17:14 - 2014-02-27 17:14 - 00000000 ____D () C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Win (Unofficial)
2014-02-25 19:14 - 2014-02-27 18:29 - 00000000 ____D () C:\SocketeQ
2014-02-25 18:46 - 2014-02-25 18:46 - 04595712 _____ () C:\Users\*\Downloads\pcap526_x86.msi
2014-02-25 18:09 - 2014-02-25 18:09 - 00000000 ____D () C:\Users\*\.android
2014-02-25 18:02 - 2014-02-25 18:14 - 00000000 ____D () C:\Users\*\.VirtualBox
2014-02-25 18:01 - 2014-02-25 18:01 - 00001076 _____ () C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2014-02-25 18:00 - 2014-02-25 18:00 - 00000000 ____D () C:\Program Files\Oracle
2014-02-25 18:00 - 2013-12-18 17:39 - 00203024 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2014-02-25 18:00 - 2013-12-18 17:38 - 00103696 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2014-02-25 17:54 - 2014-02-27 17:12 - 00000000 ____D () C:\Users\*\AppData\Local\Genymobile
2014-02-25 17:51 - 2014-02-25 17:51 - 00000000 ____D () C:\Program Files\Genymobile
2014-02-24 22:27 - 2014-02-24 22:27 - 00028028 _____ () C:\Users\*\Downloads\[kickass.to]louis.armstrong.hot.fives.and.sevens.vol.1.4.torrent
2014-02-24 21:00 - 2014-02-24 21:00 - 00112669 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.sexy.hot.xxx.dvdrip.xvid.nympho.torrent
2014-02-24 21:00 - 2014-02-24 21:00 - 00021590 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.teenlicious.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00023428 _____ () C:\Users\*\Downloads\[kickass.to]hard.candy.4.gabriella.fox.avi.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00017098 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.s01.gabriella.fox.nude.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00015984 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.from.bad.girls.torrent
2014-02-23 22:24 - 2014-02-23 22:24 - 00021280 _____ () C:\Users\*\Downloads\77721BCFCAA7D492025A4DAD79C432993CE3558B.torrent
2014-02-23 22:21 - 2014-02-23 22:21 - 00017304 _____ () C:\Users\*\Downloads\[kickass.to]the.very.best.of.louis.armstrong.2cd.torrent
2014-02-23 19:26 - 2014-02-23 19:26 - 00003663 _____ () C:\Users\*\Downloads\[kickass.to]miles.davis.kind.of.blue.50th.anniversary.collectors.edition.2008.torrent
2014-02-23 19:24 - 2014-02-23 19:24 - 00012028 _____ () C:\Users\*\Downloads\[katproxy.com]miles.davis.best.of.2007.jazz.torrent
2014-02-22 14:13 - 2014-02-22 14:13 - 00018958 _____ () C:\Users\*\Downloads\[kickass.to]chicago.1930.pc.torrent
2014-02-22 14:11 - 2014-02-22 14:11 - 00016621 _____ () C:\Users\*\Downloads\[kickass.to]pc.game.driver.3.driv3r.399mb.luv2break.rar.torrent
2014-02-22 13:52 - 2014-02-22 13:52 - 00017648 _____ () C:\Users\*\Downloads\[kickass.to]the.very.best.of.louis.armstrong.2cd.mp3.torrent
2014-02-22 13:20 - 2014-02-22 13:20 - 00012029 _____ () C:\Users\*\Downloads\[kickass.to]miles.davis.best.of.2007.jazz.torrent
2014-02-22 12:40 - 2014-02-22 12:40 - 00019952 _____ () C:\Users\*\Downloads\[kickass.to]dizzy.gillespie.the.very.best.of.dizz.torrent
2014-02-22 12:16 - 2014-02-22 12:16 - 00015242 _____ () C:\Users\*\Downloads\[kickass.to]ray.charles.ultimate.hits.collection.1999.v2.torrent
