Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 28.05.2014, 22:06   #1
SilentDeath
 
GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Hallo liebe Community

Ich bin noch sehr neu in diesem Forum und muss gestehen, ich habe nicht ganz so viel Ahnung.
Trotzdem möchte ich mich schon einmal im voraus bei jedem bedanken der sich meines Problems annimmt.

Zuerst etwas zu meinem System:

Mainboard: Asus M4N68T-M
Prozessor: AMD Phenom II X4 965 Black Edition (3,4GHz)
Arbeitsspeicher: 2x 4GB
Grafikkarte: ATI Radeon Sapphire HD5830 Xtreme (1GB)
Festplatte(n):
1 X WDC WD30EZRS (3TB) ;
1 X WDC WD5000AADS (0,5TB) ;
1 X Samsung HD103SJ (1TB)
Betriebssystem: Windows 7 Ultimate 64 Bit
Antivirus: Norton Internet Security 2014

Als nächstes zu meinem Problemen:
Ich habe schon sei längerem das Problem das mein PC sehr lange braucht um vollständig hoch zu fahren (nach Anmeldung bis zum vollständigen laden aller Programme).
Dann habe ich das Problem das viele Spiele (auch ältere Spiele) wie z.B. NFS The Run; CoD BlackOps; Protoype 2 etc. nur flüssig laufen wenn ich die Grafik auf ein Minimum runter schraube.
und mein Hauptproblem:
Sobald der PC hochgefahren ist geht die GPU-Auslastung auf 98-99%.
Ohne das ich irgendein Programm starte. Auch bei trennen der Internetverbindung bleibt das Problem bestehen.

Meine Lösungsversuche:

Ich habe Norton einen vollständigen SystemScan und mehrere Laufwerks- und Ordnerscans durchführen lassen.
Es wurden diverse Fehler aufgezeigt, hauptsächlich Trainer oder Cracks für Spiele (An dieser Stelle will ich lieber gleich sagen: Schande über mich. Ich habe alles was ich konnte gelöscht) aber auch einiges an Meldung wie: Heuristik, Maleware, Angriffsversuch von Außerhalb (o.s.ä.) -> die laut Norton alle behoben bzw. gelöscht wurden.
Ich habe es leider versäumt die LOGs zu speichern, sonst hätte ich sie hier mit angehängt.
Es dauert leider fast einen Tag bis Norton mein komplettes System gescannt hat (4,5 TB). Sonst hätte ich das noch einmal gemacht.
Ich habe noch mit CCleaner alle Verläufe, Temp-Dateinen etc. gelöscht und die Registry säubern lassen.

Als nächstes habe ich im Internet nach ähnlichen Problemen gesucht und festgestellt das es doch ein Problem ist, das viele haben.
Die meisten Lösungsvorschläge beinhalteten: Grafikkarten-Treiber erneuern (down oder updaten)
Das habe ich auch versucht -> erst die Treiber runter -> dann die von der mitgelieferten DVD drauf -> leider ohne erfolg.
Dann habe ich den neusten Treiber geladen -> mit selben Ergebnis.

Ich habe mit dem ATI-Catalyst und mit dem Afterburner von MSI die GPU-Auslastung ausgelesen -> selbes Ergebnis (98-99% im Leerlauf)

Dann bin ich durch Zufall über einen Beitrag hier im Forum gestolpert. Dort ging es um eine ähnliche Problematik mit einem Virus der sich als eine Datei namens "SVCHOST" ausgab.
Daraufhin habe ich im Taskmanager gesucht welche von den 18 Dateien namens "SVCHOST" den höchsten Ausschlag in der CPU-Auslastung hat (einfach nur weil ich Ratlos war) -> habe eine gefunden -> den Prozess beendet und auf einmal war meine GPU-Auslastung bei 0%

Nach einem Neustart war das Problem wieder da und ich habe versucht die Datei zu lokalisieren -> leider erfolglos (Pfad: System32 und da lösche ich nicht einfach wild drauf los - bringt ja eh meist nix)

Jedenfalls habe ich versucht mich an die hier vorgegebene Vorgehensweise zu halten und habe die Schritte abgearbeitet (so gut ich konnte)

1. Defogger

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 19:58 on 28/05/2014 (Devil)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed

Checking for services/drivers...
SPTD -> Disabled (Service running -> reboot required)


-=E.O.F=-
         
2. FRST


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Devil (administrator) on NEO on 28-05-2014 20:10:46
Running from D:\Downloads
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrAdm.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrDba.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrHis.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrPas.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrSaz.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Realtime Soft Ltd) C:\Program Files\UltraMon\UltraMon.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrAuf.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbar.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbar64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
() C:\Windows\Temp\svchost.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Realtime Soft Ltd) C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(OCS) C:\Users\Devil\AppData\Local\Temp\OCS\ocs_v71b.exe
(Trend Micro Inc.) C:\Users\Devil\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\7b4e384f5b096b9656fee276ba88bb81\HiJackThis204.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2770432 2010-02-10] (VIA)
HKLM-x32\...\Run: [BCU] => C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [411864 2010-03-05] (DeviceVM, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1033395003-4163772576-2144622384-1000\...\Run: [Google Update] => C:\Users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-27] (Google Inc.)
HKU\S-1-5-21-1033395003-4163772576-2144622384-1000\...\MountPoints2: I - I:\USBAutoRun.exe
HKU\S-1-5-21-1033395003-4163772576-2144622384-1000\...\MountPoints2: L - L:\USBAutoRun.exe
HKU\S-1-5-21-1033395003-4163772576-2144622384-1000\...\MountPoints2: {e6d2cde0-9d86-11e3-9221-806e6f6e6963} - I:\USBAutoRun.exe
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UltraMon.lnk
ShortcutTarget: UltraMon.lnk -> C:\Windows\Installer\{ED7FE81C-378C-411D-B5B4-509B978BA204}\IcoUltraMon.ico ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll (DeviceVM, Inc.)
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {F0F228EA-94F0-4EDC-862B-9077FF306370} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311336&CUI=UN63439897524308264&UM=2
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=E8B400FF09724650
SearchScopes: HKCU - {A1DABF90-F83C-4a5a-8000-514E06654FA7} URL = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5369970905&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms}
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://int.search-results.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=19&gct=sb&qsrc=2869
SearchScopes: HKCU - {C3EA6126-6E4F-4d88-978E-291625E6B2A1} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
SearchScopes: HKCU - {F0F228EA-94F0-4EDC-862B-9077FF306370} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311336&CUI=UN63439897524308264&UM=2
BHO: Lucky Savings WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Drop Pad Web Backup - {25DA541F-6ACF-4052-A8AA-1D58284729C7} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO-x32: No Name - {F1AF26F8-1828-4279-ABCE-074EF3235BD7} -  No File
Toolbar: HKLM - Lucky Savings Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {98889811-442D-49dd-99D7-DC866BE87DBC} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\Program Files (x86)\ElsaWin\bin\wiprot.dll (TODO: <Company name>)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default
FF DefaultSearchEngine: Freemium DE Customized Web Search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Devil\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Devil\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\babylon1.xml
FF SearchPlugin: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\claro.xml
FF SearchPlugin: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\admin@proxy-listen.de.xpi [2013-02-12]
FF Extension: Adblock Plus - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-19]
FF HKLM\...\Firefox\Extensions: [{FEFE89E5-A43F-4f4b-8211-B11D91D02135}] - C:\Program Files\CoolPic - Fun Social Pictures\Firefox
FF HKLM\...\Firefox\Extensions: [{14DD0E04-D4F6-45d2-A958-F361FBD4F64F}] - C:\Program Files\WBC Engine\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [ocr@babylon.com] - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\ocr@babylon.com
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-14]
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: https://www.google.de/
CHR StartupUrls: "https://www.google.de/"
CHR Plugin: (Shockwave Flash) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U11) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (phonostar Detector) - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
CHR Plugin: (Google Update) - C:\Users\Devil\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Extension: (Adblock Plus) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-04-28]
CHR Extension: (AdBlock) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-04-28]
CHR Extension: (Google Wallet) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR HKCU\...\Chrome\Extension: [jopemfhojpebdeollanchfjhpbkcijoi] - C:\Users\Devil\AppData\Local\CRE\jopemfhojpebdeollanchfjhpbkcijoi.crx [2013-12-10]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-03-25]
CHR HKLM-x32\...\Chrome\Extension: [bcjagnifjocnddgeknajocbkkhlgibem] - C:\Program Files (x86)\Surf Canyon\surfcanyon.crx [2013-01-10]
CHR HKLM-x32\...\Chrome\Extension: [hacjidbllfnlecmikihhjphlicpbepih] - C:\Program Files (x86)\Strongvault Online Backup\DropPad.crx [2013-01-10]
CHR HKLM-x32\...\Chrome\Extension: [jbpkiefagocgkmemidfngdkamloieekf] - C:\Program Files (x86)\TornTV.com\torn10.crx [2012-11-14]
CHR HKLM-x32\...\Chrome\Extension: [jopemfhojpebdeollanchfjhpbkcijoi] - C:\Users\Devil\AppData\Local\CRE\jopemfhojpebdeollanchfjhpbkcijoi.crx [2013-12-10]
CHR HKLM-x32\...\Chrome\Extension: [kiplfnciaokpcennlkldkdaeaaomamof] - C:\Users\Devil\AppData\Local\Torch\Plugins\TorchPlugin.crx [2013-02-10]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-24]
CHR HKLM-x32\...\Chrome\Extension: [ohlfohjgijhjlpidbbnmcdooegafnnnm] - C:\Program Files (x86)\SockshareDownloader\SockshareDownloader10.crx [2014-05-24]
CHR HKLM-x32\...\Chrome\Extension: [pmlghpafmmnmmkjdhacccolfgnkiboco] - C:\Program Files (x86)\1ClickDownload\oneclickdownloader11.crx [2012-08-07]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
R2 LcSvrAdm; D:\ElsaWin\bin\LcSvrAdm.exe [240640 2011-12-06] (Volkswagen AG)
R3 LcSvrAuf; D:\ElsaWin\bin\LcSvrAuf.exe [1321472 2011-12-06] (Volkswagen AG)
R2 LcSvrDba; D:\ElsaWin\bin\LcSvrDba.exe [392704 2011-12-06] (Volkswagen AG)
R2 LcSvrHis; D:\ElsaWin\bin\LcSvrHis.exe [335360 2011-12-06] (Volkswagen AG)
R2 LcSvrPAS; D:\ElsaWin\bin\LcSvrPas.exe [477696 2011-12-06] (Volkswagen AG)
R2 LcSvrSaz; D:\ElsaWin\bin\LcSvrSaz.exe [373248 2011-12-06] (Volkswagen AG)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-10-29] ()
S4 S3DSvc32; C:\Program Files (x86)\iZ3D Driver\Win32\S3DCService.exe [360960 2010-10-25] (iZ3D Inc.)
S4 S3DSvc64; C:\Program Files (x86)\iZ3D Driver\Win64\S3DCService.exe [480768 2010-10-25] (iZ3D Inc.)
S4 TorchCrashHandler; C:\Users\Devil\AppData\Local\Torch\Update\TorchCrashHandler.exe [1213448 2013-11-04] (TorchMedia Inc.)

==================== Drivers (Whitelisted) ====================

S3 AODDriver4.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [63872 2006-10-29] (Broadcom Corporation.)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-01-03] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140527.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R1 iZ3DInjectionDriver; C:\Program Files (x86)\iZ3D Driver\Win64\S3DInjectionDriver.sys [43704 2010-10-06] ()
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140527.016\ENG64.SYS [126040 2014-04-29] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140527.016\EX64.SYS [2099288 2014-04-29] (Symantec Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-04-24] (Duplex Secure Ltd.)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-13] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-09-17] (Anchorfree Inc.)
S3 usbaudio; C:\Windows\SysWOW64\drivers\usbaudio.sys [39840 1998-08-21] (Microsoft Corporation)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.)
S3 usbcamcl; C:\Windows\System32\DRIVERS\usbcamcl.sys [53960 2011-01-13] (usb camera)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.)
S3 zonescreen; C:\Windows\System32\DRIVERS\zsport.sys [12024 2010-10-31] (ZoneOS)
S3 btaudio; system32\drivers\btaudio.sys [X]
S3 BTDriver; system32\DRIVERS\btport.sys [X]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X]
S3 btwhid; system32\DRIVERS\btwhid.sys [X]
S3 btwmodem; system32\DRIVERS\btwmodem.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S1 EIO64; system32\DRIVERS\EIO64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-28 20:10 - 2014-05-28 20:10 - 00000000 ____D () C:\FRST
2014-05-28 20:05 - 2014-05-28 20:05 - 00013330 _____ () C:\Users\Devil\Desktop\Defogger.lnk
2014-05-28 19:59 - 2014-05-28 20:00 - 00000448 _____ () C:\Windows\setupact.log
2014-05-28 19:59 - 2014-05-28 19:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-28 19:58 - 2014-05-28 19:58 - 00000188 _____ () C:\Users\Devil\defogger_reenable
2014-05-27 23:58 - 2014-05-27 23:58 - 09591606 _____ () C:\Users\Devil\Downloads\Windows6.1-KB958559-x86.msu
2014-05-27 23:20 - 2014-05-27 23:20 - 00000000 ____D () C:\ProgramData\ATI
2014-05-27 23:17 - 2014-05-27 23:17 - 00061432 _____ () C:\Windows\SysWOW64\CCCInstall_201405272317260220.log
2014-05-27 23:17 - 2014-05-27 23:17 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-05-27 23:14 - 2014-05-27 23:14 - 00000000 ____D () C:\Program Files\AMD
2014-05-27 23:13 - 2014-04-18 04:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 06799688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 00099520 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2014-05-27 23:13 - 2014-04-18 04:39 - 00274656 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-05-27 23:13 - 2014-04-18 04:36 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-05-27 23:13 - 2014-04-18 04:23 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-05-27 23:13 - 2014-04-18 04:22 - 28685824 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-05-27 23:13 - 2014-04-18 04:17 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-27 23:13 - 2014-04-18 04:13 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-05-27 23:13 - 2014-04-18 04:13 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-05-27 23:13 - 2014-04-18 04:12 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-05-27 23:13 - 2014-04-18 04:12 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-05-27 23:13 - 2014-04-18 03:58 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-05-27 23:13 - 2014-04-18 03:51 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00580816 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-05-27 23:13 - 2014-04-18 03:46 - 00580816 _____ () C:\Windows\system32\atiapfxx.blb
2014-05-27 23:13 - 2014-04-18 03:46 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-05-27 23:13 - 2014-04-18 03:46 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-05-27 23:13 - 2014-04-18 03:45 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-05-27 23:13 - 2014-04-18 03:45 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-05-27 23:13 - 2014-04-18 03:42 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-05-27 23:13 - 2014-04-18 03:33 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-05-27 23:13 - 2014-04-18 03:33 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-05-27 23:13 - 2014-04-18 03:30 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-05-27 23:13 - 2014-04-18 03:30 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-05-27 23:13 - 2014-04-18 03:29 - 00586240 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-05-27 23:13 - 2014-04-18 03:29 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-05-27 23:13 - 2014-04-18 03:28 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-05-27 23:13 - 2014-04-18 03:28 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-05-27 23:13 - 2014-04-18 03:21 - 00806912 _____ (AMD) C:\Windows\system32\coinst_14.100.dll
2014-05-27 23:13 - 2014-04-18 03:17 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-05-27 23:13 - 2014-04-18 03:09 - 01177600 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-05-27 23:13 - 2014-04-18 03:07 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-05-27 23:13 - 2014-04-18 03:04 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-05-27 23:13 - 2014-04-10 19:58 - 00082128 _____ () C:\Windows\system32\ativce02.dat
2014-05-27 23:13 - 2014-04-01 00:06 - 00234804 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-05-27 23:13 - 2014-04-01 00:04 - 00233008 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-05-27 23:13 - 2014-02-06 17:45 - 00134192 _____ () C:\Windows\system32\ativce03.dat
2014-05-27 23:13 - 2014-01-16 19:00 - 00273712 _____ () C:\Windows\system32\ativvaxy_vi_nd.dat
2014-05-27 23:13 - 2014-01-16 18:59 - 00275124 _____ () C:\Windows\system32\ativvaxy_vi.dat
2014-05-27 23:13 - 2014-01-16 10:34 - 00723841 _____ () C:\Windows\system32\atiicdxx.dat
2014-05-27 23:13 - 2013-12-19 18:45 - 00094720 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2014-05-27 23:13 - 2013-12-19 18:44 - 00110080 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sapphire TRIXX
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Program Files (x86)\Sapphire TRIXX
2014-05-27 22:45 - 2014-05-27 22:46 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2014-05-27 22:45 - 2014-05-27 22:45 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2014-05-27 21:20 - 2014-05-27 21:20 - 00000007 _____ () C:\Users\Devil\SeatPW.txt
2014-05-25 11:09 - 2014-05-25 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL8FB2.tmp
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL7FE8.tmp
2014-05-16 23:35 - 2014-05-16 23:35 - 00000130 _____ () C:\Users\Devil\Documents\Jochen TT.txt
2014-05-12 21:43 - 2014-05-12 21:43 - 00030208 _____ () C:\devdll.dll
2014-05-10 11:13 - 2014-05-10 11:13 - 00007595 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.cl
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.log
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75AC.tmp
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL756D.tmp
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\Program Files (x86)\Aeria Games
2014-05-05 22:25 - 2014-05-06 18:41 - 00000000 ____D () C:\Users\Devil\AppData\Local\Akamai
2014-05-05 22:25 - 2014-05-05 22:25 - 00000000 ____D () C:\AeriaGames
2014-05-04 00:21 - 2014-05-16 19:57 - 00000603 _____ () C:\Users\Devil\Documents\SeatTeile.txt
2014-05-02 19:58 - 2014-05-02 19:58 - 00000044 _____ () C:\Users\Devil\Documents\RalfKonto1.txt
2014-05-01 22:32 - 2014-05-01 22:32 - 00000000 ____D () C:\Users\Devil\Documents\Alcohol 120%
2014-04-29 20:01 - 2014-04-29 20:04 - 00003608 _____ () C:\Users\Devil\logSequencer.log
2014-04-29 20:00 - 2014-05-27 23:08 - 00000000 ____D () C:\Users\Devil\GLUCOFACTS Deluxe
2014-04-28 22:16 - 2014-05-06 18:34 - 00000000 ____D () C:\Keule306

==================== One Month Modified Files and Folders =======

2056-04-24 22:17 - 2014-03-25 23:02 - 00004096 _____ () C:\Users\Public\Documents\0000319C.LCS
2056-04-24 22:17 - 2014-03-25 23:00 - 00000000 ____D () C:\WDIGIPET
2015-08-01 19:43 - 2014-03-26 00:14 - 00000368 _____ () C:\Users\Devil\Documents\ax_files.xml
2015-08-01 19:43 - 2013-10-27 20:58 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{72B68498-F2A6-46D9-BBFA-FB3ABA89363F}
2014-05-28 20:10 - 2014-05-28 20:10 - 00000000 ____D () C:\FRST
2014-05-28 20:05 - 2014-05-28 20:05 - 00013330 _____ () C:\Users\Devil\Desktop\Defogger.lnk
2014-05-28 20:05 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-28 20:05 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-28 20:04 - 2012-08-26 16:38 - 01764895 _____ () C:\Windows\WindowsUpdate.log
2014-05-28 20:00 - 2014-05-28 19:59 - 00000448 _____ () C:\Windows\setupact.log
2014-05-28 20:00 - 2014-04-25 22:24 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-28 20:00 - 2013-02-21 02:06 - 00000414 _____ () C:\Windows\Tasks\PC Optimizer Pro64 startups.job
2014-05-28 19:59 - 2014-05-28 19:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-28 19:59 - 2014-02-20 23:05 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-05-28 19:59 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-28 19:58 - 2014-05-28 19:58 - 00000188 _____ () C:\Users\Devil\defogger_reenable
2014-05-28 19:58 - 2012-08-26 16:47 - 00000000 ____D () C:\Users\Devil
2014-05-28 19:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-05-28 19:41 - 2012-09-27 15:39 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA.job
2014-05-28 19:41 - 2012-09-27 15:39 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core.job
2014-05-28 19:37 - 2012-10-20 13:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-28 19:36 - 2014-04-25 22:24 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-28 19:26 - 2012-08-26 20:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\DAEMON Tools Lite
2014-05-28 19:25 - 2012-08-26 19:37 - 00000000 ____D () C:\Users\Devil\AppData\Local\CrashDumps
2014-05-28 00:04 - 2013-04-24 21:56 - 00000344 _____ () C:\Windows\ODBC.INI
2014-05-27 23:58 - 2014-05-27 23:58 - 09591606 _____ () C:\Users\Devil\Downloads\Windows6.1-KB958559-x86.msu
2014-05-27 23:38 - 2012-09-12 20:18 - 00524288 ___SH () C:\Users\Devil\Thumbs.db
2014-05-27 23:24 - 2012-08-26 20:07 - 00000000 ___RD () C:\Users\Devil\Desktop\Programme
2014-05-27 23:20 - 2014-05-27 23:20 - 00000000 ____D () C:\ProgramData\ATI
2014-05-27 23:20 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-27 23:17 - 2014-05-27 23:17 - 00061432 _____ () C:\Windows\SysWOW64\CCCInstall_201405272317260220.log
2014-05-27 23:17 - 2014-05-27 23:17 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-05-27 23:17 - 2012-08-26 17:19 - 00000000 ____D () C:\ProgramData\AMD
2014-05-27 23:16 - 2012-08-26 17:17 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-05-27 23:14 - 2014-05-27 23:14 - 00000000 ____D () C:\Program Files\AMD
2014-05-27 23:08 - 2014-04-29 20:00 - 00000000 ____D () C:\Users\Devil\GLUCOFACTS Deluxe
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sapphire TRIXX
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Program Files (x86)\Sapphire TRIXX
2014-05-27 22:48 - 2012-09-07 18:45 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-05-27 22:46 - 2014-05-27 22:45 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2014-05-27 22:45 - 2014-05-27 22:45 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2014-05-27 21:20 - 2014-05-27 21:20 - 00000007 _____ () C:\Users\Devil\SeatPW.txt
2014-05-27 17:52 - 2012-08-26 22:39 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-05-27 17:34 - 2012-08-30 23:10 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\vlc
2014-05-27 13:31 - 2013-07-31 19:06 - 00000000 ___RD () C:\Users\Devil\Desktop\Software
2014-05-27 01:29 - 2014-02-15 21:37 - 00000000 ____D () C:\Program Files (x86)\Bridge Building Game
2014-05-26 20:07 - 2009-08-25 20:32 - 00666448 _____ () C:\Windows\system32\perfh01D.dat
2014-05-26 20:07 - 2009-08-25 20:32 - 00147772 _____ () C:\Windows\system32\perfc01D.dat
2014-05-26 20:07 - 2009-08-25 19:41 - 00728092 _____ () C:\Windows\system32\perfh019.dat
2014-05-26 20:07 - 2009-08-25 19:41 - 00156268 _____ () C:\Windows\system32\perfc019.dat
2014-05-26 20:07 - 2009-08-25 19:33 - 00747838 _____ () C:\Windows\system32\perfh013.dat
2014-05-26 20:07 - 2009-08-25 19:33 - 00158702 _____ () C:\Windows\system32\perfc013.dat
2014-05-26 20:07 - 2009-08-25 19:25 - 00497186 _____ () C:\Windows\system32\perfh014.dat
2014-05-26 20:07 - 2009-08-25 19:25 - 00100410 _____ () C:\Windows\system32\perfc014.dat
2014-05-26 20:07 - 2009-08-25 19:18 - 00744652 _____ () C:\Windows\system32\perfh010.dat
2014-05-26 20:07 - 2009-08-25 19:18 - 00152658 _____ () C:\Windows\system32\perfc010.dat
2014-05-26 20:07 - 2009-08-25 19:09 - 00749858 _____ () C:\Windows\system32\perfh00C.dat
2014-05-26 20:07 - 2009-08-25 19:09 - 00155216 _____ () C:\Windows\system32\perfc00C.dat
2014-05-26 20:07 - 2009-08-25 19:01 - 00484696 _____ () C:\Windows\system32\perfh00B.dat
2014-05-26 20:07 - 2009-08-25 19:01 - 00107284 _____ () C:\Windows\system32\perfc00B.dat
2014-05-26 20:07 - 2009-08-25 18:54 - 00749602 _____ () C:\Windows\system32\perfh00A.dat
2014-05-26 20:07 - 2009-08-25 18:54 - 00164930 _____ () C:\Windows\system32\perfc00A.dat
2014-05-26 20:07 - 2009-08-25 18:46 - 00712886 _____ () C:\Windows\system32\perfh007.dat
2014-05-26 20:07 - 2009-08-25 18:46 - 00155216 _____ () C:\Windows\system32\perfc007.dat
2014-05-26 20:07 - 2009-08-25 18:38 - 00512432 _____ () C:\Windows\system32\perfh006.dat
2014-05-26 20:07 - 2009-08-25 18:38 - 00104394 _____ () C:\Windows\system32\perfc006.dat
2014-05-26 20:07 - 2009-07-14 07:13 - 08781340 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-25 19:38 - 2012-08-26 20:07 - 00000000 ___RD () C:\Users\Devil\Desktop\Games
2014-05-25 11:09 - 2014-05-25 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL8FB2.tmp
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL7FE8.tmp
2014-05-24 23:24 - 2014-03-29 19:59 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-24 23:24 - 2013-11-14 20:34 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-05-24 23:24 - 2013-04-23 18:54 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-05-23 22:16 - 2012-11-07 20:16 - 05581312 ___SH () C:\Users\Devil\Desktop\Thumbs.db
2014-05-23 17:13 - 2013-07-15 19:39 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-23 17:13 - 2012-08-30 22:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-23 17:12 - 2012-08-30 22:06 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\DVDVideoSoft
2014-05-17 17:32 - 2013-04-25 15:17 - 00000056 _____ () C:\Windows\Acroread.ini
2014-05-16 23:35 - 2014-05-16 23:35 - 00000130 _____ () C:\Users\Devil\Documents\Jochen TT.txt
2014-05-16 19:57 - 2014-05-04 00:21 - 00000603 _____ () C:\Users\Devil\Documents\SeatTeile.txt
2014-05-12 21:43 - 2014-05-12 21:43 - 00030208 _____ () C:\devdll.dll
2014-05-10 11:13 - 2014-05-10 11:13 - 00007595 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.cl
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.log
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75AC.tmp
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL756D.tmp
2014-05-08 19:36 - 2012-09-27 15:39 - 00004094 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA
2014-05-08 19:36 - 2012-09-27 15:39 - 00003698 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core
2014-05-06 18:41 - 2014-05-05 22:25 - 00000000 ____D () C:\Users\Devil\AppData\Local\Akamai
2014-05-06 18:34 - 2014-04-28 22:16 - 00000000 ____D () C:\Keule306
2014-05-06 17:31 - 2014-04-25 22:24 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 17:31 - 2014-04-25 22:24 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-05 22:46 - 2013-01-21 18:32 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\Program Files (x86)\Aeria Games
2014-05-05 22:43 - 2013-04-24 14:51 - 00000000 __SHD () C:\AI_RecycleBin
2014-05-05 22:43 - 2013-01-21 18:29 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-05-05 22:25 - 2014-05-05 22:25 - 00000000 ____D () C:\AeriaGames
2014-05-02 19:58 - 2014-05-02 19:58 - 00000044 _____ () C:\Users\Devil\Documents\RalfKonto1.txt
2014-05-01 22:32 - 2014-05-01 22:32 - 00000000 ____D () C:\Users\Devil\Documents\Alcohol 120%
2014-04-30 00:03 - 2013-11-16 00:05 - 00000000 ____D () C:\Users\Devil\bitches
2014-04-29 20:04 - 2014-04-29 20:01 - 00003608 _____ () C:\Users\Devil\logSequencer.log

Files to move or delete:
====================
C:\Users\Devil\AppData\Roaming\CamLayout.ini
C:\Users\Devil\AppData\Roaming\CamShapes.ini
C:\Users\Devil\Monopoly3Setup.exe
C:\Users\Devil\scroll_app_smart_4.00.33.exe
C:\Users\Devil\setpoint6.61.15_64.exe
C:\Users\Devil\WhiteCap_505_Platinum.exe
C:\Users\Devil\AppData\Roaming\Origin\update.vbe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-24 22:22

==================== End Of Log ============================
         
--- --- ---

--- --- ---


3. Addition

[War leider zu lang für diesen Beitrag]

4. GMER (ging leider nur im abgesicherten Modus)

GMER Logfile:
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-28 20:28:20
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk2\DR2 -> \Device\0000007b WDC_WD50 rev.01.0 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\Devil\AppData\Local\Temp\pxldqpow.sys


---- Registry - GMER 2.1 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\000d18013bbb                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\000d18013bbb@0c715d6b4242         0xD9 0x3F 0x38 0x73 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\000d18013bbb@0024836c6ea7         0x75 0x40 0x56 0x1C ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\000d18013bbb (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\000d18013bbb@0c715d6b4242             0xD9 0x3F 0x38 0x73 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\000d18013bbb@0024836c6ea7             0x75 0x40 0x56 0x1C ...

---- EOF - GMER 2.1 ----
         
--- --- ---


5. HijackThis

HiJackthis Logfile:
Code:
ATTFilter
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:51:49, on 28.05.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbar.exe
C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Devil\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\7b4e384f5b096b9656fee276ba88bb81\HiJackThis204.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Drop Pad Web Backup - {25DA541F-6ACF-4052-A8AA-1D58284729C7} - mscoree.dll (file missing)
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\Microsoft Office\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\Microsoft Office\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O2 - BHO: (no name) - {F1AF26F8-1828-4279-ABCE-074EF3235BD7} - (no file)
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [BCU] "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - Global Startup: UltraMon.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\Program Files (x86)\ElsaWin\bin\wiprot.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ELSA Administration Service (LcSvrAdm) - Volkswagen AG - D:\ElsaWin\bin\LcSvrAdm.exe
O23 - Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) - Volkswagen AG - D:\ElsaWin\bin\LcSvrAuf.exe
O23 - Service: ELSA DBA Server (LcSvrDba) - Volkswagen AG - D:\ElsaWin\bin\LcSvrDba.exe
O23 - Service: ELSA Historie Server (LcSvrHis) - Volkswagen AG - D:\ElsaWin\bin\LcSvrHis.exe
O23 - Service: ELSA PASS Server (LcSvrPAS) - Volkswagen AG - D:\ElsaWin\bin\LcSvrPas.exe
O23 - Service: ELSA APOSpro Server (LcSvrSaz) - Volkswagen AG - D:\ElsaWin\bin\LcSvrSaz.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12410 bytes
         
--- --- ---


6. Norton (Windows-Ordner-Scan) [leider ohne Ergebnis]

Zitat:
Scanstatistiken:
Scanstart:
Lokal: 28.05.2014 20:43
UTC: 28.05.2014 18:43
Scanzeit: 2.350 Sekunden
Scanziele: C:\Windows
Zähler:
Gescannte Elemente insgesamt: 320.037
– Dateien und Laufwerke: 320.037
– Registrierungseinträge: 0
– Prozesse und Elemente beim Start: 0
– Netzwerk- und Browser-Elemente: 0
– Sonstiges: 0
– Vertrauenswürdige Dateien: 9.023
– Übersprungene Dateien: 57.368

Erkannte Sicherheitsrisiken insgesamt: 0
Behobene Elemente insgesamt: 0
Elemente insgesamt, die Aufmerksamkeit erfordern: 0

Behobene Bedrohungen:
Es wurden keine Risiken behoben.

Nicht behobene Bedrohungen:
Keine nicht behobenen Risiken
Vielen dank an jeden, der sich die Mühe macht mir zu helfen.

Kleine Ergänzung:

Grafikkarten-Temperatur bei GPU-Auslastung 98% = ca 80°C
Grafikkarten-Temperatur bei GPU-Auslastung 0-3% = ca 55°C

Alt 29.05.2014, 06:36   #2
schrauber
/// the machine
/// TB-Ausbilder
 

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



hi,

poste jetzt bitte die Addition.txt.



Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 29.05.2014, 14:03   #3
SilentDeath
 
GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Hallo,
ich wusste nicht genau ob ich die Datei packen und anhängen soll.
Außerdem dachte ich gelesen zu haben das ich den Addition.txt nur auf Anweisung anhängen soll.

Zitat:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Devil at 2014-05-29 13:56:41
Running from D:\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