2014-02-22 11:51 - 2014-02-22 11:51 - 00028425 _____ () C:\Users\*\Downloads\[kickass.to]genius.the.ultimate.ray.charles.collection.genegeter.com.torrent
2014-02-22 11:44 - 2014-02-22 11:44 - 00000849 _____ () C:\Users\*\Downloads\Water.mid
2014-02-22 11:44 - 2014-02-22 11:44 - 00000849 _____ () C:\Users\*\Downloads\Water (1).mid
2014-02-22 11:01 - 2014-02-22 11:01 - 00014306 _____ () C:\Users\*\Downloads\[kickass.to]frank.sinatra.i.ve.got.the.world.on.a.string.the.very.best.of.frank.sinatra.2012.torrent
2014-02-22 11:00 - 2014-02-22 11:00 - 00017563 _____ () C:\Users\*\Downloads\[kickass.to]frank.sinatra.the.very.best.of.september.of.my.years.torrent
2014-02-21 22:04 - 2014-02-21 22:04 - 00038388 _____ () C:\Users\*\Downloads\90985-The-Godfather-1972-3CD-23.976fps-EN-37kB-TurkceAltyazi-org.zip
2014-02-21 22:01 - 2014-02-21 22:01 - 00041692 _____ () C:\Users\*\Downloads\the-godfather_english-530951.zip
2014-02-21 21:45 - 2014-02-21 21:45 - 00041586 _____ () C:\Users\*\Downloads\the-godfather_english-272081.zip
2014-02-21 21:25 - 2014-02-21 21:25 - 00022243 _____ () C:\Users\*\Downloads\[kickass.to]the.godfather.trilogy.part.1.2.3.dvdrip.torrent
2014-02-21 19:13 - 2014-02-21 19:13 - 00017551 _____ () C:\Users\*\Downloads\236367-cro-raop-premium-edition.torrent
2014-02-21 17:07 - 2014-02-21 17:08 - 00017605 _____ () C:\Users\*\Downloads\Kraftklub_-_Mit_K_(2012).torrent
2014-02-16 22:55 - 2004-12-10 09:06 - 00327680 _____ (On2.com Inc.) C:\Windows\system32\vp6dec.ax
2014-02-16 19:58 - 2014-02-16 19:58 - 00000000 ____D () C:\Users\*\Documents\3DReaperDX
2014-02-16 17:56 - 2014-02-16 17:56 - 00011392 _____ () C:\Users\*\Downloads\[kickass.to]pc.game.hitman.2.silent.assasin.iso.torrent
2014-02-16 10:05 - 2014-02-16 10:06 - 02062051 _____ (Roman Lut ) C:\Users\*\Downloads\3DRipperDXSetup.exe
2014-02-16 10:05 - 2014-02-16 10:05 - 00011141 _____ () C:\Users\*\Downloads\[kickass.to]scarface.the.world.is.yours.rus.eng.texture.fix.in.description.repacked.by.rg.origami.torrent
2014-02-16 09:55 - 2014-02-16 09:55 - 00017165 _____ () C:\Users\*\Downloads\[kickass.to]the.godfather.pc.game.torren
2014-02-14 15:53 - 2014-02-14 15:53 - 00020605 _____ () C:\Users\*\Downloads\[kickass.to]playboy.sa.60th.anniversary.our.annual.no.swim.suit.edition.january.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00017201 _____ () C:\Users\*\Downloads\[kickass.to]playboy.special.collector.s.edition.girls.and.cars.february.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00017060 _____ () C:\Users\*\Downloads\[kickass.to]playboy.special.collector.s.edition.the.butt.issue.january.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00000000 ____D () C:\Users\*\Downloads\Playboy Special Collector’s Edition Girls and Cars - February 2014
2014-02-13 23:22 - 2014-02-13 23:23 - 00000000 ____D () C:\Users\*\Downloads\Shindy - NWA + NWA 2.0
2014-02-13 17:35 - 2014-02-13 17:35 - 00000000 ____D () C:\Program Files\Creative
2014-02-13 17:35 - 2002-06-06 14:38 - 00139264 _____ (Creative Technology Ltd) C:\Windows\system32\eax.dll
2014-02-13 10:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

==================== One Month Modified Files and Folders =======

2014-03-15 19:51 - 2014-03-14 18:54 - 00014341 _____ () C:\Users\*\Desktop\FRST.txt
2014-03-15 19:50 - 2014-03-14 18:37 - 00000000 ____D () C:\FRST
2014-03-15 19:44 - 2014-03-15 19:43 - 00987442 _____ () C:\Users\*\Downloads\SecurityCheck.exe
2014-03-15 19:42 - 2013-08-04 12:11 - 00000000 ____D () C:\Users\*\AppData\Roaming\uTorrent
2014-03-15 19:41 - 2013-09-28 09:56 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-15 19:09 - 2013-08-04 01:47 - 01571575 _____ () C:\Windows\WindowsUpdate.log
2014-03-15 19:09 - 2009-07-14 05:34 - 00009904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-15 19:09 - 2009-07-14 05:34 - 00009904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-15 17:50 - 2014-03-15 17:48 - 02347384 _____ (ESET) C:\Users\*\Downloads\esetsmartinstaller_enu.exe
2014-03-15 12:06 - 2013-08-04 12:33 - 00000000 ____D () C:\Users\*\AppData\Roaming\vlc
2014-03-15 10:08 - 2013-08-03 17:31 - 00054394 _____ () C:\Windows\PFRO.log
2014-03-15 10:08 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-15 10:08 - 2009-07-14 05:39 - 00035144 _____ () C:\Windows\setupact.log
2014-03-15 10:08 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Speech
2014-03-14 23:35 - 2014-03-14 23:04 - 97030692 _____ () C:\Users\*\Downloads\ASWEHADAGE.rar
2014-03-14 21:51 - 2013-11-07 21:03 - 00000000 ____D () C:\Users\*\AppData\Local\Facebook
2014-03-14 19:04 - 2014-03-14 18:55 - 00029000 _____ () C:\Users\*\Desktop\Addition.txt
2014-03-14 18:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-14 18:52 - 2013-09-10 18:04 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-03-14 18:50 - 2013-09-29 17:15 - 00000000 ____D () C:\ProgramData\MAGIX
2014-03-14 18:36 - 2014-03-14 18:36 - 01145856 _____ (Farbar) C:\Users\*\Desktop\FRST.exe
2014-03-14 18:10 - 2014-02-27 17:14 - 00000000 ____D () C:\Users\*\AppData\Roaming\Telegram Win (Unofficial)
2014-03-14 15:09 - 2014-03-14 15:02 - 00000000 ____D () C:\Users\*\Downloads\The 2013 AVN Awards
2014-03-14 14:59 - 2014-03-14 14:58 - 00123684 _____ () C:\Users\*\Downloads\[kickass.to]the.2013.avn.awards.torrent
2014-03-14 14:14 - 2009-07-14 05:33 - 00366560 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 14:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Branding
2014-03-14 13:37 - 2014-03-14 13:37 - 00000000 ____D () C:\Users\*\Downloads\dfghyuj4i5y61g65fd165tyumacbookserspfkg,p
2014-03-14 13:33 - 2014-03-14 13:27 - 76148284 _____ () C:\Users\*\Downloads\dfghyuj4i5y61g65fd165tyumacbookserspfkg,p.rar
2014-03-14 06:12 - 2013-10-11 22:11 - 00000000 ____D () C:\Program Files\Opera
2014-03-13 16:34 - 2014-03-13 16:34 - 00000000 ____D () C:\Users\*\Downloads\SaturnDE-Eminem_-_The_Marshall_Mathers_LP2-13_03_2014
2014-03-13 16:31 - 2014-03-13 16:27 - 194320416 _____ () C:\Users\*\Downloads\SaturnDE-Eminem_-_The_Marshall_Mathers_LP2-13_03_2014.zip
2014-03-12 23:01 - 2014-03-12 23:01 - 00000004 _____ () C:\Users\*\Desktop\HHHDVD.txt
2014-03-12 19:20 - 2014-03-12 19:20 - 00607018 _____ () C:\Users\*\Downloads\[kickass.to]wwe.tripleh.thy.kingdom.come.2013.bdrip.x264.19977.sparrow.torrent
2014-03-12 16:47 - 2013-08-03 17:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-12 16:47 - 2013-08-03 17:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 16:47 - 2013-08-03 17:38 - 00000000 ____D () C:\Users\*\AppData\Local\Adobe