1400 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
1400_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
1400Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
Activision(R) (x32 Version: 1.00.0000 - Activision) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2540 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.4.0.2540 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Bridge CS4 (x32 Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Recommended Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color Video Profiles CS CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Device Central CS4 (x32 Version: 2 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Fonts All (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (x32 Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Output Module (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (HKLM-x32\...\Adobe_faf656ef605427ee2f42989c3ad31b8) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Photoshop CS4 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 Support (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Search for Help (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Setup (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.)
Adobe Type Support CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (x32 Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (x32 Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetRGB (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Advanced Archive Password Recovery (HKLM-x32\...\{01011662-76A8-41E8-B1A8-4F8821570AC5}) (Version: 4.54.48.1338 - Elcomsoft Co. Ltd.)
Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
AMD Fuel (Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80830.1925 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Anti-Twin (Installation 22.04.2013) (HKLM-x32\...\Anti-Twin 2013-04-22 21.47.42) (Version: - Joerg Rosenthal, Germany)
AquaSoft "DiaShow 7 für YouTube" (HKLM-x32\...\{9DFDD0C5-5AC1-484B-ACF8-0F3E1041750B}_is1) (Version: 7.7.11.35343 - AquaSoft GmbH)
Ares 2.1.8 (HKLM-x32\...\Ares) (Version: 2.1.8-Build#3042 - Ares Development Group)
Assassin's Creed ® III (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.00 - Ubisoft)
Assassins Creed III version 5.1 (HKLM-x32\...\{B810D852-DFD6-ACIII-89A5-CC4D47756DAF}_is1) (Version: 5.1 - Black_Box)
Astroburn Lite (HKLM-x32\...\Astroburn Lite) (Version: 1.8.0.0182 - Disc Soft Ltd)
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 7.18.03 - ASUSTeK Computer Inc.)
ATI AVIVO64 Codecs (Version: 11.6.0.10308 - ATI Technologies Inc.) Hidden
Audio Pitch And Shift version 5.1.0.4 (HKLM\...\{07EBC512-2289-44B6-BBA2-4A84FCA15E29}_is1) (Version: 5.1.0.4 - Fabrizio Stellato)
Aufstieg des Hexenkönigs™ (HKLM-x32\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version: - )
Avidemux 2.5 (32-bit) (HKLM-x32\...\Avidemux 2.5) (Version: 2.5.6.7716 - )
Batman Arkham Origins (HKLM-x32\...\Batman Arkham Origins_is1) (Version: - )
Black Ops 2 Deutsch Patch-TokZic 1.0 (HKLM-x32\...\Black Ops 2 Deutsch Patch-TokZic 1.0) (Version: 1.0 - TokZic)
Blur(TM) (HKLM-x32\...\InstallShield_{589A63D3-89E1-4D9B-8DBC-6039BB27289E}) (Version: 1.00.0000 - Activision)
BoneTown (HKLM-x32\...\{5E7C721D-B008-4269-A1C4-2CE7E9757983}) (Version: 1.1.1 - DWC Software)
Borderlands (HKLM-x32\...\{52B65911-1559-4ED5-9461-46957FDD48CD}) (Version: 1.0.295 - 2K Games)
Bridge Building Game (HKLM-x32\...\Bridge Building Game) (Version: - )
Browser Configuration Utility (HKLM-x32\...\{BA88EE67-8974-459D-A1DB-C8281D9AC6F6}) (Version: 1.0.12.1 - DeviceVM, Inc.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Bulletstorm (HKLM-x32\...\GFWL_{45410935-3E72-472B-8C35-AB1000008200}) (Version: 1.0.0000.130 - EA)
Bulletstorm (x32 Version: 1.0.0000.130 - EA) Hidden
ButtonBeats Virtual Piano Black (HKLM-x32\...\00B92958-647E-405C-887D-265A9123F9FB) (Version: 1.0 - ButtonBeats)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
Cheat Engine 6.2 (HKLM-x32\...\Cheat Engine 6.2_is1) (Version: - Dark Byte)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
Colin McRae Rally 2 (HKLM-x32\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version: - )
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
Cool & Quiet (HKLM-x32\...\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version: - )
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
CrystalDiskInfo 6.0.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.0.4 - Crystal Dew World)
CyberGhost VPN (HKLM\...\CyberGhost VPN_is1) (Version: - CyberGhost S.R.L.)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
DarksidersInstaller (HKLM-x32\...\{B93EEE50-9C8F-45DF-95E4-3D85A6E242F3}) (Version: 1.00.1000 - Ihr Firmenname)
Data Lifeguard Diagnostic for Windows 1.24 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DC Universe Online Live (HKCU\...\SOE-DC Universe Online Live PSG) (Version: - Sony Online Entertainment)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9F82B2FB-F969-41A0-B7D6-E54F4BAF8572}) (Version: - Microsoft)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
Deutschlands Kartenspiele Deluxe (HKLM-x32\...\{BD8C5D59-B689-4245-8BCF-89378CA909B0}_is1) (Version: 1.0 - rondomedia)
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
Diablo.III.Client.Server.Emulator (HKLM-x32\...\Diablo.III.Client.Server.Emulator_is1) (Version: - )
Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - )
Die Sims (HKLM-x32\...\Die Sims) (Version: - )
Dishonored (HKLM-x32\...\Dishonored_is1) (Version: - )
DocBackupAP (HKLM-x32\...\DocBackupAP) (Version: - )
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
DVD Flick 1.3.0.7 (HKLM-x32\...\DVD Flick_is1) (Version: 1.3.0.7 - Dennis Meuwissen)
EFA3 - Bilder Kraftfahrzeugtechnik (HKLM-x32\...\{F443C200-5A4B-4773-83F3-069867AE07BA}) (Version: 1.0.0 - Europa)
EliSims 2.20 (HKLM-x32\...\EliSims 2.20_is1) (Version: - )
ElsaWin (HKLM-x32\...\ElsaWin) (Version: 4.00 - )
ENSLAVED™ Odyssey to the West™ Premium Edition, версия 1.0 (HKLM-x32\...\{78114956-514E-4CFE-BFBA-D39B53EE1B9F}_is1) (Version: 1.0 - Namco Bandai Games, Steam)
ENSLAVED™: Odyssey to the West™ Premium Edition (HKLM-x32\...\Steam App 245280) (Version: - Ninja Theory)
EPU-4 Engine (HKLM-x32\...\{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}) (Version: 1.02.01 - )
ESI Prüfwerte (HKLM-x32\...\ESI Prüfwerte) (Version: - )
ESI[tronic] DEMO_3 (HKLM-x32\...\ESI[tronic] DEMO_3) (Version: - )
EVEREST Ultimate Edition v5.50 (HKLM-x32\...\EVEREST Ultimate Edition_is1) (Version: 5.50 - Lavalys, Inc.)
Fable - The Lost Chapters (HKLM-x32\...\InstallShield_{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}) (Version: 1.00.0000 - Microsoft Game Studios)
Fable - The Lost Chapters (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.01 - Ubisoft)
Far Cry 3 Deutsch Patch-TokZic 1.00 (HKLM-x32\...\Far Cry 3 Deutsch Patch-TokZic 1.00) (Version: 1.00 - TokZic)
FarCry 3 version 5.1 (HKLM-x32\...\{B810D852-DFD6-FC3-89A5-CC4D47756DAF}_is1) (Version: 5.1 - Black_Box)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Free AVI Video Converter version 5.0.32.1230 (HKLM-x32\...\Free AVI Video Converter_is1) (Version: 5.0.32.1230 - DVDVideoSoft Ltd.)
Free FLV Converter V 7.5.0 (HKLM-x32\...\Free FLV Converter_is1) (Version: 7.5.0.0 - Koyote Soft)
Free Studio version 2013 (HKLM-x32\...\Free Studio_is1) (Version: 6.1.6.711 - DVDVideoSoft Ltd.)
Free Video Dub version 2.0.22.925 (HKLM-x32\...\Free Video Dub_is1) (Version: 2.0.22.925 - DVDVideoSoft Ltd.)
Free Video to Flash Converter version 5.0.32.1230 (HKLM-x32\...\Free Video to Flash Converter_is1) (Version: 5.0.32.1230 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.2.32.327 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.32.327 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.35.514 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.35.514 - DVDVideoSoft Ltd.)
GIMP 2.8.2 (HKLM\...\GIMP-2_is1) (Version: 2.8.2 - The GIMP Team)
Gmail Backup (HKLM-x32\...\gmailbackup) (Version: - )
Google Chrome (HKCU\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
GRID 2 (c) Codemasters version 1 (HKLM-x32\...\R1JJRDI=_is1) (Version: 1 - )
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Hard Disk Sentinel PRO (HKLM-x32\...\Hard Disk Sentinel_is1) (Version: - HDS)
Hitman Absolution (HKLM-x32\...\{95030349-3623-4920-89BF-8BEC5EF311C5}_is1) (Version: 1.0433.1 - Square Enix)
Hitman Absolution Deutsch Patch-TokZic 1.00 (HKLM-x32\...\Hitman Absolution Deutsch Patch-TokZic 1.00) (Version: 1.00 - TokZic)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
IcoFX 1.6.4 (HKLM-x32\...\IcoFX_is1) (Version: - )
IcoFX 2.3.1 (HKLM-x32\...\IcoFX 2_is1) (Version: - )
InFlux (HKLM-x32\...\GOGPACKINFLUX_is1) (Version: 2.0.0.5 - GOG.com)
iZ3D Driver Remove (HKLM-x32\...\{30BEF9F2-CD3F-4B13-9E5C-BFE2F9544572}_is1) (Version: 1.12(4016) - iZ3D Inc.)
Java 7 Update 11 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217007FF}) (Version: 7.0.110 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 18 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216018FF}) (Version: 6.0.180 - Sun Microsystems, Inc.)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Kingdoms of Amalur™ Reckoning DELUXE EDITION (HKLM-x32\...\Kingdoms of Amalur™ Reckoning DELUXE EDITION_is1) (Version: 1.0.0.2 - QfG)
K-Lite Codec Pack 9.2.0 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 9.2.0 - )
K-Lite Codec Pack 9.8.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.8.0 - )
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Kung Fu Panda(TM) (x32 Version: 1.00.0000 - Activision) Hidden
Kung Fu Panda(TM)-Spiel (HKLM-x32\...\InstallShield_{48ADB3C0-18FB-4922-B172-7C8C4B99409C}) (Version: 1.00.0000 - Activision)
LG Bluetooth Drivers (HKLM-x32\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG PC Suite III deinstallieren (HKLM-x32\...\{D94BA408-F110-488B-A65E-3AE7945F79E6}_is1) (Version: - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{461B11E8-BF34-4ACB-962A-1CBE905BD9EB}) (Version: 2.2 - LG Electronics)
LG USB Modem Drivers (HKLM-x32\...\{E1640DA5-89B4-4F52-B15D-5DA3D14F29D4}) (Version: - )
Linguatec Voice Reader Studio (HKLM-x32\...\{D961CF08-AB06-4AC5-BCBA-76D12C4DB5EC}) (Version: 1.00.0000 - Linguatec GmbH)
Linguatec Voice Reader Studio (x32 Version: 1.00.0000 - Linguatec GmbH) Hidden
Lula 3D (HKLM-x32\...\Lula 3D) (Version: - )
METAL GEAR RISING: REVENGEANCE (HKLM-x32\...\TUVUQUxHRUFSUklTSU5HUkVWRU5HRUFOQ0U=_is1) (Version: 1 - )
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Access MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft DCF MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Groove MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{86CE1746-9EFF-3C9C-8755-81EA8903AC34}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Word MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Monopoly (HKLM-x32\...\{D7E7EC5E-4349-4E40-B37C-4342188B86EC}) (Version: - )
MotoGP(TM)13 (HKLM-x32\...\{4B784CE7-7CDB-4AF1-B636-2DC3EA51EA87}) (Version: 1.00.0000 - Milestone)
MotoGP(TM)13 (x32 Version: 1.00.0000 - Milestone) Hidden
Mozilla Firefox 21.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 21.0 (x86 de)) (Version: 21.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 21.0 - Mozilla)
MSI Afterburner 3.0.0 (HKLM-x32\...\Afterburner) (Version: 3.0.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB927978) (HKLM-x32\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
Need for Speed Most Wanted (HKLM-x32\...\Need for Speed Most Wanted_is1) (Version: - )
Need For Speed Rivals (HKLM-x32\...\{0657F865-25B6-4391-A3B5-9917CF291AB3}) (Version: 6.0 - Black Box)
Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts)
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1398 - Electronic Arts)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
NFS Underground (HKLM-x32\...\{A99968BE-C155-474C-0089-33239DEE1CE2}) (Version: - )
Nightly 18.0a1 (x64 en-US) (HKLM\...\Nightly 18.0a1 (x64 en-US)) (Version: 18.0a1 - Mozilla)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.3.0.12 - Symantec Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM-x32\...\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7325.0 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{8A809006-C25A-4A3A-9DAB-94659BCDB107}) (Version: 9.10.0224 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Paragon Partition Manager™ 12 Professional Demo (HKLM-x32\...\{A35001F0-F1E4-11DD-A38B-005056C00008}) (Version: 90.00.0003 - Paragon Software)
PC-Trainer Kfz-Technik Demoversion (HKLM-x32\...\{25A9F665-E886-459F-A7C6-FDA50A7A1100}) (Version: - )
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.211.0 - Tracker Software Products Ltd)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
phonostar-Player Version 3.02.6 (HKLM-x32\...\phonostar3RadioPlayer_is1) (Version: - )
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
ProPlay Advance FFB Wheel (HKLM-x32\...\{6B36822A-5638-11D6-8A78-00E04C423A21}) (Version: - )
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
Railroad & Co. Version 7.0 (HKLM-x32\...\Railroad & Co. Version 7.0) (Version: - )
Rayman Legends (HKLM-x32\...\UmF5bWFuTGVnZW5kcw==_is1) (Version: 1 - )
Republic Heroes (HKLM-x32\...\{5612C844-55BC-4B77-82C2-A2E28962418E}) (Version: 1.00.0000 - LucasArts)
Ridge Racer Unbounded Bundle (HKLM-x32\...\Ridge Racer Unbounded Bundle_is1) (Version: - )
Saints Row IV — Repacked by R.G. Revenants (HKLM-x32\...\Saints Row IV_R.G. Revenants) (Version: 1.0.0.1 - Deep Silver)
San Andreas Mod Installer (HKLM-x32\...\San Andreas Mod Installer1.1) (Version: 1.1 - cpmusick)
Sapphire TRIXX (HKLM-x32\...\Sapphire TRIXX) (Version: - )
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
ScarletBlade-DE (HKLM-x32\...\ScarletBlade-DE) (Version: - )
Scribus 1.4.2 (HKLM-x32\...\Scribus 1.4.2) (Version: 1.4.2 - The Scribus Team)
SEDREAP (HKLM-x32\...\SEDREAP) (Version: - )
Setup - Call of Duty Ghosts (c) Activision ... (HKLM-x32\...\Setup - Call of Duty Ghosts (c) Activision ...) (Version: ... - Activision Publishing)
ShaunWhiteSnowboarding (HKLM-x32\...\{2E52FB79-7F60-4AD7-B946-5ED18B4F274E}) (Version: 1.00 - Ubisoft)
Skat (HKLM-x32\...\Skat_is1) (Version: - madcat Software GmbH)
Skullgirls (HKLM-x32\...\Skullgirls_is1) (Version: - )
Skype™ 6.6 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.6.106 - Skype Technologies S.A.)
Sniper Ghost Warrior 2 (HKLM-x32\...\Sniper Ghost Warrior 2_is1) (Version: - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
South Park - The Stick of Truth Version 1.0.1353 (HKLM-x32\...\{83736891-79AE-49BA-96F5-55DD6F2186AC}_is1) (Version: 1.0.1353 - Ubisoft)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Split/Second (HKLM-x32\...\{28526951-55EF-4901-A0CA-B9AC966D1DD1}) (Version: 1.00.0000 - Disney Interactive Studios)
Star Wars: The Force Unleashed (HKLM-x32\...\Star Wars: The Force Unleashed_is1) (Version: 1.0 - Aspyr)
StarCraft II Heart of the Swarm (c) Blizzard version 1 (HKLM-x32\...\U3RhckNyYWZ0IElJ_is1) (Version: 1 - )
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Steamless Counter Strike Source Pack (HKLM-x32\...\Steamless Counter Strike Source Pack) (Version: 1.0 - Steamless)
Strongvault Online Backup (HKLM-x32\...\{C8A17402-051A-471B-BA64-9147A7467005}) (Version: 2.1.1.0 - Strongvault)
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
SUPER © v2012.build.54 (Nov 18, 2012) Version v2012.build.54 (HKLM-x32\...\{8F311E92-C29F-4DF9-8259-B739A1831669}_is1) (Version: v2012.build.54 - eRightSoft)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.22298 - TeamViewer)
The Klub 17 (HKCU\...\The Klub 17) (Version: 6.3.0 - Team K17)
Tom Clancy's Ghost Recon Future Soldier (HKLM-x32\...\{6D87CAD9-9B94-4421-A439-B25F8DE14575}) (Version: 1.00 - Ubisoft)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
Torch (HKCU\...\Torch) (Version: 29.0.0.4888 - Torch Media, Inc) <==== ATTENTION
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version: - )
UltraMon (HKLM\...\{ED7FE81C-378C-411D-B5B4-509B978BA204}) (Version: 3.2.1 - Realtime Soft Ltd)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Update for Microsoft Access 2013 (KB2760350) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{A784BEFA-1BAB-4285-9F90-7D1A40A72DF8}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2760339) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C5241E8F-37A5-40EC-90DD-FF1400818C4B}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2760339) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{388C807E-766E-47FB-A671-53B8387FCA78}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2817621) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2F2717FB-5567-491F-B493-B6556DB4FFCB}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2817621) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2F2717FB-5567-491F-B493-B6556DB4FFCB}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2817621) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{CA571833-CF9C-4B1E-B6E2-07211664180E}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2727096) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{34F41F42-15EC-4FB5-A6C7-464F4BB5D798}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2727096) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{34F41F42-15EC-4FB5-A6C7-464F4BB5D798}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2737954) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{C74BC9C1-46D0-4406-A003-119C5F2BC240}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2752025) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{068372FB-7EAF-463F-8074-77AB35BB13E6}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2752094) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E911A320-7B4A-4383-82D2-007375B27EC2}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2752101) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8449754F-577E-4EC3-B9D4-108395B1680E}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D8B3D175-48B8-413F-8484-4D81E744B51C}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8587E5B1-6279-4396-B9AC-20B334F4FF88}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2767851) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{A98FE317-A670-47B8-9510-C115D933282A}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2767860) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0C0A2F4A-757C-4F10-935F-508E1A2D4719}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUS_{377DC0D5-A062-496A-ADE2-6D204B498DD8}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUS_{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{CC676278-5E9E-432E-9BB5-DDF0FFE04549}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817320) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4389523F-DE1F-474A-995D-480F66809567}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817320) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4389523F-DE1F-474A-995D-480F66809567}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817482) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3856855C-A9CE-433A-BBA8-62D3290B063F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817489) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7E0144AD-1CF3-41B9-A6E5-98FF7EA97F2F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817489) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7E0144AD-1CF3-41B9-A6E5-98FF7EA97F2F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817491) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{C74677D5-FA4D-47D5-B769-1866C6D81214}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817492) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0A30942E-AFEC-4DC5-8A23-AD50E971CC37}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817492) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0A30942E-AFEC-4DC5-8A23-AD50E971CC37}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2817467) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{ED00DC05-D24B-4847-B49B-7EF42A01D4D5}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2817467) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{ED00DC05-D24B-4847-B49B-7EF42A01D4D5}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2817629) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8557CF2E-CD50-418A-A533-751E6C8B8C28}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2817629) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6562E5D7-895A-4FC0-B907-72E42D79703A}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E158EB9F-E6CC-49E2-A098-2C6DF0D6B42B}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2810006) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CFC7B54A-AB18-487B-A035-7094E2F24AF1}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817622) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D4E8E649-C12B-4170-8A32-2D387CD5CED1}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817622) 64-Bit Edition (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}_Office15.PROPLUS_{5A59CF80-AA55-492B-900E-86793BCF013A}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817622) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D4E8E649-C12B-4170-8A32-2D387CD5CED1}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817622) 64-Bit Edition (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{5A59CF80-AA55-492B-900E-86793BCF013A}) (Version: - Microsoft)
Update for Microsoft Visio 2013 (KB2810008) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{54960E56-266C-417A-85F5-4769614C2694}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D1F1940B-94DF-4DCB-BF82-9530D7FBB1BF}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2767863) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7850D7D4-FC6A-4847-A646-9A64CCF713EA}) (Version: - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 3.0 - Ubisoft)
Urban Trial Freestyle (HKLM-x32\...\Urban Trial Freestyle_is1) (Version: - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
Virtual Hottie 2 (HKLM-x32\...\Quest3DVirtual Hottie 2) (Version: - )
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
WhiteCap (HKLM-x32\...\WhiteCap) (Version: 5.0.5 - SoundSpectrum)
WinAce Archiver (HKLM-x32\...\WinAce Archiver) (Version: 2.69 - e-merge GmbH)
Win-Digipet 2012 Premium Edition (HKLM-x32\...\{00EBC928-ADAD-4392-AA6F-F964BE54DBF2}) (Version: 12.0.00 - Fa. Digipet)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
World's Best Board Games 2 (HKLM-x32\...\{4298DE6A-B53D-4CAF-B3C8-BAB6EC085AC7}_is1) (Version: - cerasus.media GmbH)
X Rebirth GERMAN (HKLM-x32\...\WFJlYmlydGg=_is1) (Version: 1 - )
Xilisoft DVD Ripper Ultimate (HKLM-x32\...\Xilisoft DVD Ripper Ultimate) (Version: 7.0.0.1121 - Xilisoft)
XMedia Recode Version 3.1.7.6 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.7.6 - XMedia Recode)

==================== Restore Points =========================


==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-12-31 20:21 - 00000856 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 eu.actual.battle.net

==================== Scheduled Tasks (whitelisted) =============

Task: {10E37B6A-4275-4485-905C-97E11C199ABF} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1033395003-4163772576-2144622384-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {1993C1EF-3182-485D-B2ED-44B19C88DB93} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-29] (Adobe Systems Incorporated)
Task: {200A353A-DE7E-435A-8CE8-7368899103D4} - System32\Tasks\{D96675D6-96AE-497E-BBAE-85681F2CDF80} => G:\Setup.exe
Task: {21DCACC4-B31A-445F-8D23-990591BCAFBB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-25] (Google Inc.)
Task: {22BBB474-C481-41D9-BC77-40FBCB285E66} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-25] (Google Inc.)
Task: {2D0B1D23-370F-4B4B-BF6F-17AF227D250B} - System32\Tasks\EPUpdater => C:\Users\Devil\AppData\Roaming\BabSolution\Shared\BabMaint.exe <==== ATTENTION
Task: {2EF2E918-6BDB-42E3-8CC1-B0B79098DEBF} - System32\Tasks\Origin => C:\Users\Devil\AppData\Roaming\Origin\update.vbe [2013-11-23] () <==== ATTENTION
Task: {33974269-140D-4260-AA63-79EC31FB4B67} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {387D4B14-720B-47A0-82F8-7C3B7751435C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {4297F142-DA7D-49C3-AC3E-F43CAC1FDED5} - System32\Tasks\DealPlyUpdate => C:\Program <==== ATTENTION
Task: {50870D37-F1F1-4C5D-ADE8-B02ED9B45717} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader Updater\YourFileUpdater.exe <==== ATTENTION
Task: {5AED4E01-31D5-45FB-8623-EDE4CE88DE7F} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {62DF44AA-CA8B-4B03-9E72-73D91CECD2C6} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {6C558EC9-3F13-4BF6-84E4-447A21F984B0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {6F74DDAC-051A-4FA1-A0DB-9FA4AB238625} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {79DEE084-FC15-4CF9-8E69-046F493A20E0} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION
Task: {81BCC89B-AEEA-44C3-898F-7B9848C01975} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe <==== ATTENTION
Task: {8BB7B08C-8528-4A0C-9276-551AADCB6243} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {9060ECB5-9F4E-4D11-898F-09D649D17CFD} - System32\Tasks\{239E5CA3-DF12-4B20-B375-8ED226A927A0} => G:\Setup.exe
Task: {9D1CB78B-8285-4009-BCBD-C08A44AAF370} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core => C:\Users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-27] (Google Inc.)
Task: {9EB0C89A-C4CF-407D-973D-666FCE20560F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA => C:\Users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-27] (Google Inc.)
Task: {A4865F12-5E7A-4445-A2CA-06A47416BE05} - System32\Tasks\DealPly => C:\Users\Devil\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe <==== ATTENTION
Task: {A761E2C1-3F54-4CBC-BADD-E94E2D4A92A2} - System32\Tasks\{F983B895-1AED-4E8D-99D6-795DDD988D4D} => E:\PROTOTYPE 2\prototype2.exe [2012-07-27] ()
Task: {A9D457E6-20A2-4BE1-B7D6-DB5C18143C93} - System32\Tasks\{5E19E60A-7583-4069-AC57-9B1A33FF10A8} => E:\PROTOTYPE 2\prototype2.exe [2012-07-27] ()
Task: {B9767893-A002-4E25-9EFB-D103704D4F21} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1033395003-4163772576-2144622384-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {BAC6B79A-F11D-41CA-9C8B-C51E5C82D53C} - System32\Tasks\PC Optimizer Pro64 startups => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION
Task: {BD498A25-ADA0-4F11-9C8A-8063766FC239} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe
Task: {BD53EF1B-A6C6-4193-9167-42D201E8AD80} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2009-12-28] (ASUSTeK Computer Inc.)
Task: {BED5D16A-228F-4361-8BD2-57E8D8354817} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {CDF39D0F-D2D1-4B90-9E2B-936FE3E36E8C} - System32\Tasks\{9FC4DDFD-7FAF-4BD2-B008-ED859DD5793F} => G:\Setup.exe
Task: {D9867F9A-E9AC-487A-8581-CC6B045FDB64} - System32\Tasks\{E2752E67-FB96-4FDC-BAFE-3A64FFF7EF52} => E:\PROTOTYPE 2\prototype2.exe [2012-07-27] ()
Task: {DC134C79-47AF-4245-AD8B-C79806CDEC68} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03] (ASUSTeK Computer Inc.)
Task: {F93616FD-3057-42F5-B4E7-516D7E48D149} - System32\Tasks\VisualBeeRecovery => C:\Users\Devil\AppData\Local\VisualBeeExe\VisualBeeRecovery.exe
Task: {FC931C3B-1479-4C47-8FE8-0E0FA7197142} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe
Task: {FCCA130C-4B62-4D22-A573-DA220CC843B4} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe [2014-03-23] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core.job => C:\Users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA.job => C:\Users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PC Optimizer Pro64 startups.job => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-04-17 22:29 - 2014-04-17 22:29 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2012-08-28 20:56 - 2012-10-29 23:16 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2012-08-26 16:50 - 2009-05-07 16:51 - 00071680 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2012-08-26 16:50 - 2009-05-07 16:53 - 00379392 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2012-08-26 16:50 - 2008-01-18 14:50 - 00098816 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\VMicApi.dll
2012-08-26 16:50 - 2009-11-03 11:12 - 47601664 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll
2014-04-17 22:29 - 2014-04-17 22:29 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-01-16 00:11 - 2014-05-29 13:26 - 00645646 _____ () C:\Windows\Temp\svchost.exe
2011-12-06 17:07 - 2011-12-06 17:07 - 00025088 _____ () C:\Program Files (x86)\ElsaWin\bin\SvrAufPS.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2012-08-26 17:04 - 2009-03-19 22:35 - 00208896 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AiNap.dll
2012-08-26 17:04 - 2009-03-19 22:35 - 00008704 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\vvc.dll
2012-08-26 17:04 - 2009-01-15 14:55 - 00565248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll
2012-08-26 17:04 - 2009-03-25 16:53 - 00053248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
2009-07-31 21:39 - 2009-07-31 21:39 - 00503202 _____ () C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\sqlite3.dll
2013-12-17 20:59 - 2014-05-29 13:26 - 00279955 _____ () C:\Windows\Temp\libidn-11.dll
2013-12-17 20:59 - 2014-05-29 13:26 - 00084992 _____ () C:\Windows\Temp\zlib1.dll
2014-05-25 11:43 - 2014-05-14 01:40 - 00716616 _____ () C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-25 11:43 - 2014-05-14 01:40 - 00126280 _____ () C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-25 11:43 - 2014-05-14 01:40 - 04217672 _____ () C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-25 11:43 - 2014-05-14 01:40 - 00414536 _____ () C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-25 11:43 - 2014-05-14 01:40 - 01732424 _____ () C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:A8AF8B49
AlternateDataStreams: C:\ProgramData\TEMP1B5B4F1

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: CGVPNCliSrvc => 3
MSCONFIG\Services: ForceWare Intelligent Application Manager (IAM) => 2
MSCONFIG\Services: FreemakeVideoCapture => 2
MSCONFIG\Services: nSvcIp => 2
MSCONFIG\Services: ose64 => 3
MSCONFIG\Services: osppsvc => 3
MSCONFIG\Services: Radio.fx => 2
MSCONFIG\Services: S3DSvc32 => 2
MSCONFIG\Services: S3DSvc64 => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TeamViewer8 => 2
MSCONFIG\Services: TorchCrashHandler => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Devil\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
MSCONFIG\startupreg: BCU => "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EaseUS EPM tray => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe
MSCONFIG\startupreg: GarenaPlus => "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch
MSCONFIG\startupreg: Google Update => "C:\Users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: GoogleChromeAutoLaunch_5777080ABD7AE34D1FF32B351314DFEF => "C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: PDF7 Registry Controller => C:\Program Files (x86)\Nuance\PDF Professional 7\RegistryController.exe
MSCONFIG\startupreg: PDFHook => C:\Program Files (x86)\Nuance\PDF Professional 7\pdfpro7hook.exe
MSCONFIG\startupreg: PdfProInboxMonitor => C:\Program Files (x86)\Nuance\PDF Professional 7\InboxMonitor.exe /Run
MSCONFIG\startupreg: phonostar-PlayerTimer => "C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: rfxsrvtray => "C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe"

==================== Faulty Device Manager Devices =============

Name: HID-konformes Gerät
Description: HID-konformes Gerät
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standardsystemgeräte)
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: HID-konformes Benutzersteuergerät
Description: HID-konformes Benutzersteuergerät
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: Microsoft
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: NVIDIA nForce 10/100/1000 Mbps Ethernet
Description: NVIDIA nForce Networking Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: NVNET
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/28/2014 08:17:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x17b4
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3

Error: (05/28/2014 08:17:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0xec8
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3

Error: (05/28/2014 08:13:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x6a0
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3

Error: (05/27/2014 11:17:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CLIStart.exe, Version: 3.5.0.0, Zeitstempel: 0x53508b4a
Name des fehlerhaften Moduls: SLSTaskbarHook64.dll, Version: 1.0.0.1, Zeitstempel: 0x53508bed
Ausnahmecode: 0xc000041d
Fehleroffset: 0x00000000000020f0
ID des fehlerhaften Prozesses: 0xf20
Startzeit der fehlerhaften Anwendung: 0xCLIStart.exe0
Pfad der fehlerhaften Anwendung: CLIStart.exe1
Pfad des fehlerhaften Moduls: CLIStart.exe2
Berichtskennung: CLIStart.exe3

Error: (05/27/2014 11:17:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CLIStart.exe, Version: 3.5.0.0, Zeitstempel: 0x53508b4a
Name des fehlerhaften Moduls: SLSTaskbarHook64.dll, Version: 1.0.0.1, Zeitstempel: 0x53508bed
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000020f0
ID des fehlerhaften Prozesses: 0xf20
Startzeit der fehlerhaften Anwendung: 0xCLIStart.exe0
Pfad der fehlerhaften Anwendung: CLIStart.exe1
Pfad des fehlerhaften Moduls: CLIStart.exe2
Berichtskennung: CLIStart.exe3

Error: (05/27/2014 11:17:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WerFault.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc2d9
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc000041d
Fehleroffset: 0x73ad4b02
ID des fehlerhaften Prozesses: 0x544
Startzeit der fehlerhaften Anwendung: 0xWerFault.exe0
Pfad der fehlerhaften Anwendung: WerFault.exe1
Pfad des fehlerhaften Moduls: WerFault.exe2
Berichtskennung: WerFault.exe3

Error: (05/27/2014 11:17:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: amd_ge_installer.exe, Version: 0.0.0.0, Zeitstempel: 0x4b1ae45e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc000041d
Fehleroffset: 0x73ad4b02
ID des fehlerhaften Prozesses: 0xd5c
Startzeit der fehlerhaften Anwendung: 0xamd_ge_installer.exe0
Pfad der fehlerhaften Anwendung: amd_ge_installer.exe1
Pfad des fehlerhaften Moduls: amd_ge_installer.exe2
Berichtskennung: amd_ge_installer.exe3

Error: (05/27/2014 11:16:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc000041d
Fehleroffset: 0x73ad4b02
ID des fehlerhaften Prozesses: 0x5c0
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3

Error: (05/27/2014 11:14:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdb352
Name des fehlerhaften Moduls: amdocl.dll, Version: 10.0.1445.5, Zeitstempel: 0x52212e7d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017b179
ID des fehlerhaften Prozesses: 0x12ac
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (05/27/2014 05:52:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.


System errors:
=============
Error: (05/28/2014 08:20:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (05/28/2014 08:20:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (05/28/2014 08:20:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (05/28/2014 08:20:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (05/28/2014 08:20:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (05/28/2014 08:20:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (05/28/2014 08:20:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (05/28/2014 08:20:40 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (05/28/2014 08:20:42 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (05/28/2014 08:20:42 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}


Microsoft Office Sessions:
=========================
Error: (05/28/2014 08:17:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c0000005000011aa17b401cf7aa108644ca0D:\Downloads\Gmer-19357.exeD:\Downloads\Gmer-19357.exe5f0e7490-e694-11e3-9761-f46d0493783d

Error: (05/28/2014 08:17:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c0000005000011aaec801cf7aa0e782a2c0D:\Downloads\Gmer-19357.exeD:\Downloads\Gmer-19357.exe42c40610-e694-11e3-9761-f46d0493783d

Error: (05/28/2014 08:13:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c0000005000011aa6a001cf7aa051769e30D:\Downloads\Gmer-19357.exeD:\Downloads\Gmer-19357.exeb9346ac0-e693-11e3-9761-f46d0493783d

Error: (05/27/2014 11:17:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: CLIStart.exe3.5.0.053508b4aSLSTaskbarHook64.dll1.0.0.153508bedc000041d00000000000020f0f2001cf79f10bafbee0C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exeC:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbarHook64.dll5572c540-e5e4-11e3-88aa-f46d0493783d

Error: (05/27/2014 11:17:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: CLIStart.exe3.5.0.053508b4aSLSTaskbarHook64.dll1.0.0.153508bedc000000500000000000020f0f2001cf79f10bafbee0C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exeC:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbarHook64.dll49f24060-e5e4-11e3-88aa-f46d0493783d

Error: (05/27/2014 11:17:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WerFault.exe6.1.7600.163854a5bc2d9unknown0.0.0.000000000c000041d73ad4b0254401cf79f10abcf2a0C:\Windows\SysWOW64\WerFault.exeunknown48a4ffe0-e5e4-11e3-88aa-f46d0493783d

Error: (05/27/2014 11:17:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: amd_ge_installer.exe0.0.0.04b1ae45eunknown0.0.0.000000000c000041d73ad4b02d5c01cf79f10ab5ce80C:\AMD\Support\14-4-win7-win8-win8.1-64-dd-ccc-whql\Packages\Apps\Raptr\RaptrInstaller\amd_ge_installer.exeunknown48697d80-e5e4-11e3-88aa-f46d0493783d

Error: (05/27/2014 11:16:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: MsiExec.exe5.0.7601.175144ce792c4unknown0.0.0.000000000c000041d73ad4b025c001cf79f0f86479c0C:\Windows\syswow64\MsiExec.exeunknown3698b300-e5e4-11e3-88aa-f46d0493783d

Error: (05/27/2014 11:14:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe0.0.0.051bdb352amdocl.dll10.0.1445.552212e7dc00000050017b17912ac01cf79e549aabe40C:\Windows\Temp\svchost.exeC:\Windows\system32\amdocl.dllf1 d175e0-e5e3-11e3-88aa-f46d0493783d

Error: (05/27/2014 05:52:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\phonostar-Player\phonostar.exe


CodeIntegrity Errors:
===================================
Date: 2013-12-26 14:56:16.716
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Devil\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-12-26 14:56:16.676
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Devil\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-12-26 14:56:15.897
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-12-26 14:56:15.856
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-01-22 19:36:46.464
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\zsport.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-01-22 19:36:46.433
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\zsport.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-01-22 18:17:52.372
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\zsport.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-01-22 18:17:52.341
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\zsport.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-01-22 15:53:44.232
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\zsport.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-01-22 15:53:44.201
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\zsport.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 26%
Total physical RAM: 8191.23 MB
Available physical RAM: 6002.7 MB
Total Pagefile: 16380.65 MB
Available Pagefile: 13712.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:123.96 GB) (Free:8.16 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.5 GB) (Free:29.09 GB) NTFS
Drive e: () (Fixed) (Total:341.7 GB) (Free:113.24 GB) NTFS
Drive k: (3TB-WD) (Fixed) (Total:2794.39 GB) (Free:1361.23 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 2795 GB) (Disk ID: 19AF4AA6)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: B2F74089)
Partition 1: (Not Active) - (Size=932 GB) - (Type=OF Extended)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 3561AD32)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=342 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=124 GB) - (Type=07 NTFS)

==================== End Of Log ============================
__________________

Alt 30.05.2014, 10:59   #4
schrauber
/// the machine
/// TB-Ausbilder
 

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Zitat:
127.0.0.1 eu.actual.battle.net
versucht da einer ne Spiele-Aktivierung zu umgehen?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 30.05.2014, 17:19   #5
SilentDeath
 
GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Ja das kann sein. Das ist aber schon so lang her, das ist schon gar nicht mehr war.
Hat außerdem eh nicht funktioniert. Das war glaube ich, damals als Diablo 3 raus kam und ich es unbedingt offline spielen wollte. Hat aber, wie schon erwähnt nicht funktioniert.

Ist das etwa der Grund für mein Problem? (Ich werde das gleich mal korrigieren)

Ich habe jetzt übrigens heraus gefunden das die "SVCHOST-Datei" im Windows-Temp-Ordner sitzt. Sobald ich sie mittels Task-Manager schließe, geht meine GPU-Auslastung im Leerlauf gegen Null. Löschen bringt leider nichts [-> Nach Neustart leider wieder vorhanden]


Alt 31.05.2014, 16:13   #6
schrauber
/// the machine
/// TB-Ausbilder
 

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Adware & Co. deinstallieren
  • Lade Dir bitte von hier Revo Uninstaller herunter.
  • Installiere und starte das Programm.
  • Suche im Uninstallerfeld nach den Programmen, die unter:

    diesen Zusatz haben:
  • Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:




Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
--> GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur

Alt 31.05.2014, 21:33   #7
SilentDeath
 
GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Hallo,
und vielen Dank für die Mühe.

Ich habe jetzt den "Revo Uninstaller" installiert und ausgeführt.
Nur leider war das einzige Programm welches ich vollständig (ausführlich) entfernen konnte:

"Torch" (das war glaube ich irgend so ein Download-Programm)

Die anderen Dateien aus dem Addition.log, bei denen das "ATTENTION" hinterlegt ist, waren leider nicht im "Revo Uninstaller" zu finden.

Daraufhin habe ich ComboFix geladen und ausgeführt und folgenden LOG erhalten

ComboFix:

Code:
ATTFilter
ComboFix 14-05-29.01 - Devil 31.05.2014  20:49:22.1.4 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.8191.6241 [GMT 2:00]
ausgeführt von:: c:\users\Devil\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton Internet Security *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton Internet Security *Disabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Images
c:\users\Devil\5770.jpg
c:\users\Devil\90er.rtf
c:\users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
c:\users\Devil\AppData\Roaming\Microsoft\AdjMmsVista.dll
c:\users\Devil\Monopoly3Setup.exe
c:\users\Devil\wl
c:\users\Devil\wl\Scannen0002.jpg
c:\users\Devil\wl\Scannen0003.jpg
c:\users\Devil\wl\Scannen0004.jpg
c:\users\Devil\wl\Scannen0005.jpg
c:\windows\7Loader.TAG
c:\windows\IsUn0407.exe
c:\windows\RazorDOX
c:\windows\RazorDOX\RazorDOX.dll
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ACEDRV11
-------\Legacy_NPF
-------\Service_acedrv11
-------\Service_npf
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-04-28 bis 2014-05-31  ))))))))))))))))))))))))))))))
.
.
2074-05-07 17:38 . 2006-11-21 19:48	203576	------w-	c:\program files (x86)\Microsoft Games\Age of Empires III\autopatcher2.exe
2014-05-31 18:58 . 2014-05-31 18:58	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-05-31 18:58 . 2014-05-31 18:58	--------	d-----w-	c:\users\Administrator\AppData\Local\temp
2014-05-31 18:26 . 2014-05-31 18:26	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-05-30 18:56 . 2014-05-30 18:58	--------	d-----w-	c:\users\Devil\kratzer
2014-05-30 15:22 . 2014-05-30 15:22	--------	d-----w-	c:\windows\system32\drivers\etc\SK\Neuer Ordner
2014-05-29 14:46 . 2014-05-29 14:54	--------	d-----w-	c:\users\Devil\UNI
2014-05-29 13:27 . 2014-05-29 13:27	283200	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2014-05-28 18:10 . 2014-05-29 11:58	--------	d-----w-	C:\FRST
2014-05-27 21:20 . 2014-05-27 21:20	--------	d-----w-	c:\programdata\ATI
2014-05-27 21:17 . 2014-05-27 21:17	--------	d-----w-	c:\program files (x86)\AMD AVT
2014-05-27 21:14 . 2014-05-27 21:14	--------	d-----w-	c:\program files\AMD
2014-05-27 21:01 . 2014-05-27 21:01	--------	d-----w-	c:\program files (x86)\Sapphire TRIXX
2014-05-27 20:45 . 2014-05-27 20:46	--------	d-----w-	c:\program files (x86)\MSI Afterburner
2014-05-24 21:25 . 2014-05-24 21:25	0	----a-w-	c:\windows\SysWow64\OCL8FB2.tmp
2014-05-24 21:25 . 2014-05-24 21:25	0	----a-w-	c:\windows\SysWow64\OCL7FE8.tmp
2014-05-24 18:25 . 2014-05-31 12:48	--------	d-----w-	c:\windows\system32\drivers\NISx64\1503000.00C
2014-05-12 19:43 . 2014-05-12 19:43	30208	----a-w-	C:\devdll.dll
2014-05-10 09:13 . 2014-05-10 09:13	0	----a-w-	c:\windows\SysWow64\OCL75AC.tmp
2014-05-10 09:13 . 2014-05-10 09:13	0	----a-w-	c:\windows\SysWow64\OCL756D.tmp
2014-05-05 20:43 . 2014-05-05 20:43	--------	d-----w-	c:\program files (x86)\Aeria Games
2014-05-05 20:25 . 2014-05-06 16:41	--------	d-----w-	c:\users\Devil\AppData\Local\Akamai
2014-05-05 20:25 . 2014-05-05 20:25	--------	d-----w-	C:\AeriaGames
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-24 19:11 . 2012-08-26 18:25	386680	----a-w-	c:\windows\system32\drivers\sptd.sys
2014-04-18 02:43 . 2011-03-09 04:17	143304	----a-w-	c:\windows\system32\atiuxp64.dll
2014-04-18 02:42 . 2013-08-31 00:14	126336	----a-w-	c:\windows\SysWow64\atiuxpag.dll
2014-04-18 02:42 . 2011-03-09 04:55	1343272	----a-w-	c:\windows\system32\aticfx64.dll
2014-04-18 02:42 . 2011-03-09 04:56	1117184	----a-w-	c:\windows\SysWow64\aticfx32.dll
2014-04-18 02:42 . 2011-03-09 04:40	10335208	----a-w-	c:\windows\system32\atidxx64.dll
2014-04-18 02:42 . 2013-08-31 00:13	8866928	----a-w-	c:\windows\SysWow64\atidxx32.dll
2014-04-18 02:42 . 2011-03-09 03:34	6796592	----a-w-	c:\windows\SysWow64\atiumdva.dll
2014-04-18 02:19 . 2013-08-30 23:45	24107520	----a-w-	c:\windows\SysWow64\amdocl.dll
2014-04-18 02:17 . 2013-08-30 23:43	58880	----a-w-	c:\windows\SysWow64\OpenCL.dll
2014-04-18 01:09 . 2013-08-30 22:33	848896	----a-w-	c:\windows\SysWow64\atiadlxy.dll
2014-04-18 01:07 . 2013-08-30 22:32	133632	----a-w-	c:\windows\SysWow64\atigktxx.dll
2014-04-17 20:33 . 2014-04-17 20:33	51200	----a-w-	c:\windows\system32\kdbsdk64.dll
2014-04-17 20:28 . 2014-04-17 20:28	38912	----a-w-	c:\windows\SysWow64\kdbsdk32.dll
2014-03-29 19:26 . 2012-09-22 11:46	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-03-29 19:26 . 2012-09-21 19:27	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-29 18:13 . 2014-03-29 18:18	81855696	----a-w-	c:\users\Devil\setpoint6.61.15_64.exe
2014-03-29 18:13 . 2014-03-29 18:18	4109832	----a-w-	c:\users\Devil\scroll_app_smart_4.00.33.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{25DA541F-6ACF-4052-A8AA-1D58284729C7}]
2010-11-04 15:58	297808	----a-w-	c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-03-19 12:13	294456	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-07-13 02:43	1724616	----a-w-	c:\progra~2\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-07-13 02:43	1724616	----a-w-	c:\progra~2\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-07-13 02:43	1724616	----a-w-	c:\progra~2\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2010-02-10 2770432]
"BCU"="c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" [2010-03-05 411864]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-04-17 767200]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
UltraMon.lnk - c:\windows\Installer\{ED7FE81C-378C-411D-B5B4-509B978BA204}\IcoUltraMon.ico /auto [2012-12-18 29310]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R1 EIO64;EIO Driver;c:\windows\system32\DRIVERS\EIO64.sys;c:\windows\SYSNATIVE\DRIVERS\EIO64.sys [x]
R2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe;c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Plus\Room\safedrv.sys;c:\program files (x86)\Garena Plus\Room\safedrv.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 usbcamcl;Driver for video Device;c:\windows\system32\DRIVERS\usbcamcl.sys;c:\windows\SYSNATIVE\DRIVERS\usbcamcl.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 zonescreen;zonescreen;c:\windows\system32\DRIVERS\zsport.sys;c:\windows\SYSNATIVE\DRIVERS\zsport.sys [x]
R4 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe;c:\program files\CyberGhost VPN\CGVPNCliService.exe [x]
R4 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R4 S3DSvc32;S3D Service (Win32);c:\program files (x86)\iZ3D Driver\Win32\S3DCService.exe;c:\program files (x86)\iZ3D Driver\Win32\S3DCService.exe [x]
R4 S3DSvc64;S3D Service (Win64);c:\program files (x86)\iZ3D Driver\Win64\S3DCService.exe;c:\program files (x86)\iZ3D Driver\Win64\S3DCService.exe [x]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
R4 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1503000.00C\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1503000.00C\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1503000.00C\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1503000.00C\SYMEFA64.SYS [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys [x]
S1 ccSet_NIS;NIS Settings Manager;c:\windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1503000.00C\ccSetx64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 IDSVia64;IDSVia64;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140530.001\IDSvia64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140530.001\IDSvia64.sys [x]
S1 iZ3DInjectionDriver;Driver inject our D3D and OGL wrappers;c:\program files (x86)\iZ3D Driver\Win64\S3DInjectionDriver.sys;c:\program files (x86)\iZ3D Driver\Win64\S3DInjectionDriver.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1503000.00C\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1503000.00C\SYMNETS.SYS [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 BCUService;Browser Configuration Utility Service;c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe;c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe [x]
S2 LcSvrAdm;ELSA Administration Service;d:\elsawin\bin\LcSvrAdm.exe;d:\elsawin\bin\LcSvrAdm.exe [x]
S2 LcSvrDba;ELSA DBA Server;d:\elsawin\bin\LcSvrDba.exe;d:\elsawin\bin\LcSvrDba.exe [x]
S2 LcSvrHis;ELSA Historie Server;d:\elsawin\bin\LcSvrHis.exe;d:\elsawin\bin\LcSvrHis.exe [x]
S2 LcSvrPAS;ELSA PASS Server;d:\elsawin\bin\LcSvrPas.exe;d:\elsawin\bin\LcSvrPas.exe [x]
S2 LcSvrSaz;ELSA APOSpro Server;d:\elsawin\bin\LcSvrSaz.exe;d:\elsawin\bin\LcSvrSaz.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe;c:\program files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [x]
S2 UltraMonUtility;UltraMon Utility Driver;c:\program files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys;c:\program files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 LcSvrAuf;ELSA Auftragsverwaltungs Service;d:\elsawin\bin\LcSvrAuf.exe;d:\elsawin\bin\LcSvrAuf.exe [x]
S3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\DRIVERS\lgbtpt64.sys;c:\windows\SYSNATIVE\DRIVERS\lgbtpt64.sys [x]
S3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\DRIVERS\lgbtbs64.sys;c:\windows\SYSNATIVE\DRIVERS\lgbtbs64.sys [x]
S3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\DRIVERS\lgvmdm64.sys;c:\windows\SYSNATIVE\DRIVERS\lgvmdm64.sys [x]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2014-05-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-22 19:26]
.
2014-05-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-04-25 20:24]
.
2014-05-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-04-25 20:24]
.
2014-05-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core.job
- c:\users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-27 13:39]
.
2014-05-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA.job
- c:\users\Devil\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-27 13:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}]
2010-11-04 15:57	444752	----a-w-	c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-03-19 12:13	357432	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-07-13 02:37	2328776	----a-w-	c:\progra~1\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-07-13 02:37	2328776	----a-w-	c:\progra~1\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-07-13 02:37	2328776	----a-w-	c:\progra~1\Microsoft Office\Office15\GROOVEEX.DLL
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = local;<local>
IE: E&xport to Microsoft Excel - c:\progra~1\Microsoft Office\Office15\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Se&nd to OneNote - c:\progra~1\Microsoft Office\Office15\ONBttnIE.dll/105
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 192.168.0.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3311336&CUI=UN18007227791151922&UM=2&SearchSource=3&q={searchTerms}&sspv=TB_CNI
FF - user.js: extensions.shownSelectionUI - true
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{F1AF26F8-1828-4279-ABCE-074EF3235BD7} - (no file)
Toolbar-10 - (no file)
Toolbar-10 - (no file)
AddRemove-Diablo.III.Client.Server.Emulator_is1 - c:\program files (x86)\Games\Diablo.III.Client.Server.Emulator\unins000.exe
AddRemove-Die Sims - c:\windows\IsUn0407.exe
AddRemove-ESI Prüfwerte - c:\windows\IsUn0407.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-Steam App 245280 - j:\program files (x86)\Steam\steam.exe
AddRemove-{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF} - c:\program files (x86)\InstallShield Installation Information\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}\setup.exe
AddRemove-{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88} - c:\program files (x86)\InstallShield Installation Information\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\21.3.0.12\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton Internet Security\Engine\21.3.0.12;c:\program files (x86)\Norton Internet Security\Engine64\21.3.0.12"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
c:\program files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-05-31  21:13:22 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-05-31 19:13
.
Vor Suchlauf: 23 Verzeichnis(se), 27.785.736.192 Bytes frei
Nach Suchlauf: 29 Verzeichnis(se), 27.430.928.384 Bytes frei
.
- - End Of File - - 0403009F14E69330A23EB58E21EC6F83
5FB38429D5D77768867C76DCBDB35194
         