2014-03-12 16:07 - 2014-03-12 16:07 - 00000000 ____D () C:\Users\*\Downloads\BAD RELIGION - (1990) AGAINST THE GRAIN
2014-03-12 16:06 - 2014-03-12 16:06 - 00000000 ____D () C:\Users\*\Downloads\Blink-182-Enema-of-the-State-(1999)
2014-03-12 14:39 - 2014-03-12 14:25 - 00000000 ____D () C:\Users\*\Downloads\WWE.Themes
2014-03-12 11:21 - 2014-03-12 11:20 - 00539337 _____ () C:\Users\*\Downloads\[kickass.to]wwe.stone.cold.steve.austin.the.bottom.line.2011.dvdrip.xvid.u3f.torrent
2014-03-12 11:18 - 2013-09-10 18:03 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2014-03-12 11:14 - 2014-03-12 11:13 - 00025058 _____ () C:\Users\*\Downloads\[kickass.to]wwe.cm.punk.best.in.the.world.2012.dvdrip.x264.nwchd.torrent
2014-03-12 11:00 - 2014-03-12 11:00 - 00056966 _____ () C:\Users\*\Downloads\[kickass.to]wwe.themes.torrent
2014-03-11 22:41 - 2014-03-11 15:32 - 00000000 ____D () C:\Users\*\Downloads\WWE Divas Playboy Collection
2014-03-11 16:30 - 2014-03-11 16:30 - 00112352 _____ () C:\Users\*\Downloads\[kickass.to]vivid.back.door.to.chyna (1).torrent
2014-03-11 16:30 - 2014-03-11 16:27 - 00112352 _____ () C:\Users\*\Downloads\[kickass.to]vivid.back.door.to.chyna.torrent
2014-03-11 15:33 - 2014-03-11 15:33 - 00010967 _____ () C:\Users\*\Downloads\975B432C628850E7E889BF90AAF5AD636DF0E4A7.torrent
2014-03-11 15:31 - 2014-03-11 15:31 - 00078420 _____ () C:\Users\*\Downloads\[kickass.to]wwe.divas.playboy.collection.torrent
2014-03-11 15:28 - 2014-03-11 15:28 - 00034330 _____ () C:\Users\*\Downloads\[kickass.to]tiffany.playboy.photoshoots.torrent
2014-03-11 13:38 - 2014-03-11 13:38 - 00098317 _____ () C:\Users\*\Downloads\[kickass.to]myfriendshotmom.13.06.27.brandi.love.xxx.1080p.mp4.ktr.torrent
2014-03-10 17:03 - 2014-03-10 17:02 - 00026729 _____ () C:\Users\*\Downloads\[kickass.to]mysistershotfriend.christy.mack.2013.480p.mp4.torrent
2014-03-09 21:23 - 2014-03-09 21:23 - 00000000 ____D () C:\Users\*\Documents\Telltale Games
2014-03-09 21:23 - 2014-03-09 21:23 - 00000000 ____D () C:\ProgramData\REVOLT
2014-03-09 20:27 - 2014-03-09 20:27 - 00002511 _____ () C:\Users\*\Desktop\Play The Walking Dead nosTEAM.lnk
2014-03-09 18:38 - 2014-03-09 18:38 - 00017595 _____ () C:\Users\*\Downloads\[kickass.to]the.walking.dead.episodes.1.2.3.4.5.pc.full.game.nosteam.torrent
2014-03-09 15:14 - 2013-09-14 17:27 - 00000000 ____D () C:\Users\*\AppData\Roaming\Audacity
2014-03-09 14:43 - 2014-03-09 14:43 - 00023338 _____ () C:\Users\*\Downloads\[kickass.to]bloc.party.silent.alarm.2005.only1joe.320mp3.torrent
2014-03-09 13:24 - 2014-03-09 13:24 - 00011108 _____ () C:\Users\*\Downloads\[kickass.to]jet.get.born.2cd.limited.edition.2005.by.smelly.torrent
2014-03-09 13:23 - 2014-03-09 13:23 - 00039001 _____ () C:\Users\*\Downloads\[kickass.to]ok.go.oh.no.torrent
2014-03-09 13:21 - 2014-03-09 13:21 - 00013823 _____ () C:\Users\*\Downloads\[kickass.to]yellowcard.ocean.avenue.2003.torrent
2014-03-08 12:24 - 2013-09-07 21:46 - 00000000 ____D () C:\Users\*\AppData\Roaming\Skype
2014-03-08 11:15 - 2014-03-08 11:15 - 00015492 _____ () C:\Users\*\Downloads\[kickass.to]blur.blur.pop.rock.1997.mp3.housezz.cd.torrent
2014-03-08 09:26 - 2014-03-08 09:26 - 00013612 _____ () C:\Users\*\Downloads\[kickass.to]dirtymasseur.christy.mack.science.friction.04.10.2013.torrent
2014-03-06 15:27 - 2013-12-29 20:39 - 00000000 ____D () C:\Program Files\Full Tilt Poker.Eu
2014-03-05 23:42 - 2014-03-05 23:42 - 00006929 _____ () C:\Users\*\Downloads\[kickass.to]jan.delay.wir.kinder.vom.bahnhof.soul.de.2009.noir.torrent