Alt 01.06.2014, 15:48   #8
schrauber
/// the machine
/// TB-Ausbilder
 

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 02.06.2014, 00:10   #9
SilentDeath
 
GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Hallo,
ich habe " Malwarebytes Anti-Malware " installiert und den beschriebenen Ablauf eingehalten, bis auf eine kleine Abweichung:
-> Ich habe nach dem ersten Suchlauf, die kostenlose " Pro Testversion" aktiviert und den Suchlauf wiederholt.
-> deswegen habe ich auch zwei "mbam.txt-Dateien" angefügt.
[Wobei auch endlich die "SVCHOST.exe" im Windows-Temp-Ordner erkannt und in Quarantäne verschoben wurde]

Hier meine Logs:

mbam(1):

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Scan Date: 01.06.2014
Scan Time: 22:20:16
Logfile: mbam.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.01.07
Rootkit Database: v2014.05.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Devil

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 343779
Time Elapsed: 11 min, 54 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 26
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, , [63e8b5be7ffc59dda60dfd6b6f931de3], 
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, , [63e8b5be7ffc59dda60dfd6b6f931de3], 
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, , [63e8b5be7ffc59dda60dfd6b6f931de3], 
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, , [63e8b5be7ffc59dda60dfd6b6f931de3], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [eb60b1c21b60c373a22902653ec407f9], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [eb60b1c21b60c373a22902653ec407f9], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [7bd00b686714fb3b104a16513fc34ab6], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [7bd00b686714fb3b104a16513fc34ab6], 
PUP.Optional.Babylon.A, HKLM\SOFTWARE\WOW6432NODE\BabylonToolbar, , [c18aef844f2c60d6dc418f3622e1c63a], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, , [113aed8694e7cc6ae674305f3ec432ce], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [5af1264de299fc3a4b2904aa27db738d], 
PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\WOW6432NODE\InstallIQ, , [bf8c33402f4ccf678b03278020e21ae6], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Plus-HD-3.8, , [73d852216c0ffb3bb5904967fd05916f], 
PUP.Optional.SurfCanyon.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bcjagnifjocnddgeknajocbkkhlgibem, , [23286112c6b544f2dece99f89e644eb2], 
PUP.Optional.1ClickDownLoader.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pmlghpafmmnmmkjdhacccolfgnkiboco, , [32198ce7106bd16567a9524207fbde22], 
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM, , [7ad132411f5cc96d7cfc0cb8fb08ee12], 
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [81caff74c2b9d066a93abb09659e3cc4], 
PUP.Optional.BabylonToolBar.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BabylonToolbar, , [c784d3a0fb80ac8ac27ac8ffda29ac54], 
PUP.Optional.PlusHD.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-3.8, , [094294df87f40630395efba5ee14837d], 
PUP.Optional.Conduit.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, , [4704145fcab15ed8e92541882ed59868], 
PUP.Optional.ValueApps.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\ValueApps, , [e06b61121269a393d71bbcf1f70b48b8], 
PUP.Optional.Softonic.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [1932acc77ffc47ef809aa2fae71b966a], 
PUP.Optional.SweetIM.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM, , [e36852211368092d9ed9606458ab02fe], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [a3a8155e90ebb5818283c90f44bf1fe1], 
PUP.Optional.MultiIE.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, , [4ffc640f43383df90c494c9505fe9e62], 
PUP.Optional.PlusHD.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-3.8, , [6dde62114b30b77f5f38a5fb32d0a060], 

Registry Values: 7
PUP.Optional.CoolPic, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{FEFE89E5-A43F-4f4b-8211-B11D91D02135}, , [074402712358c373c5ef6700b64cb14f], 
PUP.Optional.CoolPic, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FEFE89E5-A43F-4F4B-8211-B11D91D02135}, C:\Program Files\CoolPic - Fun Social Pictures\Firefox, , [074402712358c373c5ef6700b64cb14f]
PUP.Optional.WBCEngine, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{14DD0E04-D4F6-45d2-A958-F361FBD4F64F}, , [f556a7ccaad160d6783d40279a6812ee], 
PUP.Optional.WBCEngine, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{14DD0E04-D4F6-45D2-A958-F361FBD4F64F}, C:\Program Files\WBC Engine\Firefox, , [f556a7ccaad160d6783d40279a6812ee]
PUP.Optional.BrowserProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|bProtectTabs, hxxp://www2.delta-search.com/?affID=119816&babsrc=NT_ss&mntrId=E8B400FF09724650, , [da714033aecdd1659747c2049e65847c]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM|simapp_id, {FBDFD774-6E6E-45D7-B116-230FE9E032D8}, , [7ad132411f5cc96d7cfc0cb8fb08ee12]
PUP.Optional.SweetIM.A, HKU\S-1-5-21-1033395003-4163772576-2144622384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM|simapp_id, {FBDFD774-6E6E-45D7-B116-230FE9E032D8}, , [e36852211368092d9ed9606458ab02fe]

Registry Data: 0
(No malicious items detected)

Folders: 38
PUP.Optional.Esafe.A, C:\ProgramData\eSafe, , [1437294a8cefd95dc890edd4d3306b95], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\ar, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\da, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\de, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\en, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\es, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\fr, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\it, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\nl, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\pl, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\pt, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\ro, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\th, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\tr, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\tw, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\vi, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\res\lang\zh, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\skin, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\EDOWNLOAD\skin\dl, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.DealPly.A, C:\Users\Devil\AppData\Roaming\DealPly, , [212ab5bed5a6b284662dc8b237cbde22], 
PUP.Optional.DealPly.A, C:\Users\Devil\AppData\Roaming\DealPly\UpdateProc, , [212ab5bed5a6b284662dc8b237cbde22], 
PUP.Optional.CoolPic, C:\Program Files\COOLPIC - FUN SOCIAL PICTURES, , [bd8e2c4733481c1aa61e42381ee4f808], 
PUP.Optional.OpenCandy, C:\Users\Devil\AppData\Roaming\OPENCANDY, , [67e4fc778cef84b24e7c0f6b2ed49868], 
PUP.Optional.OpenCandy, C:\Users\Devil\AppData\Roaming\OPENCANDY\9F1A7FED68744508A586ADB57EE6B66D, , [67e4fc778cef84b24e7c0f6b2ed49868], 
PUP.Optional.OpenCandy, C:\Users\Devil\AppData\Roaming\OPENCANDY\OpenCandy_9F1A7FED68744508A586ADB57EE6B66D, , [67e4fc778cef84b24e7c0f6b2ed49868], 
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE, , [6dde581bbdbe989e99bcd7a48b778d73], 
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3311336, , [6dde581bbdbe989e99bcd7a48b778d73], 
PUP.Optional.Visualbee, C:\Users\Devil\AppData\Local\VISUALBEEEXE, , [eb60e58e6912171f1c438bf1b84ae21e], 
PUP.Optional.JollyWallet.A, C:\Users\Devil\AppData\Local\JOLLYWALLET, , [83c8195a0e6df6400e5f215c1de51ee2], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\UPDATER23986, , [a8a3e0934239c373a4156e0f57abae52], 
PUP.Optional.SockShareDownloader.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\jetpack\SOCKSHAREDOWNLOADER@SOCKSHAREDOWNLOADER.COM, , [c388b2c1582346f0bbf6dca4669ccb35], 
PUP.Optional.SockShareDownloader.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\jetpack\SOCKSHAREDOWNLOADER@SOCKSHAREDOWNLOADER.COM\simple-storage, , [c388b2c1582346f0bbf6dca4669ccb35], 
PUP.Optional.TornTV.A, C:\Program Files (x86)\TornTV.com, , [1a31e68d225944f295465d24a35fac54], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\LOCAL EXTENSION SETTINGS\OFJGNHIHLKLPOBKALOAMKANKAAOCLFJH, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.SavingsExplorer.A, C:\Users\Devil\AppData\Local\SAVINGS EXPLORER, , [34174132d7a4e2548c74bfcf60a25ea2], 

Files: 110
HackTool.HotKeyHook, C:\Windows\SysWOW64\H@tKeysH@@k.DLL, , [4cff175c3348f93dcb79f8a915ebd22e], 
Trojan.BitCoinMiner, C:\Windows\Temp\svchost.exe, , [4b00482b6c0f2b0b518319f057aaa45c], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_OFJGNHIHLKLPOBKALOAMKANKAAOCLFJH_0.LOCALSTORAGE, , [d675e093522965d1b33780107d858c74], 
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\babylon1.xml, , [7dceabc8c6b5a6903293c5d4788ad828], 
PUP.Optional.Conduit.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\conduit.xml, , [71da165d3645fe38e1bc742e05fd42be], 
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\delta.xml, , [60eb1e553249ee483d6d792918ea7090], 
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, , [63e86e0538430234cd9bc3e403fff30d], 
PUP.Optional.Babylon.A, C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml, , [cb8087ece09b79bd9e0fedbaf70b6997], 
PUP.Optional.Esafe.A, C:\ProgramData\eSafe\EDELAYINFO.EDB, , [1437294a8cefd95dc890edd4d3306b95], 
Trojan.BitcoinMiner, C:\Windows\Temp\phatk121016.cl, , [4407d49f423963d317d37150be45b749], 
Trojan.BitcoinMiner, C:\Windows\Temp\scrypt130511.cl, , [b497c4af2952ec4a33b8ae13c53e669a], 
Trojan.BitcoinMiner, C:\Windows\Temp\diablo130302.cl, , [8cbf88ebbfbc5cdad616972a09fac937], 
Trojan.BitcoinMiner, C:\Windows\Temp\poclbm130302.cl, , [d5769cd7e596ad898f5e8b36d62d0df3], 
Trojan.BitcoinMiner, C:\Windows\Temp\diakgcn121016.cl, , [ce7dd69d2259ef47ce208e3334cf4bb5], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\EDOWNLOAD.LOG, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\eGdpSvc.exe, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\GoPlayerSetup_br.exe, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\config.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\db.con, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\ar\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\da\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\de\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\en\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\es\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\fr\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\it\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\nl\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\pl\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\pt\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\ro\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\th\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\tr\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\tw\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\vi\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\res\lang\zh\down_lang.ini, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\body.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\bt2.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\btn_close.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\btn_min.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\config.Bindable, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\config.xml, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\glow1.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\glow2.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\logo.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\progress_bg.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\progress_over.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\rotate.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.Elex.A, C:\Users\Devil\AppData\Roaming\eDownload\skin\dl\slogo.png, , [8ebdef84d0abe056627aedd8768d6e92], 
PUP.Optional.DealPly.A, C:\Users\Devil\AppData\Roaming\DealPly\UpdateProc\config.dat, , [212ab5bed5a6b284662dc8b237cbde22], 
PUP.Optional.CoolPic, C:\Program Files\CoolPic - Fun Social Pictures\source.crx, , [bd8e2c4733481c1aa61e42381ee4f808], 
PUP.Optional.OpenCandy, C:\Users\Devil\AppData\Roaming\OpenCandy\9F1A7FED68744508A586ADB57EE6B66D\driverscannerROE.exe, , [67e4fc778cef84b24e7c0f6b2ed49868], 
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3311336\UninstallerUI.exe, , [6dde581bbdbe989e99bcd7a48b778d73], 
PUP.Optional.SockShareDownloader.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\jetpack\socksharedownloader@socksharedownloader.com\simple-storage\store.json, , [c388b2c1582346f0bbf6dca4669ccb35], 
PUP.Optional.TornTV.A, C:\Program Files (x86)\TornTV.com\torn10.crx, , [1a31e68d225944f295465d24a35fac54], 
PUP.Optional.TornTV.A, C:\Program Files (x86)\TornTV.com\torntemp.xpi, , [1a31e68d225944f295465d24a35fac54], 
PUP.Optional.TornTV.A, C:\Program Files (x86)\TornTV.com\TornTV.exe, , [1a31e68d225944f295465d24a35fac54], 
PUP.Optional.TornTV.A, C:\Program Files (x86)\TornTV.com\uninst.exe, , [1a31e68d225944f295465d24a35fac54], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\000005.ldb, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\000011.ldb, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\000012.log, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\CURRENT, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\LOCK, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\LOG, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\LOG.old, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ofjgnhihlklpobkaloamkankaaoclfjh\MANIFEST-000010, , [99b2175ce7943600930bb8d451b18e72], 
PUP.Optional.CrossRider.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "142e27951168c4707a517d48d8d0bab8");), ,[b6950e65d5a6ed49f58e4e3fb64e7e82]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.admin", false);), ,[7bd0a6cd116a1c1a91028d004fb55fa1]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.aflt", "babsst");), ,[0f3c482bcfac0d29741f0a8346bea35d]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");), ,[8bc095dec0bb62d47b18fa9308fc0df3]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.autoRvrt", "false");), ,[4efd73003b40c670ace73954887cd52b]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.dfltLng", "en");), ,[2823581b037868cebcd7e4a9887cda26]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.excTlbr", false);), ,[0a41650e9dde6acc1b78a9e427ddd12f]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.id", "e8b42bfb000000000000f46d0493783d");), ,[d279c2b184f7ec4a1b78f09d92726f91]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.instlDay", "15725");), ,[2922175c64178da95142fc9107fd3ec2]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.instlRef", "sst");), ,[6ddef87b93e80d292073b3dabb4905fb]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");), ,[60eb442f225975c1eaa9018c9173659b]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.prtnrId", "babylon");), ,[18332152304b2d09048f5835d92b39c7]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.rvrt", "false");), ,[f457116290ebf1453d565b3227dd17e9]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.tlbrId", "base");), ,[0546284b45361224444f0588ce368878]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=e8b42bfb000000000000f46d0493783d&q=");), ,[18335122f3883afce0b36f1e5da7ce32]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.vrsn", "1.8.7.2");), ,[311ae3908eed0c2a0a89810ccc388d73]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.vrsni", "1.8.7.2");), ,[22295a192556d95d7c17800d1fe59c64]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.babExt", "");), ,[de6d0f649be07abc157e2d60b74dc13f]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.babTrack", "affID=117023&tt=0313_1");), ,[cc7ffe7588f3ec4a9ff4503db054f20e]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.excTlbr", false);), ,[0249c0b37efd3bfbb2e17914fe064db3]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.newTab", false);), ,[b19a9cd77efdef472e65deaf06fe04fc]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.claro-search.com/?affID=120133&tt=0313_1&babsrc=NT_ss&mntrId=e8b42bfb000000000000f46d0493783d");), ,[7ecdcfa4f4872511e3b0fb92c44056aa]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.smplGrp", "none");), ,[3813650e572443f3a9eabdd048bc0ef2]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.srcExt", "ss");), ,[a2a960135c1ffa3c3e55c4c90afade22]
PUP.Optional.Babylon.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.7.223:18:51");), ,[99b2601368136ec8573c0885758f23dd]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.admin", false);), ,[39128be82556b0865644bdd0fa0ac040]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.aflt", "babsst");), ,[6cdf1f54ea9171c55b3fc1cce51f5ea2]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");), ,[4a01ff74e596a09608929df0d52f28d8]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.autoRvrt", "false");), ,[fe4d4231adce44f277236e1f34d07d83]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.dfltLng", "en");), ,[f15a393af388c3737b1f424b23e103fd]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.excTlbr", false);), ,[d07b650e5d1e122437634c4136cef40c]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.id", "e8b42bfb00000000000000ff09724650");), ,[55f6d2a1522969cd6f2bdbb2f90b738d]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.instlDay", "15782");), ,[c9827201f784b4824654b5d8d72dbb45]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.instlRef", "sst");), ,[004bcda6413af3431486870659ab3fc1]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.newTab", false);), ,[410a79fabdbe79bdcad0018c030125db]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.prdct", "delta");), ,[eb60660de4977db9a2f86429ed17bd43]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.prtnrId", "delta");), ,[7ad14d26e893b581b9e1cfbe09fb7b85]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.rvrt", "false");), ,[05467af92655c274326892fbae563fc1]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.smplGrp", "none");), ,[0b40b5bebac1fe385743e0ad73918d73]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.tlbrId", "base");), ,[2d1e334089f25cda7d1d7b1218eceb15]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.tlbrSrchUrl", "");), ,[2427c8ab1467a19556440e7fae56629e]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.vrsn", "1.8.10.0");), ,[77d4a4cfbbc006305743187548bc649c]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.vrsnTs", "1.8.10.021:27:10");), ,[6edd43307308ac8a5842325bf50f04fc]
PUP.Optional.Delta.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("extensions.delta.vrsni", "1.8.10.0");), ,[05464f24fc7fb086eab00a83b94b0cf4]
PUP.Optional.Conduit.A, C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js, Good: (), Bad: (user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3311336&CUI=UN18007227791151922&UM=2&SearchSource=3&q={searchTerms}&sspv=TB_CNI");), ,[c9823241cfac79bd7b7d4c4115efa15f]

Physical Sectors: 0
(No malicious items detected)


(end)
         
mbam(2):

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 01.06.2014
Suchlauf-Zeit: 22:52:11
Logdatei: mbam1.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.06.01.08
Rootkit Datenbank: v2014.05.21.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Devil

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 343944
Verstrichene Zeit: 10 Min, 12 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 6
Trojan.BitCoinMiner, C:\Windows\Temp\svchost.exe, In Quarantäne, [410b12615328c96da232ae5bb15030d0], 
Trojan.BitcoinMiner, C:\Windows\Temp\phatk121016.cl, In Quarantäne, [8fbd6e05314ac96d618b9e23a261718f], 
Trojan.BitcoinMiner, C:\Windows\Temp\scrypt130511.cl, In Quarantäne, [e864d0a3156692a4cf1e8f32d23147b9], 
Trojan.BitcoinMiner, C:\Windows\Temp\diablo130302.cl, In Quarantäne, [f25afe758fecad89e00ed7ea7a89ca36], 
Trojan.BitcoinMiner, C:\Windows\Temp\poclbm130302.cl, In Quarantäne, [98b44b28e09b0333ef0000c11ee51ae6], 
Trojan.BitcoinMiner, C:\Windows\Temp\diakgcn121016.cl, In Quarantäne, [1f2db8bb4e2d181eb0403b860ef5d729], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         
Danach habe ich "Adwcleaner" installiert und folgende LOG erhalten:

AdwCleaner[R0]:

Code:
ATTFilter
# AdwCleaner v3.211 - Bericht erstellt am 01/06/2014 um 23:18:04
# Aktualisiert 26/05/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Devil - NEO
# Gestartet von : C:\Users\Devil\Desktop\Desktop\Trojaner-Board\adwcleaner_3.211.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : BCUService

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Search_Results.xml
Datei Gefunden : C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\invalidprefs.js
Datei Gefunden : C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\claro.xml
Datei Gefunden : C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\safesearch.xml
Datei Gefunden : C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\searchplugins\Search_Results.xml
Datei Gefunden : C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\user.js
Datei Gefunden : C:\Windows\System32\Tasks\BrowserProtect
Datei Gefunden : C:\Windows\System32\Tasks\Dealply
Datei Gefunden : C:\Windows\System32\Tasks\DealPlyUpdate
Datei Gefunden : C:\Windows\System32\Tasks\EPUpdater
Datei Gefunden : C:\Windows\System32\Tasks\Express FilesUpdate
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater Ui
Datei Gefunden : C:\Windows\System32\Tasks\VisualBeeRecovery
Datei Gefunden : C:\Windows\System32\Tasks\YourFile DownloaderUpdate
Ordner Gefunden : C:\Program Files (x86)\1ClickDownload
Ordner Gefunden : C:\Program Files (x86)\BearShare Applications
Ordner Gefunden : C:\Program Files (x86)\Common Files\Tobit
Ordner Gefunden : C:\Program Files (x86)\Conduit
Ordner Gefunden : C:\Program Files (x86)\DeviceVM
Ordner Gefunden : C:\Program Files (x86)\Surf Canyon
Ordner Gefunden : C:\ProgramData\apn
Ordner Gefunden : C:\ProgramData\Conduit
Ordner Gefunden : C:\ProgramData\DeviceVM
Ordner Gefunden : C:\ProgramData\PC Optimizer Pro
Ordner Gefunden : C:\ProgramData\Tarma Installer
Ordner Gefunden : C:\ProgramData\Trymedia
Ordner Gefunden : C:\ProgramData\VisualBee
Ordner Gefunden : C:\Users\Administrator\AppData\Roaming\DeviceVM
Ordner Gefunden : C:\Users\Devil\AppData\Local\Conduit
Ordner Gefunden : C:\Users\Devil\AppData\Local\DownloadGuide
Ordner Gefunden : C:\Users\Devil\AppData\Local\NativeMessaging
Ordner Gefunden : C:\Users\Devil\AppData\Local\PackageAware
Ordner Gefunden : C:\Users\Devil\AppData\Local\PutLockerDownloader
Ordner Gefunden : C:\Users\Devil\AppData\Local\Savings Vault
Ordner Gefunden : C:\Users\Devil\AppData\Local\SearchProtect
Ordner Gefunden : C:\Users\Devil\AppData\Local\Software_Updater
Ordner Gefunden : C:\Users\Devil\AppData\Local\SoftwareUpdater
Ordner Gefunden : C:\Users\Devil\AppData\Local\SwvUpdater
Ordner Gefunden : C:\Users\Devil\AppData\LocalLow\Conduit
Ordner Gefunden : C:\Users\Devil\AppData\LocalLow\GutscheinCodes
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\Claro LTD
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\DesktopIconForAmazon
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\DeviceVM
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\eIntaller
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\eType
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\ExpressFiles
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\Tobit
Ordner Gefunden : C:\Users\Devil\AppData\Roaming\YourFileDownloader
Ordner Gefunden : C:\Users\Devil\Documents\Optimizer Pro
Ordner Gefunden : C:\Windows\SysWOW64\hotspot shield

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\anchorfree
Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Show-Password
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\XingHaoLyrics
Schlüssel Gefunden : HKCU\Software\BI
Schlüssel Gefunden : HKCU\Software\Claro LTD
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\DeviceVM
Schlüssel Gefunden : HKCU\Software\ee8cddb66eba13
Schlüssel Gefunden : HKCU\Software\ExpressFiles
Schlüssel Gefunden : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Schlüssel Gefunden : HKCU\Software\Imesh
Schlüssel Gefunden : HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKCU\Software\pc optimizer pro
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Software\YourFileDownloader
Schlüssel Gefunden : [x64] HKCU\Software\anchorfree
Schlüssel Gefunden : [x64] HKCU\Software\BI
Schlüssel Gefunden : [x64] HKCU\Software\Claro LTD
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\DeviceVM
Schlüssel Gefunden : [x64] HKCU\Software\ExpressFiles
Schlüssel Gefunden : [x64] HKCU\Software\Imesh
Schlüssel Gefunden : [x64] HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\pc optimizer pro
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\YourFileDownloader
Schlüssel Gefunden : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{162E06EC-4E38-4809-AE76-BF2400D34334}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{77AA6435-2488-4A94-9FE5-49519DD2ED9B}
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\Software\DeviceVM
Schlüssel Gefunden : HKLM\Software\ExpressFiles
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\jbpkiefagocgkmemidfngdkamloieekf
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15A0413E-9F45-4D45-9A75-2C20B15B5B51}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Lucky Savings_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Lucky Savings_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Lucky Savings-InternalInstaller_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Lucky Savings-InternalInstaller_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_asus-smart-doctor_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_asus-smart-doctor_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_monopoly-3_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_monopoly-3_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\strongvaultapp_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\strongvaultapp_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\updateveberGreat_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\updateveberGreat_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Schlüssel Gefunden : HKLM\Software\SafetyNut
Schlüssel Gefunden : HKLM\Software\Uniblue
Schlüssel Gefunden : HKLM\Software\Uniblue\DriverScanner
Schlüssel Gefunden : HKLM\Software\YourFileDownloader
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0BF91075-F457-4A8B-99EF-140B52D2F22A}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2830488C-079B-45C2-88B6-AFE4EAA2DF85}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{37425600-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{431FB0E5-2CBB-4602-9FE6-F1D64488ADD7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{5C9A230D-70A5-11D5-AFB0-0050DAC67890}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{75BF416E-4326-45B5-8A2D-AE32D05B930B}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8911483C-C00A-4183-9FBC-6C9C00946C15}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{928FE5E7-D557-46B7-8AF6-17ACCE1FB4ED}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C3F058A9-407D-4CD1-8F66-B75605B54B69}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{EFDCAF05-D29C-4D4D-9836-8CDCD606A6B2}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Speedchecker Limited
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BCU]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ocr@babylon.com]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [ Browser ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v21.0 (de)

[ Datei : C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js ]

Zeile gefunden : user_pref("CT3311336.FF19Solved", "true");
Zeile gefunden : user_pref("CT3311336.UserID", "UN18007227791151922");
Zeile gefunden : user_pref("CT3311336.browser.search.defaultthis.engineName", "true");
Zeile gefunden : user_pref("CT3311336.fullUserID", "UN18007227791151922.IN.20131210200430");
Zeile gefunden : user_pref("CT3311336.installDate", "10/12/2013 20:04:32");
Zeile gefunden : user_pref("CT3311336.installSessionId", "{F667FDEE-25CD-4308-ADBD-6014DFB579B2}");
Zeile gefunden : user_pref("CT3311336.installSp", "TRUE");
Zeile gefunden : user_pref("CT3311336.installUsage", "10/12/2013 20:14:35");
Zeile gefunden : user_pref("CT3311336.installUsageEarly", "10/12/2013 20:14:35");
Zeile gefunden : user_pref("CT3311336.installerVersion", "1.8.1.4");
Zeile gefunden : user_pref("CT3311336.keyword", "true");
Zeile gefunden : user_pref("CT3311336.originalHomepage", "about:home");
Zeile gefunden : user_pref("CT3311336.originalSearchAddressUrl", "");
Zeile gefunden : user_pref("CT3311336.originalSearchEngine", "");
Zeile gefunden : user_pref("CT3311336.originalSearchEngineName", "");
Zeile gefunden : user_pref("CT3311336.searchRevert", "true");
Zeile gefunden : user_pref("CT3311336.searchUninstallUserMode", "2");
Zeile gefunden : user_pref("CT3311336.searchUserMode", "2");
Zeile gefunden : user_pref("CT3311336.smartbar.homepage", "true");
Zeile gefunden : user_pref("CT3311336.toolbarInstallDate", "10-12-2013 20:04:30");
Zeile gefunden : user_pref("CT3311336.versionFromInstaller", "10.22.5.170");
Zeile gefunden : user_pref("CT3311336.xpeMode", "0");
Zeile gefunden : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Zeile gefunden : user_pref("browser.search.defaultenginename", "Freemium DE Customized Web Search");
Zeile gefunden : user_pref("browser.search.defaultthis.engineName", "Freemium DE Customized Web Search");
Zeile gefunden : user_pref("extensions.claro.autoRvrt", "false");
Zeile gefunden : user_pref("extensions.claro.rvrt", "false");
Zeile gefunden : user_pref("extensions.claro_i.newTab", false);
Zeile gefunden : user_pref("extensions.ffxtlbr@babylon.com.install-event-fired", true);
Zeile gefunden : user_pref("smartbar.addressBarOwnerCTID", "CT3311336");
Zeile gefunden : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3311336&CUI=UN18007227791151922&UM=2&SearchSource=13&sspv=TB_TNI,hxxp://search.conduit.com/?ctid=CT3311336&CUI=UN1800722779[...]
Zeile gefunden : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3311336&SearchSource=2&CUI=UN18007227791151922&UM=2&sspv=TB_TNI&q=,hxxp://search.conduit.com/Results[...]
Zeile gefunden : user_pref("smartbar.defaultSearchOwnerCTID", "CT3311336");
Zeile gefunden : user_pref("smartbar.homePageOwnerCTID", "CT3311336");
Zeile gefunden : user_pref("smartbar.machineId", "X/ZAK1QGGBT7AB+KFCV61CSYOPO7UJC1ROYPISBVUJ7OSDHSHZ2EPTN2G3RAV0J1JHVULMVZQKGTXEVMO06CWQ");
Zeile gefunden : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3311336&CUI=UN18007227791151922&UM=2&SearchSource=13&sspv=TB_CNI");

-\\ Google Chrome v

[ Datei : C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gefunden [Extension] : bcjagnifjocnddgeknajocbkkhlgibem
Gefunden [Extension] : jbpkiefagocgkmemidfngdkamloieekf
Gefunden [Extension] : kiplfnciaokpcennlkldkdaeaaomamof
Gefunden [Extension] : pmlghpafmmnmmkjdhacccolfgnkiboco

*************************

AdwCleaner[R0].txt - [23397 octets] - [01/06/2014 23:18:04]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [23458 octets] ##########
         
Als letztes habe ich noch einmal "Farbar's Recovery Scan Tool" ausgeführt und den FRST.txt erhalten:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014 01
Ran by Devil (administrator) on NEO on 01-06-2014 23:53:07
Running from C:\Users\Devil\Desktop\Desktop\Trojaner-Board
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrAdm.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrDba.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrHis.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrPas.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrSaz.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtime Soft Ltd) C:\Program Files\UltraMon\UltraMon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbar.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrAuf.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbar64.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Realtime Soft Ltd) C:\Program Files\UltraMon\UltraMonUiAcc.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Realtime Soft Ltd) C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Devil\Desktop\Desktop\Trojaner-Board\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2770432 2010-02-10] (VIA)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1033395003-4163772576-2144622384-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UltraMon.lnk
ShortcutTarget: UltraMon.lnk -> C:\Windows\Installer\{ED7FE81C-378C-411D-B5B4-509B978BA204}\IcoUltraMon.ico ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll No File
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {A1DABF90-F83C-4a5a-8000-514E06654FA7} URL = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5369970905&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms}
SearchScopes: HKCU - {C3EA6126-6E4F-4d88-978E-291625E6B2A1} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - D:\ElsaWin\bin\wiprot.dll (TODO: <Company name>)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Devil\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Devil\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\admin@proxy-listen.de.xpi [2013-02-12]
FF Extension: Adblock Plus - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-19]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-14]
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: https://www.google.de/
CHR StartupUrls: "https://www.google.de/"
CHR Plugin: (Shockwave Flash) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U11) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (phonostar Detector) - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
CHR Plugin: (Google Update) - C:\Users\Devil\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Extension: (ProxFlow) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-05-30]
CHR Extension: (Adblock Plus) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-04-28]
CHR Extension: (AdBlock) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-04-28]
CHR Extension: (Google Wallet) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR HKCU\...\Chrome\Extension: [jopemfhojpebdeollanchfjhpbkcijoi] - C:\Users\Devil\AppData\Local\CRE\jopemfhojpebdeollanchfjhpbkcijoi.crx [2013-12-10]
CHR HKLM-x32\...\Chrome\Extension: [jopemfhojpebdeollanchfjhpbkcijoi] - C:\Users\Devil\AppData\Local\CRE\jopemfhojpebdeollanchfjhpbkcijoi.crx [2013-12-10]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-24]
CHR HKLM-x32\...\Chrome\Extension: [ohlfohjgijhjlpidbbnmcdooegafnnnm] - C:\Program Files (x86)\SockshareDownloader\SockshareDownloader10.crx [2014-05-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
R2 LcSvrAdm; D:\ElsaWin\bin\LcSvrAdm.exe [240640 2011-12-06] (Volkswagen AG)
R3 LcSvrAuf; D:\ElsaWin\bin\LcSvrAuf.exe [1321472 2011-12-06] (Volkswagen AG)
R2 LcSvrDba; D:\ElsaWin\bin\LcSvrDba.exe [392704 2011-12-06] (Volkswagen AG)
R2 LcSvrHis; D:\ElsaWin\bin\LcSvrHis.exe [335360 2011-12-06] (Volkswagen AG)
R2 LcSvrPAS; D:\ElsaWin\bin\LcSvrPas.exe [477696 2011-12-06] (Volkswagen AG)
R2 LcSvrSaz; D:\ElsaWin\bin\LcSvrSaz.exe [373248 2011-12-06] (Volkswagen AG)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-10-29] ()
S4 S3DSvc32; C:\Program Files (x86)\iZ3D Driver\Win32\S3DCService.exe [360960 2010-10-25] (iZ3D Inc.)
S4 S3DSvc64; C:\Program Files (x86)\iZ3D Driver\Win64\S3DCService.exe [480768 2010-10-25] (iZ3D Inc.)

==================== Drivers (Whitelisted) ====================

S3 AODDriver4.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [63872 2006-10-29] (Broadcom Corporation.)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-05-29] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-01-03] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140530.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R1 iZ3DInjectionDriver; C:\Program Files (x86)\iZ3D Driver\Win64\S3DInjectionDriver.sys [43704 2010-10-06] ()
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-01] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140531.004\ENG64.SYS [126040 2014-04-29] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140531.004\EX64.SYS [2099288 2014-04-29] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-04-24] (Duplex Secure Ltd.)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-13] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-09-17] (Anchorfree Inc.)
S3 usbaudio; C:\Windows\SysWOW64\drivers\usbaudio.sys [39840 1998-08-21] (Microsoft Corporation)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.)
S3 usbcamcl; C:\Windows\System32\DRIVERS\usbcamcl.sys [53960 2011-01-13] (usb camera)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.)
S3 zonescreen; C:\Windows\System32\DRIVERS\zsport.sys [12024 2010-10-31] (ZoneOS)
S3 btaudio; system32\drivers\btaudio.sys [X]
S3 BTDriver; system32\DRIVERS\btport.sys [X]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X]
S3 btwhid; system32\DRIVERS\btwhid.sys [X]
S3 btwmodem; system32\DRIVERS\btwmodem.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S1 EIO64; system32\DRIVERS\EIO64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-01 23:34 - 2014-06-01 23:34 - 00005126 _____ () C:\Users\Devil\Desktop\JRT.txt
2014-06-01 23:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-01 22:51 - 2014-06-01 23:26 - 00000000 ____D () C:\AdwCleaner
2014-06-01 22:37 - 2014-06-01 22:37 - 00029503 _____ () C:\mbam.txt
2014-06-01 22:18 - 2014-06-01 23:45 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 22:18 - 2014-06-01 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-01 22:18 - 2014-06-01 22:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-01 22:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-01 22:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-01 22:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-31 23:05 - 2014-05-31 23:15 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\MAGIX
2014-05-31 22:59 - 2014-05-31 22:59 - 00000000 ____D () C:\Users\Devil\Documents\MAGIX_MusicEditor
2014-05-31 22:58 - 2014-05-31 23:06 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-31 22:58 - 2014-05-31 23:05 - 00000000 ___RD () C:\Users\Devil\Documents\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-05-31 21:13 - 2014-05-31 21:13 - 00025994 _____ () C:\ComboFix.txt
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\dub_cm_auto\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Administrator\AppData\Local\temp
2014-05-31 21:00 - 2014-06-01 23:41 - 00031682 _____ () C:\Windows\PFRO.log
2014-05-31 20:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-31 20:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-31 20:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-31 20:41 - 2014-05-31 21:13 - 00000000 ____D () C:\Qoobox
2014-05-31 20:41 - 2014-05-31 21:11 - 00000000 ____D () C:\Windows\erdnt
2014-05-31 20:26 - 2014-05-31 20:26 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-30 20:56 - 2014-05-30 20:58 - 00000000 ____D () C:\Users\Devil\kratzer
2014-05-29 23:26 - 2014-05-29 23:26 - 00018473 _____ () C:\Windows\DirectX.log
2014-05-29 16:46 - 2014-05-29 16:54 - 00000000 ____D () C:\Users\Devil\UNI
2014-05-29 15:27 - 2014-05-29 15:27 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-05-28 20:10 - 2014-06-01 23:53 - 00000000 ____D () C:\FRST
2014-05-28 19:59 - 2014-06-01 23:44 - 00011009 _____ () C:\Windows\setupact.log
2014-05-28 19:59 - 2014-05-28 19:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-28 19:58 - 2014-05-28 19:58 - 00000188 _____ () C:\Users\Devil\defogger_reenable
2014-05-27 23:20 - 2014-05-27 23:20 - 00000000 ____D () C:\ProgramData\ATI
2014-05-27 23:17 - 2014-05-27 23:17 - 00061432 _____ () C:\Windows\SysWOW64\CCCInstall_201405272317260220.log
2014-05-27 23:17 - 2014-05-27 23:17 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-05-27 23:14 - 2014-05-27 23:14 - 00000000 ____D () C:\Program Files\AMD
2014-05-27 23:13 - 2014-04-18 04:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 06799688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 00099520 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2014-05-27 23:13 - 2014-04-18 04:39 - 00274656 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-05-27 23:13 - 2014-04-18 04:36 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-05-27 23:13 - 2014-04-18 04:23 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-05-27 23:13 - 2014-04-18 04:22 - 28685824 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-05-27 23:13 - 2014-04-18 04:17 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-27 23:13 - 2014-04-18 04:13 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-05-27 23:13 - 2014-04-18 04:13 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-05-27 23:13 - 2014-04-18 04:12 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-05-27 23:13 - 2014-04-18 04:12 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-05-27 23:13 - 2014-04-18 03:58 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-05-27 23:13 - 2014-04-18 03:51 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00580816 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-05-27 23:13 - 2014-04-18 03:46 - 00580816 _____ () C:\Windows\system32\atiapfxx.blb
2014-05-27 23:13 - 2014-04-18 03:46 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-05-27 23:13 - 2014-04-18 03:46 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-05-27 23:13 - 2014-04-18 03:45 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-05-27 23:13 - 2014-04-18 03:45 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-05-27 23:13 - 2014-04-18 03:42 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-05-27 23:13 - 2014-04-18 03:33 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-05-27 23:13 - 2014-04-18 03:33 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-05-27 23:13 - 2014-04-18 03:30 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-05-27 23:13 - 2014-04-18 03:30 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-05-27 23:13 - 2014-04-18 03:29 - 00586240 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-05-27 23:13 - 2014-04-18 03:29 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-05-27 23:13 - 2014-04-18 03:28 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-05-27 23:13 - 2014-04-18 03:28 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-05-27 23:13 - 2014-04-18 03:21 - 00806912 _____ (AMD) C:\Windows\system32\coinst_14.100.dll
2014-05-27 23:13 - 2014-04-18 03:17 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-05-27 23:13 - 2014-04-18 03:09 - 01177600 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-05-27 23:13 - 2014-04-18 03:07 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-05-27 23:13 - 2014-04-18 03:04 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-05-27 23:13 - 2014-04-10 19:58 - 00082128 _____ () C:\Windows\system32\ativce02.dat
2014-05-27 23:13 - 2014-04-01 00:06 - 00234804 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-05-27 23:13 - 2014-04-01 00:04 - 00233008 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-05-27 23:13 - 2014-02-06 17:45 - 00134192 _____ () C:\Windows\system32\ativce03.dat
2014-05-27 23:13 - 2014-01-16 19:00 - 00273712 _____ () C:\Windows\system32\ativvaxy_vi_nd.dat
2014-05-27 23:13 - 2014-01-16 18:59 - 00275124 _____ () C:\Windows\system32\ativvaxy_vi.dat
2014-05-27 23:13 - 2014-01-16 10:34 - 00723841 _____ () C:\Windows\system32\atiicdxx.dat
2014-05-27 23:13 - 2013-12-19 18:45 - 00094720 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2014-05-27 23:13 - 2013-12-19 18:44 - 00110080 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sapphire TRIXX
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Program Files (x86)\Sapphire TRIXX
2014-05-27 22:45 - 2014-05-27 22:46 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2014-05-27 22:45 - 2014-05-27 22:45 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2014-05-27 21:20 - 2014-05-27 21:20 - 00000007 _____ () C:\Users\Devil\SeatPW.txt
2014-05-25 11:09 - 2014-05-25 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL8FB2.tmp
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL7FE8.tmp
2014-05-16 23:35 - 2014-05-16 23:35 - 00000130 _____ () C:\Users\Devil\Documents\Jochen TT.txt
2014-05-12 21:43 - 2014-05-12 21:43 - 00030208 _____ () C:\devdll.dll
2014-05-10 11:13 - 2014-05-10 11:13 - 00007595 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.cl
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.log
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75AC.tmp
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL756D.tmp
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\Program Files (x86)\Aeria Games
2014-05-05 22:25 - 2014-05-06 18:41 - 00000000 ____D () C:\Users\Devil\AppData\Local\Akamai
2014-05-05 22:25 - 2014-05-05 22:25 - 00000000 ____D () C:\AeriaGames
2014-05-04 00:21 - 2014-05-16 19:57 - 00000603 _____ () C:\Users\Devil\Documents\SeatTeile.txt
2014-05-02 19:58 - 2014-05-02 19:58 - 00000044 _____ () C:\Users\Devil\Documents\RalfKonto1.txt