2014-03-05 23:27 - 2014-03-05 23:27 - 00019905 _____ () C:\Users\*\Downloads\[kickass.to]udo.lindenberg.stark.wie.zwei.torrent
2014-03-04 16:44 - 2014-01-20 12:33 - 00008004 _____ () C:\Users\*\Desktop\Rap.txt
2014-03-03 21:21 - 2014-03-03 21:21 - 00026767 _____ () C:\Users\*\Downloads\[kickass.to]juliaannlive.oiled.up.foursome.julia.ann.lisa.ann.torrent
2014-03-03 20:38 - 2014-03-03 20:38 - 00014898 _____ () C:\Users\*\Downloads\[kickass.to]coldplay.viva.la.vida.or.death.and.all.his.friends.2008.al.torrent
2014-03-03 18:14 - 2014-03-03 18:14 - 00000000 ____D () C:\Users\*\AppData\Local\Skype
2014-03-03 18:13 - 2013-09-07 21:46 - 00000000 ____D () C:\ProgramData\Skype
2014-03-03 18:12 - 2014-03-03 18:12 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-03 18:12 - 2014-03-03 18:12 - 00000000 ___RD () C:\Program Files\Skype
2014-03-03 18:12 - 2014-03-03 18:12 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-02 12:33 - 2013-12-07 22:51 - 00003748 _____ () C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml
2014-03-02 12:32 - 2014-03-02 12:32 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-03-02 12:32 - 2013-12-07 22:52 - 00042784 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-03-02 12:32 - 2013-12-07 22:51 - 00000000 ____D () C:\Program Files\AVG SafeGuard toolbar
2014-03-01 05:30 - 2014-03-14 06:08 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-14 06:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-14 06:08 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-14 06:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-14 06:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-14 06:08 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-14 06:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-14 06:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-14 06:08 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-14 06:08 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-14 06:08 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-14 06:08 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-14 06:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-14 06:08 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-14 06:08 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-14 06:08 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-14 06:08 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-14 06:08 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-14 06:08 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-14 06:08 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-14 06:08 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-14 06:08 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-27 22:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-27 18:37 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-27 18:29 - 2014-02-25 19:14 - 00000000 ____D () C:\SocketeQ
2014-02-27 17:34 - 2014-02-27 17:34 - 00000013 _____ () C:\Users\*\Desktop\Mamas Passwort.txt
2014-02-27 17:14 - 2014-02-27 17:14 - 00001050 _____ () C:\Users\*\Desktop\Telegram.lnk
2014-02-27 17:14 - 2014-02-27 17:14 - 00000000 ____D () C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Win (Unofficial)
2014-02-27 17:12 - 2014-02-25 17:54 - 00000000 ____D () C:\Users\*\AppData\Local\Genymobile
2014-02-25 18:46 - 2014-02-25 18:46 - 04595712 _____ () C:\Users\*\Downloads\pcap526_x86.msi
2014-02-25 18:14 - 2014-02-25 18:02 - 00000000 ____D () C:\Users\*\.VirtualBox
2014-02-25 18:09 - 2014-02-25 18:09 - 00000000 ____D () C:\Users\*\.android
2014-02-25 18:09 - 2013-08-03 16:55 - 00000000 ____D () C:\Users\*
2014-02-25 18:01 - 2014-02-25 18:01 - 00001076 _____ () C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2014-02-25 18:00 - 2014-02-25 18:00 - 00000000 ____D () C:\Program Files\Oracle
2014-02-25 17:51 - 2014-02-25 17:51 - 00000000 ____D () C:\Program Files\Genymobile
2014-02-24 22:27 - 2014-02-24 22:27 - 00028028 _____ () C:\Users\*\Downloads\[kickass.to]louis.armstrong.hot.fives.and.sevens.vol.1.4.torrent
2014-02-24 21:59 - 2013-09-10 18:40 - 00000000 ____D () C:\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-24 21:00 - 2014-02-24 21:00 - 00112669 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.sexy.hot.xxx.dvdrip.xvid.nympho.torrent
2014-02-24 21:00 - 2014-02-24 21:00 - 00021590 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.teenlicious.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00023428 _____ () C:\Users\*\Downloads\[kickass.to]hard.candy.4.gabriella.fox.avi.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00017098 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.s01.gabriella.fox.nude.torrent
2014-02-24 20:59 - 2014-02-24 20:59 - 00015984 _____ () C:\Users\*\Downloads\[kickass.to]gabriella.fox.from.bad.girls.torrent
2014-02-23 22:24 - 2014-02-23 22:24 - 00021280 _____ () C:\Users\*\Downloads\77721BCFCAA7D492025A4DAD79C432993CE3558B.torrent
2014-02-23 22:21 - 2014-02-23 22:21 - 00017304 _____ () C:\Users\*\Downloads\[kickass.to]the.very.best.of.louis.armstrong.2cd.torrent
2014-02-23 19:26 - 2014-02-23 19:26 - 00003663 _____ () C:\Users\*\Downloads\[kickass.to]miles.davis.kind.of.blue.50th.anniversary.collectors.edition.2008.torrent
2014-02-23 19:24 - 2014-02-23 19:24 - 00012028 _____ () C:\Users\*\Downloads\[katproxy.com]miles.davis.best.of.2007.jazz.torrent
2014-02-22 14:13 - 2014-02-22 14:13 - 00018958 _____ () C:\Users\*\Downloads\[kickass.to]chicago.1930.pc.torrent
2014-02-22 14:11 - 2014-02-22 14:11 - 00016621 _____ () C:\Users\*\Downloads\[kickass.to]pc.game.driver.3.driv3r.399mb.luv2break.rar.torrent
2014-02-22 13:52 - 2014-02-22 13:52 - 00017648 _____ () C:\Users\*\Downloads\[kickass.to]the.very.best.of.louis.armstrong.2cd.mp3.torrent
2014-02-22 13:20 - 2014-02-22 13:20 - 00012029 _____ () C:\Users\*\Downloads\[kickass.to]miles.davis.best.of.2007.jazz.torrent
2014-02-22 12:40 - 2014-02-22 12:40 - 00019952 _____ () C:\Users\*\Downloads\[kickass.to]dizzy.gillespie.the.very.best.of.dizz.torrent
2014-02-22 12:16 - 2014-02-22 12:16 - 00015242 _____ () C:\Users\*\Downloads\[kickass.to]ray.charles.ultimate.hits.collection.1999.v2.torrent
2014-02-22 11:51 - 2014-02-22 11:51 - 00028425 _____ () C:\Users\*\Downloads\Water.mid
2014-02-22 11:44 - 2014-02-22 11:44 - 00000849 _____ () C:\Users\*\Downloads\Water (1).mid
2014-02-22 11:01 - 2014-02-22 11:01 - 00014306 _____ () C:\Users\*\Downloads\[kickass.to]frank.sinatra.i.ve.got.the.world.on.a.string.the.very.best.of.frank.sinatra.2012.torrent
2014-02-22 11:00 - 2014-02-22 11:00 - 00017563 _____ () C:\Users\*\Downloads\[kickass.to]frank.sinatra.the.very.best.of.september.of.my.years.torrent
2014-02-21 22:04 - 2014-02-21 22:04 - 00038388 _____ () C:\Users\*\Downloads\90985-The-Godfather-1972-3CD-23.976fps-EN-37kB-TurkceAltyazi-org.zip
2014-02-21 22:01 - 2014-02-21 22:01 - 00041692 _____ () C:\Users\*\Downloads\the-godfather_english-530951.zip
2014-02-21 21:45 - 2014-02-21 21:45 - 00041586 _____ () C:\Users\*\Downloads\the-godfather_english-272081.zip
2014-02-21 21:25 - 2014-02-21 21:25 - 00022243 _____ () C:\Users\*\Downloads\[kickass.to]the.godfather.trilogy.part.1.2.3.dvdrip.torrent
2014-02-21 19:13 - 2014-02-21 19:13 - 00017551 _____ () C:\Users\*\Downloads\236367-cro-raop-premium-edition.torrent
2014-02-21 17:08 - 2014-02-21 17:07 - 00017605 _____ () C:\Users\*\Downloads\Kraftklub_-_Mit_K_(2012).torrent
2014-02-16 22:39 - 2013-09-01 22:02 - 00056841 _____ () C:\Windows\DirectX.log
2014-02-16 19:58 - 2014-02-16 19:58 - 00000000 ____D () C:\Users\*\Documents\3DReaperDX
2014-02-16 17:56 - 2014-02-16 17:56 - 00011392 _____ () C:\Users\*\Downloads\[kickass.to]pc.game.hitman.2.silent.assasin.iso.torrent
2014-02-16 10:06 - 2014-02-16 10:05 - 02062051 _____ (Roman Lut ) C:\Users\*\Downloads\3DRipperDXSetup.exe
2014-02-16 10:05 - 2014-02-16 10:05 - 00011141 _____ () C:\Users\*\Downloads\[kickass.to]scarface.the.world.is.yours.rus.eng.texture.fix.in.description.repacked.by.rg.origami.torrent
2014-02-16 09:55 - 2014-02-16 09:55 - 00017165 _____ () C:\Users\*\Downloads\[kickass.to]the.godfather.pc.game.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00020605 _____ () C:\Users\*\Downloads\[kickass.to]playboy.sa.60th.anniversary.our.annual.no.swim.suit.edition.january.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00017201 _____ () C:\Users\*\Downloads\[kickass.to]playboy.special.collector.s.edition.girls.and.cars.february.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00017060 _____ () C:\Users\*\Downloads\[kickass.to]playboy.special.collector.s.edition.the.butt.issue.january.2014.torrent
2014-02-14 15:53 - 2014-02-14 15:53 - 00000000 ____D () C:\Users\*\Downloads\Playboy Special Collector’s Edition Girls and Cars - February 2014
2014-02-13 23:23 - 2014-02-13 23:22 - 00000000 ____D () C:\Users\*\Downloads\Shindy - NWA + NWA 2.0
2014-02-13 17:35 - 2014-02-13 17:35 - 00000000 ____D () C:\Program Files\Creative
2014-02-13 17:03 - 2014-02-12 20:56 - 00000000 ____D () C:\Users\*\Documents\Max Payne Savegames
2014-02-13 16:43 - 2014-01-19 00:24 - 00000778 _____ () C:\Users\*\Desktop\All Time Favorites.txt
2014-02-13 10:08 - 2013-09-14 14:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 10:05 - 2013-08-31 22:57 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-13 10:02 - 2013-08-03 17:02 - 00788084 _____ () C:\Windows\system32\PerfStringBackup.INI

Some content of TEMP:
====================
C:\Users\*\AppData\Local\Temp\AutoRun.exe
C:\Users\*\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\*\AppData\Local\Temp\EAInstall.dll
C:\Users\*\AppData\Local\Temp\eauninstall.exe
C:\Users\*\AppData\Local\Temp\FileSystemView.dll
C:\Users\*\AppData\Local\Temp\The Godfather The Game_uninst.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 10:22

==================== End Of Log ============================

--- --- ---

--- --- ---

Ansonsten keine Probleme

schrauber · 16.03.2014, 17:35

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Dabadu · 16.03.2014, 18:06

Vielen, vielen Dank

schrauber · 17.03.2014, 10:20

Gern Geschehen

C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\rzr-cod4.exe (Trojan.Agent.CK)

Plagegeister aller Art und deren Bekämpfung: C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\rzr-cod4.exe (Trojan.Agent.CK)