==================== One Month Modified Files and Folders =======

2056-04-24 22:17 - 2014-03-25 23:02 - 00004096 _____ () C:\Users\Public\Documents\0000319C.LCS
2056-04-24 22:17 - 2014-03-25 23:00 - 00000000 ____D () C:\WDIGIPET
2015-08-01 19:43 - 2014-03-26 00:14 - 00000368 _____ () C:\Users\Devil\Documents\ax_files.xml
2015-08-01 19:43 - 2013-10-27 20:58 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{72B68498-F2A6-46D9-BBFA-FB3ABA89363F}
2014-06-01 23:53 - 2014-05-28 20:10 - 00000000 ____D () C:\FRST
2014-06-01 23:53 - 2013-04-20 18:20 - 00000000 ____D () C:\Users\Devil\AppData\Local\Temp
2014-06-01 23:47 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-01 23:47 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-01 23:46 - 2012-08-26 16:38 - 01826476 _____ () C:\Windows\WindowsUpdate.log
2014-06-01 23:45 - 2014-06-01 22:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 23:44 - 2014-05-28 19:59 - 00011009 _____ () C:\Windows\setupact.log
2014-06-01 23:42 - 2014-04-25 22:24 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-01 23:42 - 2014-02-20 23:05 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-06-01 23:42 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-01 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-06-01 23:41 - 2014-05-31 21:00 - 00031682 _____ () C:\Windows\PFRO.log
2014-06-01 23:37 - 2012-10-20 13:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-01 23:36 - 2014-04-25 22:24 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-01 23:34 - 2014-06-01 23:34 - 00005126 _____ () C:\Users\Devil\Desktop\JRT.txt
2014-06-01 23:26 - 2014-06-01 22:51 - 00000000 ____D () C:\AdwCleaner
2014-06-01 23:24 - 2012-08-26 19:37 - 00000000 ____D () C:\Users\Devil\AppData\Local\CrashDumps
2014-06-01 23:04 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Performance
2014-06-01 22:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\TAPI
2014-06-01 22:37 - 2014-06-01 22:37 - 00029503 _____ () C:\mbam.txt
2014-06-01 22:25 - 2012-08-26 20:07 - 00000000 ___RD () C:\Users\Devil\Desktop\Programme
2014-06-01 22:18 - 2014-06-01 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-01 22:18 - 2014-06-01 22:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-01 22:18 - 2013-12-12 18:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 21:41 - 2012-09-27 15:39 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA.job
2014-06-01 21:33 - 2009-07-14 06:45 - 03142656 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-31 23:24 - 2012-08-26 17:15 - 00158720 _____ () C:\Users\Devil\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-31 23:15 - 2014-05-31 23:05 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\MAGIX
2014-05-31 23:06 - 2014-05-31 22:58 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-31 23:05 - 2014-05-31 22:58 - 00000000 ___RD () C:\Users\Devil\Documents\MAGIX
2014-05-31 22:59 - 2014-05-31 22:59 - 00000000 ____D () C:\Users\Devil\Documents\MAGIX_MusicEditor
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-05-31 22:58 - 2014-04-26 17:53 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-31 22:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-05-31 22:13 - 2013-02-11 00:36 - 00000000 ____D () C:\Users\Devil\Hitfaker
2014-05-31 22:13 - 2012-12-03 19:07 - 00000000 ____D () C:\Users\Devil\Schule
2014-05-31 22:13 - 2012-08-26 16:47 - 00000000 ____D () C:\Users\Devil
2014-05-31 22:12 - 2012-08-30 23:10 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\vlc
2014-05-31 21:13 - 2014-05-31 21:13 - 00025994 _____ () C:\ComboFix.txt
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\dub_cm_auto\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Administrator\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 20:41 - 00000000 ____D () C:\Qoobox
2014-05-31 21:13 - 2014-04-22 21:07 - 00000000 ____D () C:\Users\dub_cm_auto
2014-05-31 21:11 - 2014-05-31 20:41 - 00000000 ____D () C:\Windows\erdnt
2014-05-31 21:01 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-31 20:59 - 2009-07-14 04:34 - 97517568 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-05-31 20:59 - 2009-07-14 04:34 - 21233664 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-05-31 20:59 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-05-31 20:59 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-05-31 20:59 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-05-31 20:26 - 2014-05-31 20:26 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-30 23:26 - 2012-08-26 20:07 - 00000000 ___RD () C:\Users\Devil\Desktop\Games
2014-05-30 21:18 - 2009-08-25 20:32 - 00666448 _____ () C:\Windows\system32\perfh01D.dat
2014-05-30 21:18 - 2009-08-25 20:32 - 00147772 _____ () C:\Windows\system32\perfc01D.dat
2014-05-30 21:18 - 2009-08-25 19:41 - 00728092 _____ () C:\Windows\system32\perfh019.dat
2014-05-30 21:18 - 2009-08-25 19:41 - 00156268 _____ () C:\Windows\system32\perfc019.dat
2014-05-30 21:18 - 2009-08-25 19:33 - 00747838 _____ () C:\Windows\system32\perfh013.dat
2014-05-30 21:18 - 2009-08-25 19:33 - 00158702 _____ () C:\Windows\system32\perfc013.dat
2014-05-30 21:18 - 2009-08-25 19:25 - 00497186 _____ () C:\Windows\system32\perfh014.dat
2014-05-30 21:18 - 2009-08-25 19:25 - 00100410 _____ () C:\Windows\system32\perfc014.dat
2014-05-30 21:18 - 2009-08-25 19:18 - 00744652 _____ () C:\Windows\system32\perfh010.dat
2014-05-30 21:18 - 2009-08-25 19:18 - 00152658 _____ () C:\Windows\system32\perfc010.dat
2014-05-30 21:18 - 2009-08-25 19:09 - 00749858 _____ () C:\Windows\system32\perfh00C.dat
2014-05-30 21:18 - 2009-08-25 19:09 - 00155216 _____ () C:\Windows\system32\perfc00C.dat
2014-05-30 21:18 - 2009-08-25 19:01 - 00484696 _____ () C:\Windows\system32\perfh00B.dat
2014-05-30 21:18 - 2009-08-25 19:01 - 00107284 _____ () C:\Windows\system32\perfc00B.dat
2014-05-30 21:18 - 2009-08-25 18:54 - 00749602 _____ () C:\Windows\system32\perfh00A.dat
2014-05-30 21:18 - 2009-08-25 18:54 - 00164930 _____ () C:\Windows\system32\perfc00A.dat
2014-05-30 21:18 - 2009-08-25 18:46 - 00712886 _____ () C:\Windows\system32\perfh007.dat
2014-05-30 21:18 - 2009-08-25 18:46 - 00155216 _____ () C:\Windows\system32\perfc007.dat
2014-05-30 21:18 - 2009-08-25 18:38 - 00512432 _____ () C:\Windows\system32\perfh006.dat
2014-05-30 21:18 - 2009-08-25 18:38 - 00104394 _____ () C:\Windows\system32\perfc006.dat
2014-05-30 21:18 - 2009-07-14 07:13 - 08781340 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-30 20:58 - 2014-05-30 20:56 - 00000000 ____D () C:\Users\Devil\kratzer
2014-05-30 17:22 - 2013-12-31 18:49 - 00000000 ____D () C:\Windows\system32\Drivers\etc\SK
2014-05-29 23:42 - 2012-12-10 17:26 - 00000000 ____D () C:\ProgramData\Orbit
2014-05-29 23:42 - 2012-08-28 19:04 - 00000000 ____D () C:\Users\Devil\Documents\My Games
2014-05-29 23:27 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-29 23:26 - 2014-05-29 23:26 - 00018473 _____ () C:\Windows\DirectX.log
2014-05-29 19:41 - 2012-09-27 15:39 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core.job
2014-05-29 16:54 - 2014-05-29 16:46 - 00000000 ____D () C:\Users\Devil\UNI
2014-05-29 16:39 - 2012-12-18 20:56 - 00000000 ____D () C:\Users\Devil\.gimp-2.8
2014-05-29 16:27 - 2013-04-25 15:17 - 00000056 _____ () C:\Windows\Acroread.ini
2014-05-29 16:25 - 2013-04-24 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsaWin
2014-05-29 16:25 - 2013-04-24 21:56 - 00000344 _____ () C:\Windows\ODBC.INI
2014-05-29 15:27 - 2014-05-29 15:27 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-05-29 15:27 - 2012-11-15 20:52 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-05-29 15:27 - 2012-08-26 20:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\DAEMON Tools Lite
2014-05-28 20:19 - 2012-09-07 18:37 - 00000000 ____D () C:\Windows\pss
2014-05-28 19:59 - 2014-05-28 19:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-28 19:58 - 2014-05-28 19:58 - 00000188 _____ () C:\Users\Devil\defogger_reenable
2014-05-27 23:38 - 2012-09-12 20:18 - 00524288 ___SH () C:\Users\Devil\Thumbs.db
2014-05-27 23:20 - 2014-05-27 23:20 - 00000000 ____D () C:\ProgramData\ATI
2014-05-27 23:20 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-27 23:17 - 2014-05-27 23:17 - 00061432 _____ () C:\Windows\SysWOW64\CCCInstall_201405272317260220.log
2014-05-27 23:17 - 2014-05-27 23:17 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-05-27 23:17 - 2012-08-26 17:19 - 00000000 ____D () C:\ProgramData\AMD
2014-05-27 23:16 - 2012-08-26 17:17 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-05-27 23:14 - 2014-05-27 23:14 - 00000000 ____D () C:\Program Files\AMD
2014-05-27 23:08 - 2014-04-29 20:00 - 00000000 ____D () C:\Users\Devil\GLUCOFACTS Deluxe
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sapphire TRIXX
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Program Files (x86)\Sapphire TRIXX
2014-05-27 22:48 - 2012-09-07 18:45 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-05-27 22:46 - 2014-05-27 22:45 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2014-05-27 22:45 - 2014-05-27 22:45 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2014-05-27 21:20 - 2014-05-27 21:20 - 00000007 _____ () C:\Users\Devil\SeatPW.txt
2014-05-27 17:52 - 2012-08-26 22:39 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-05-27 13:31 - 2013-07-31 19:06 - 00000000 ___RD () C:\Users\Devil\Desktop\Software
2014-05-27 01:29 - 2014-02-15 21:37 - 00000000 ____D () C:\Program Files (x86)\Bridge Building Game
2014-05-25 11:09 - 2014-05-25 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL8FB2.tmp
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL7FE8.tmp
2014-05-24 23:24 - 2014-03-29 19:59 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-24 23:24 - 2013-11-14 20:34 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-05-24 23:24 - 2013-04-23 18:54 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-05-23 22:16 - 2012-11-07 20:16 - 05581312 ___SH () C:\Users\Devil\Desktop\Thumbs.db
2014-05-23 17:13 - 2013-07-15 19:39 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-23 17:13 - 2012-08-30 22:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-23 17:12 - 2012-08-30 22:06 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\DVDVideoSoft
2014-05-16 23:35 - 2014-05-16 23:35 - 00000130 _____ () C:\Users\Devil\Documents\Jochen TT.txt
2014-05-16 19:57 - 2014-05-04 00:21 - 00000603 _____ () C:\Users\Devil\Documents\SeatTeile.txt
2014-05-12 21:43 - 2014-05-12 21:43 - 00030208 _____ () C:\devdll.dll
2014-05-12 07:26 - 2014-06-01 22:18 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-01 22:18 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-01 22:18 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-10 11:13 - 2014-05-10 11:13 - 00007595 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.cl
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.log
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75AC.tmp
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL756D.tmp
2014-05-08 19:36 - 2012-09-27 15:39 - 00004094 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA
2014-05-08 19:36 - 2012-09-27 15:39 - 00003698 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core
2014-05-06 18:41 - 2014-05-05 22:25 - 00000000 ____D () C:\Users\Devil\AppData\Local\Akamai
2014-05-06 18:34 - 2014-04-28 22:16 - 00000000 ____D () C:\Keule306
2014-05-06 17:31 - 2014-04-25 22:24 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 17:31 - 2014-04-25 22:24 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-05 22:46 - 2013-01-21 18:32 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\Program Files (x86)\Aeria Games
2014-05-05 22:25 - 2014-05-05 22:25 - 00000000 ____D () C:\AeriaGames
2014-05-02 19:58 - 2014-05-02 19:58 - 00000044 _____ () C:\Users\Devil\Documents\RalfKonto1.txt

Files to move or delete:
====================
C:\Users\Devil\AppData\Roaming\CamLayout.ini
C:\Users\Devil\AppData\Roaming\CamShapes.ini
C:\Users\Devil\scroll_app_smart_4.00.33.exe
C:\Users\Devil\setpoint6.61.15_64.exe
C:\Users\Devil\WhiteCap_505_Platinum.exe
C:\Users\Devil\AppData\Roaming\Origin\update.vbe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-24 22:22

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Alt 02.06.2014, 20:02   #10
schrauber
/// the machine
/// TB-Ausbilder
 

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



AdwCleaner auch löschen lassen!



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 03.06.2014, 17:17   #11
SilentDeath
 
GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Hallo,

ich habe es versucht den "AdwCleaner" löschen zu lassen. Nur leider ist das Programm jedes Mal beim löschen abgestürzt. Es hat etwas gedauert bis ich festgestellt habe das ich meinen Browser schließen muss, wenn ich "AdwCleaner" arbeiten lasse.

Ich habe das Programm noch einmal ausgeführt und löschen lassen und folgenden LOG erhalten:

AdwCleaner:

Code:
ATTFilter
# AdwCleaner v3.211 - Bericht erstellt am 02/06/2014 um 21:41:01
# Aktualisiert 26/05/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Devil - NEO
# Gestartet von : D:\Downloads\adwcleaner_3.211 (1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v21.0 (de)

[ Datei : C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [23783 octets] - [01/06/2014 23:18:04]
AdwCleaner[R1].txt - [1057 octets] - [01/06/2014 23:24:48]
AdwCleaner[R2].txt - [1118 octets] - [01/06/2014 23:26:14]
AdwCleaner[R3].txt - [1178 octets] - [02/06/2014 21:37:54]
AdwCleaner[R4].txt - [1270 octets] - [02/06/2014 21:40:02]
AdwCleaner[S0].txt - [22622 octets] - [01/06/2014 23:24:20]
AdwCleaner[S1].txt - [1240 octets] - [02/06/2014 21:38:41]
AdwCleaner[S2].txt - [1191 octets] - [02/06/2014 21:41:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1251 octets] ##########
         
Danach habe ich wie beschrieben das Programm "ESET" ausgeführt und habe mich Schritt für Schritt genau an die Anleitung gehalten.
(Der Scan hat bei mir sagenhafte 12 Stunden gedauert)
Am Ende habe ich wie beschrieben den Pfad geöffnet und die LOG-Datei gesucht nur leider war nichts vorhanden. (Ich habe ein Bild des ESET-Ordners in den Anhang geladen)
Ich hatte zum Glück vorher auf "Als .txt speichern" geklickt und folgendes erhalten:

ESET:

Code:
ATTFilter
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir	Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\ProgramData\apn\APN-Stub\W3IV6-G\APNIC.7z.vir	Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung
C:\AdwCleaner\Quarantine\C\ProgramData\apn\APN-Stub\W3IV6-G\APNIC.dll.vir	Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung
C:\AdwCleaner\Quarantine\C\Users\Devil\AppData\Local\Conduit\Chrome\CT3311336\CHUninstaller.exe.vir	Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Users\Devil\AppData\Local\NativeMessaging\CT3311336\1_0_0_6\TBMessagingHost.exe.vir	Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Users\Devil\AppData\Roaming\eIntaller\ECFEAA45192349809BEBFAC7CA8D8DDF\eXQ.exe.vir	Variante von Win32/ELEX.D evtl. unerwünschte Anwendung
C:\Program Files (x86)\Cheat Engine 6.2\cheatengine-i386.exe	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
C:\Program Files (x86)\Cheat Engine 6.2\standalonephase1.dat	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
C:\Program Files (x86)\Cheat Engine 6.3\cheatengine-i386.exe	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
C:\Program Files (x86)\Cheat Engine 6.3\standalonephase1.dat	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
C:\Program Files (x86)\Common Files\Adobe\Installers\faf656ef605427ee2f42989c3ad31b8\setup.exe	MSIL/TrojanClicker.Agent.NBH Trojaner
C:\Program Files (x86)\LucasArts\Republic Heroes\RepublicHeroesLauncher.exe	Win32/HackTool.Crack.BC potenziell unsichere Anwendung
C:\Users\Devil\AppData\Local\CRE\jopemfhojpebdeollanchfjhpbkcijoi.crx	Variante von Win32/Toolbar.Conduit.AA evtl. unerwünschte Anwendung
C:\Users\Devil\AppData\Local\Temp\tmpFA19.exe	Win32/OpenCandy potenziell unsichere Anwendung
C:\Users\Devil\AppData\Roaming\Origin\update.vbe	VBS/CoinMiner.AD Trojaner
C:\Users\Devil\Desktop\Desktop\Alcohol\Alcohol 120% 2.0.2 Build 5830 Retail\Alcohol120_retail_2.0.2.5830.exe	Win32/SmartFileAdvisor.B evtl. unerwünschte Anwendung
C:\Users\Devil\Desktop\Desktop\NFSWhack\Neuer Ordner6\CE Installer\CheatEngine63.exe	Win32/OpenCandy potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\BoneTown v1.1.1 + 14 Trainer.exe	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\Ex_NFS Underground 1.4.exe	Variante von Win32/GameHack.HH potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\ins-cs16.exe	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\Sniper-Ghost Warrior 2 +9TrainerByAfterMan.EXE	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\Star Wars - The Force Unleashed 2 (1.0.0.0) + 5 Trainer.exe	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\Star Wars The Force Unleashed 2 Trainer.EXE	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\Yu-Gi-Oh! Power of Chaos - Kaiba the Revenge Trainer +5.exe	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\Yu-Gi-Oh! Power of Chaos Joey the Passion Trainer +5.exe	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\LaNanov11.1\KMSnano.exe	Variante von MSIL/HackTool.IdleKMS.A potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\LaNanov11.1\KMSnano\KMSELDI.exe	Variante von MSIL/HackTool.IdleKMS.A potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\lotr\The Battle for Middle-earth  II.exe	Variante von Win32/GameHack.HH potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\lotr\The Lord of the Rings, The Rise of the Witch-king.exe	Variante von Win32/GameHack.HH potenziell unsichere Anwendung
C:\Users\Devil\Desktop\Software\Motogp\trainer.exe	Variante von Win32/GameHack.G potenziell unsichere Anwendung
C:\Users\Devil\Downloads\Neuer Ordner (3)\Downloads\avira_free_antivirus_de_13.0.0.2688.exe	Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung
D:\Dateien\Eigene Dateien\AppData\Local\Babylon\Setup\Setup.exe	Variante von Win32/Toolbar.Babylon.H evtl. unerwünschte Anwendung
D:\Dateien\Eigene Dateien\AppData\Local\Conduit\CT1060933\FreecorderAutoUpdateHelper.exe	Win32/Toolbar.Conduit.Q evtl. unerwünschte Anwendung
D:\Dateien\Eigene Dateien\AppData\LocalLow\Freecorder\ldrtbFree.dll	Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung
D:\Dateien\Eigene Dateien\AppData\LocalLow\Freecorder\tbFree.dll	Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung
D:\Dateien\Eigene Dateien\AppData\LocalLow\Freecorder\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll	Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung
D:\Dateien\Eigene Dateien 2\Devil\AppData\Roaming\OpenCandy\OpenCandy_06D251393403426382098FF0599296F5\LatestDLMgr.exe	Variante von Win32/OpenCandy.A potenziell unsichere Anwendung
D:\Downloads\7ZipSetup-d56hlzZ.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\7ZipSetup-fFRA0fH.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\7zip_RocketFuelInstaller.exe	Variante von Win32/Verti.B evtl. unerwünschte Anwendung
D:\Downloads\854SKIDROWCRACK.rar	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Downloads\984189564.part11.rar.exe	Win32/InstalleRex.J evtl. unerwünschte Anwendung
D:\Downloads\Babylon10_setup.exe	Variante von Win32/Toolbar.Babylon.F evtl. unerwünschte Anwendung
D:\Downloads\blur-ch.zip	Variante von Win32/GameHack.F potenziell unsichere Anwendung
D:\Downloads\cavefrenzy_d3421513.exe	Variante von Win32/InstallIQ.A evtl. unerwünschte Anwendung
D:\Downloads\ccsetup320.exe	Win32/Bundled.Toolbar.Google.E potenziell unsichere Anwendung
D:\Downloads\ccsetup324 (1).exe	Win32/Bundled.Toolbar.Google.E potenziell unsichere Anwendung
D:\Downloads\ccsetup324.exe	Win32/Bundled.Toolbar.Google.E potenziell unsichere Anwendung
D:\Downloads\ccsetup325.exe	Win32/Bundled.Toolbar.Google.E potenziell unsichere Anwendung
D:\Downloads\ccsetup409.exe	Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung
D:\Downloads\cdbxp_setup_4.3.8.2568.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\Cheat Engine - CHIP-Downloader.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\CheatEngine.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\CheatEngine62 (1).exe	Variante von Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\CheatEngine62.exe	Variante von Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\COMPUTER_BILD-Download-Manager_fuer_FreeAVIVideoConverter.exe	Variante von Win32/InstallCore.JW evtl. unerwünschte Anwendung
D:\Downloads\CoolPic_mg_33513003 (1).exe	Variante von Win32/Toolbar.BitCocktail.B evtl. unerwünschte Anwendung
D:\Downloads\CoolPic_mg_33513003.exe	Variante von Win32/Toolbar.BitCocktail.B evtl. unerwünschte Anwendung
D:\Downloads\CoolPic_mg_35446503.exe	Variante von Win32/Toolbar.BitCocktail.B evtl. unerwünschte Anwendung
D:\Downloads\CrystalDiskInfo6_0_4-en.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\Darksiders_Wrath_Of_War_Darkorbit.exe	Win32/Adware.1ClickDownload.G Anwendung
D:\Downloads\DE_FreePDFperfect.exe	Variante von MSIL/DownloadGuide.A evtl. unerwünschte Anwendung
D:\Downloads\DiaShowYouTube7711Setup.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\DivX_Reloaded_4.7.exe	Variante von Win32/LoadTubes.A evtl. unerwünschte Anwendung
D:\Downloads\Doppelkopf_Xxl_3.1.0.3029_downloader_133 (1).exe	Variante von Win32/YourFileDownloader evtl. unerwünschte Anwendung
D:\Downloads\doppelkopf_xxl_3.1.0.3029_downloader_133.exe	Variante von Win32/YourFileDownloader evtl. unerwünschte Anwendung
D:\Downloads\DTLite4461-0327.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\DTLite4471-0333.exe	Win32/DownWare.L evtl. unerwünschte Anwendung
D:\Downloads\DVDStyler-2.2-win32.exe	Win32/DownWare.W evtl. unerwünschte Anwendung
D:\Downloads\DVDStyler-2.6.1-win32.exe	Win32/Somoto.E evtl. unerwünschte Anwendung
D:\Downloads\ENSLAVED Odyssey to the West Premium Edition V1.0 Trainer +3 MrAntiFun.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\etypesetup (1).exe	Variante von Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\etypesetup (2).exe	Variante von Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\etypesetup.exe	Variante von Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\exe	Win32/InstalleRex.I evtl. unerwünschte Anwendung
D:\Downloads\FAR.CRY.3.PLUS4TRN.GIR489.ZIP	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\finaltorrent_2.exe	Variante von Win32/InstallIQ.A evtl. unerwünschte Anwendung
D:\Downloads\FlashPlayer_11.3.dl.exe	Win32/AdWare.Lollipop.S Anwendung
D:\Downloads\flvmplayer (1).exe	MSIL/Solimba.H evtl. unerwünschte Anwendung
D:\Downloads\flvmplayer.exe	MSIL/Solimba.H evtl. unerwünschte Anwendung
D:\Downloads\FLVPlayerSetup-5oSUJ7H.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\FLVPlayerSetup-6XS99hT.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\Free3GPVideoConverter_5024430.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeAudioConverterSetup-9AxX4K7.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\FreeAVIVideoConverter.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\freefileviewer_2.exe	Variante von Win32/InstallIQ.A evtl. unerwünschte Anwendung
D:\Downloads\FreemakeVideoConverterSetup.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreemakeVideoDownloaderSetup.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeStudio.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeVideoDub2.0.22.925.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeVideoToFlashConverter5.0.32.1230.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeVideoToMP3Converter_5.0.17.825.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeDownload (1).exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeYouTubeDownload-3.2.20.1230.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeYouTubeDownload325.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeYouTubeDownload_3.1.34.825.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeDownload_3.1.42.1212.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeDownload_3.2.1.320 (1).exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeDownload_3.2.1.320.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeDownload_3.2.2.430.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeYouTubeToMP3Converter (1).exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeYouTubeToMP3Converter (2).exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeYouTubeToMP3Converter (3).exe	Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeToMP3Converter (4).exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\FreeYouTubetoMP3Converter.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeToMP3Converter_3.11.29.825.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeToMP3Converter_3.12.1.320.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Downloads\FreeYouTubeToMP3Converter_3.12.2.430.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\frostwire-5.3.4.windows.exe	Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung
D:\Downloads\FtlEs BFME2 Plus 3 Trn.zip	Variante von Win32/GameHack.HH potenziell unsichere Anwendung
D:\Downloads\gghz-ascrd3v1.01trn.zip	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\gghz-fc3dx11v1.01trn.zip	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\gghz-flctr.rar	Variante von Win32/GameHack.HH potenziell unsichere Anwendung
D:\Downloads\gghz-koarv1.0.0.2trn (1).rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\gghz-koarv1.0.0.2trn.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\GoPlayer.exe	Variante von Win32/ELEX.C evtl. unerwünschte Anwendung
D:\Downloads\HijackThis - CHIP-Installer.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\Hitman Absolution v1.0 plus 5 Trainer - CH.zip	möglicherweise Variante von Win32/GameHack.BE potenziell unsichere Anwendung
D:\Downloads\Ichi_The_Killer_German_2001_DVDRip_LD_xVCD.exe	Win32/Adware.1ClickDownload.G Anwendung
D:\Downloads\iLividSetup (1).exe	Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung
D:\Downloads\iLividSetup (2).exe	Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung
D:\Downloads\ins-cs16.zip	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
D:\Downloads\installtomsdokodemo-Downloader.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\LaNanov11.1.rar	Variante von MSIL/HackTool.IdleKMS.A potenziell unsichere Anwendung
D:\Downloads\Leiterspiel-Downloader.exe	Variante von MSIL/DownloadGuide.D evtl. unerwünschte Anwendung
D:\Downloads\maxp3.7z	Variante von Win32/Packed.VMProtect.AAH Trojaner
D:\Downloads\MaxPayneTrn+4.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\megatorrents_org_p4874954.exe	Variante von Win32/LoadMoney.D evtl. unerwünschte Anwendung
D:\Downloads\MotoGP_13_TRAINER.rar_downloader_de_99280.exe	Variante von Win32/ExpressFiles.B evtl. unerwünschte Anwendung
D:\Downloads\mscomctlocxupdater.exe	Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung
D:\Downloads\MSI Afterburner - CHIP-Installer.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\nfsw_trainer_by_keule306_ce.zip	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\No23Recorder.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\OnlineWeatherSetup-2mIV1hG.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\OnlineWeatherSetup-535UsJs.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\OnlineWeatherSetup-9DaDcF8.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\OpenOffice - CHIP-Downloader.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\PacmanSDM.exe	Variante von Win32/SweetIM.I evtl. unerwünschte Anwendung
D:\Downloads\Prince_of_Persia_The_Forgotten_Sands_Trainer.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\PROMOWatchDogs_All_Versions_TRN-dEVIATED.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\PS3 Emulator 1.9.4.rar	Variante von MSIL/Hoax.Emulator.A Anwendung
D:\Downloads\PSeMu3 (1).zip	Variante von MSIL/Hoax.Agent.NAE Anwendung
D:\Downloads\PSeMu3.zip	Variante von MSIL/Hoax.Agent.NAE Anwendung
D:\Downloads\rld-baaroru3.7z	Variante von Win32/HackTool.Crack.BL potenziell unsichere Anwendung
D:\Downloads\rld-rlegends.7z	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Downloads\rld-saints4.7z	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Downloads\Serial_Box_03-2012_MACOSX_downloader_407.exe	Variante von Win32/YourFileDownloader evtl. unerwünschte Anwendung
D:\Downloads\setup (1).exe	Win32/InstalleRex.E evtl. unerwünschte Anwendung
D:\Downloads\Setup74_FreeFlvConverter.exe	Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung
D:\Downloads\setup_codec_3dx.exe	Variante von Win32/LoadTubes.A evtl. unerwünschte Anwendung
D:\Downloads\Sido-Beste-2CD-DE-2012-VOiCE_downloader_98839.exe	Variante von Win32/YourFileDownloader.B evtl. unerwünschte Anwendung
D:\Downloads\Snes9x - CHIP-Downloader.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\Sniper-GhostWarrior2+9TrainerByAfterMan.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\SoftonicDownloader_fuer_asus-smart-doctor.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung
D:\Downloads\SoftonicDownloader_fuer_monopoly-3.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung
D:\Downloads\Star Wars The Force Unleashed v1.0 Trainer (1).rar	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
D:\Downloads\Star Wars The Force Unleashed v1.0 Trainer.rar	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
D:\Downloads\Star_Wars_-_The_Force_Unleashed_2_(1.0.0.0)_+_5_Trainer (1).rar	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
D:\Downloads\Star_Wars_-_The_Force_Unleashed_2_(1.0.0.0)_+_5_Trainer.rar	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
D:\Downloads\Star_Wars_The_Force_Unleashed_2_Trainer (1).rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\Star_Wars_The_Force_Unleashed_2_Trainer.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\SumatraPDFSetup-3D2okuZ.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\SumatraPDFSetup-fVzmfcq.exe	Win32/Somoto.A evtl. unerwünschte Anwendung
D:\Downloads\SweetIMSetup (1).exe	Variante von Win32/SweetIM.I evtl. unerwünschte Anwendung
D:\Downloads\SweetIMSetup (2).exe	Variante von Win32/SweetIM.I evtl. unerwünschte Anwendung
D:\Downloads\SweetIMSetup.exe	Variante von Win32/SweetIM.I evtl. unerwünschte Anwendung
D:\Downloads\SWTFU2 trainer v1.0-1.1.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\tb_PrizeRebelBar.exe	Win32/Toolbar.Conduit.M evtl. unerwünschte Anwendung
D:\Downloads\travelguide_1.0_de-DE (1).exe	Variante von MSIL/DownloadGuide.F evtl. unerwünschte Anwendung
D:\Downloads\travelguide_1.0_de-DE.exe	Variante von MSIL/DownloadGuide.F evtl. unerwünschte Anwendung
D:\Downloads\u1210.exe	Win32/UltraReach potenziell unsichere Anwendung
D:\Downloads\Utorrent.exe	MSIL/Solimba evtl. unerwünschte Anwendung
D:\Downloads\VirtualDub 32 Bit - CHIP-Downloader.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\VLC-Media-Player-fr-Android-Setup.exe	Variante von Win32/WinloadSDA.D evtl. unerwünschte Anwendung
D:\Downloads\vyz7ab.rar	Win32/HackTool.WinActivator.I potenziell unsichere Anwendung
D:\Downloads\Watch_Dogs v1.0 ~ Update 1 Plus 20 Trainer.rar	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Downloads\WhiteSmokeInstaller__1302_i1306197_il657.exe	Variante von Win32/Amonetize.B evtl. unerwünschte Anwendung
D:\Downloads\WhiteSmokeInstaller__714_il548.exe	Variante von Win32/Amonetize.B evtl. unerwünschte Anwendung
D:\Downloads\whitesmoke_2012u.exe	möglicherweise Variante von Win32/WhiteSmoke evtl. unerwünschte Anwendung
D:\Downloads\WhiteSmoke_Enrichment_Full.exe	möglicherweise Variante von Win32/WhiteSmoke evtl. unerwünschte Anwendung
D:\Downloads\Windows Virtual PC - CHIP-Installer.exe	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
D:\Downloads\xpadder_gamepad_profiler_Setup.exe	Win32/Toolbar.Babylon evtl. unerwünschte Anwendung
D:\Downloads\yosetup.exe	Win32/OpenCandy potenziell unsichere Anwendung
D:\Downloads\YourFileDownloader.exe	Variante von Win32/YourFileDownloader evtl. unerwünschte Anwendung
D:\Downloads\YourFile_downloader.exe	möglicherweise Variante von Win32/YourFileDownloader.A evtl. unerwünschte Anwendung
D:\Downloads\youtube-dlm_1.0_de-DE.exe	Variante von MSIL/DownloadGuide.F evtl. unerwünschte Anwendung
D:\Downloads\Yu-Gi-Oh! Power of Chaos - Joey the Passion Trainer +5.rar	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
D:\Downloads\zaSetupWeb_110_000_018.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
D:\Games\Saints Row IV\steam_api.dll	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Games\Saints Row IV\uninstall.exe	Variante von Win32/Revenants.A potenziell unsichere Anwendung
D:\Program Files (x86)\Activision\Blur(TM)\Blur Trainer.exe	Variante von Win32/GameHack.F potenziell unsichere Anwendung
D:\Program Files (x86)\Assassins Creed III\ac3sptrainer.EXE	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Program Files (x86)\Batman Arkham Origins\SinglePlayer\Binaries\Win32\steam_api.dll	Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Program Files (x86)\Batman Arkham Origins\SinglePlayer\Binaries\Win32\Sk\steam_api.dll	Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Program Files (x86)\Bethesda Softworks\Dishonored\Binaries\Win32\steam_api.dll	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Program Files (x86)\EA\Bulletstorm\Binaries\Win32\xlive.dll	Variante von Win32/Packed.VMProtect.AAD Trojaner
D:\Program Files (x86)\ENSLAVED? Odyssey to the West? Premium Edition\NSLAVED V1.0 Trainer +3 MrAntiFun.exe	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Program Files (x86)\ENSLAVED? Odyssey to the West? Premium Edition\Binaries\Win32\NSLAVED V1.0 Trainer +3 MrAntiFun.exe	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Program Files (x86)\GRID 2\steam_api.dll	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Program Files (x86)\Hitman Absolution\HMAtrainer.EXE	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
D:\Program Files (x86)\Microsoft Games\Fable - The Lost Chapters\gghz-flctr.exe	Variante von Win32/GameHack.HH potenziell unsichere Anwendung
D:\Program Files (x86)\MotoGP2\trainer.exe	Variante von Win32/GameHack.G potenziell unsichere Anwendung
D:\Program Files (x86)\Namco Bandai Games\Ridge Racer Unbounded Bundle\steam_api.dll	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Program Files (x86)\Need For Speed Rivals\nfs14.3dm.dll	Variante von Win32/Packed.VMProtect.ABD Trojaner
D:\Program Files (x86)\Need For Speed Rivals\NFS14.exe	Variante von Win32/Packed.VMProtect.ABD Trojaner
D:\Program Files (x86)\Need For Speed Rivals\nfs14_x86.3dm.dll	Win32/HackTool.Crack.BV potenziell unsichere Anwendung
D:\Program Files (x86)\Need For Speed Rivals\NFS14_x86.exe	Variante von Win32/Packed.VMProtect.ABD Trojaner
D:\Program Files (x86)\Rayman Legends\steam_api.dll	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Program Files (x86)\Saints Row IV Commander In Chief Edition-FULL UNLOCKED\Saints Row IV\steam_api.dll	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
D:\Program Files (x86)\The Walking Dead\steam_api.dll	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
E:\Electronic Arts\Crytek\Crysis 2\bin32\Crysis 2 - 32 Bit - Trainer +5.exe	Variante von Win32/HackTool.CheatEngine.AB potenziell unsichere Anwendung
E:\Grand Theft Auto IV\LaunchGTAIV.exe	Win32/HackTool.Crack.BC potenziell unsichere Anwendung
E:\Prince of Persia The Forgotten Sands\Prince_Of_Persia_The_Forgotten_Sands_Trainer.EXE	Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Batman_Arkham_Origins-GameWorks\NoDVD\steam_api.dll	Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Bulletstorm\Bulletstorm-FLT\flt-bull.iso	Variante von Win32/Packed.VMProtect.AAD Trojaner
K:\Images\Games\Abgehackt\Call of Duty Ghosts\rld-caofdugh.iso	Variante von Win32/HackTool.Crack.BL potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Dishorned\ppt-diho.iso	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Flatout 3\ppt-f3cd.iso	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\GRID.2_RELOADED\rld-grid2.iso	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Metal Gear Rising\rld-megerire.iso	Variante von Win32/HackTool.Crack.BL potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Need For Speed Rivals[BlackBox]\BB-NFSR.iso	Variante von Win32/CoinMiner.HY Trojaner
K:\Images\Games\Abgehackt\NeedForSpeedCollectorsEdition\18) Need For Speed - Hot Pursuit\rld-nshp.iso	Variante von Win32/Packed.VMProtect.AAD Trojaner
K:\Images\Games\Abgehackt\Rayman Legends\rld-rlegends.iso	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Ridge Racer\ppt-rrun.iso	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Star Wars The Clone Wars Republic Heroes [MULTI5][PCDVD][WwW.GamesTorrents.CoM]\rzr-cwrh.iso	Win32/HackTool.Crack.BC potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\Star.Trek.GERMAN-0x0007\de-startrekvg.iso	Variante von Win32/HackTool.Crack.BQ potenziell unsichere Anwendung
K:\Images\Games\Abgehackt\X Rebirth\de-xrebirth.iso	Variante von Win32/HackTool.Crack.BL potenziell unsichere Anwendung
K:\Images\Games\Noch offen\Castlevania\rld-cvanialos2.iso	Variante von Win32/HackTool.Crack.BL potenziell unsichere Anwendung
K:\Images\Games\Noch offen\Dark Souls 2\rld-daso2.iso	Variante von Win32/HackTool.Crack.BL potenziell unsichere Anwendung
K:\Images\Games\Noch offen\DevilMayCry\ppt-dmcc.iso	Variante von Win32/HackTool.Crack.BL potenziell unsichere Anwendung
K:\Images\Games\Noch offen\SimCity\rzr-smci.iso	Variante von Win32/Packed.VMProtect.ABD Trojaner
K:\Images\Games\Noch offen\Thief\de-thief.iso	Variante von Win32/HackTool.Crack.BL potenziell unsichere Anwendung
K:\Images\Software\Music.Maker.2014.v20.0.4.49.incl.Contentpacks-iND\Patch.7z	Win32/Ramnit.H Virus
K:\Images\Software\Music.Maker.2014.v20.0.4.49.incl.Contentpacks-iND\Setup\Music_Maker_2014_Premium_DLV_en-II_130802_19-26_20_0_2_35.exe	Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung
K:\Images\Software\Win7 64Bit\Windows_7_Ultimate_64bit_Deutsch.iso	Win32/HackTool.WinActivator.I potenziell unsichere Anwendung
K:\JLoads\FL Studio Producer Edition 11.0.1.rar	Variante von Win32/HackTool.Patcher.AD potenziell unsichere Anwendung
K:\JLoads\FL Studio Producer Edition 11.0.1\ILFLPE.11.0.1.SB\flstudio_11.exe	Win32/OpenCandy potenziell unsichere Anwendung
K:\JLoads\FL Studio Producer Edition 11.0.1\ILFLPE.11.0.1.SB\patch-MPT\FL.STUDIO.Producer.Edition.11.0.1.(Signature.Bundle).Patch-MPT.zip	Variante von Win32/HackTool.Patcher.AD potenziell unsichere Anwendung
K:\Laptop\Dateien\Eigene Dateien\Star Wars Jedi Knight Jedi Academy\patch.exe	Variante von Win32/HackTool.Patcher.C potenziell unsichere Anwendung
K:\Laptop\Dateien\Eigene Dateien\Star Wars Jedi Knight Jedi Academy\GameData\patch.exe	Variante von Win32/HackTool.Patcher.C potenziell unsichere Anwendung
K:\Laptop\Dateien\Eigene Dateien2\Cheats\HdR Die Rückkehr des Königs\Trainer.rar	Variante von Win32/GameHack.S potenziell unsichere Anwendung
K:\Laptop\Dateien\Eigene Dateien2\Cheats\Juiced Ulties\Juicedmoney.rar	Variante von Win32/GameHack.EW potenziell unsichere Anwendung
K:\Laptop\Dateien\Eigene Dateien2\Cheats\Prince of Persia Ulties\pzdpoptt.rar	Variante von Win32/GameHack.S potenziell unsichere Anwendung
K:\Laptop\Dateien\Eigene Dateien2\Diablo 2 ulties\D2_LoD_109d_Editor.rar	Variante von Win32/GameHack.EW potenziell unsichere Anwendung
K:\Laptop\Dateien\EigeneDateien\Downloads\avira_free_antivirus_de-13.0.0.3185.exe	Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung
K:\Laptop\Dateien\EigeneDateien\Downloads\ccsetup325.exe	Win32/Bundled.Toolbar.Google.E potenziell unsichere Anwendung
K:\Laptop\Dateien\EigeneDateien\Downloads\DTLite4454-0314.exe	Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung
K:\Laptop\Dateien\EigeneDateien\Downloads\FreeYouTubeDownload_3.1.37.918.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung
K:\Laptop\Dateien\EigeneDateien\Downloads\SoftonicDownloader_fuer_monopolie.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung
K:\Laptop\Dateien\EigeneDateien\Downloads\SoftonicDownloader_fuer_monopoly-3.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung
K:\Program Files (x86)\MAGIX\Music Maker 2014 Premium\magixprodukte-.universalpatch-für die Start.exe .exe	Variante von Win32/HackTool.Patcher.AD potenziell unsichere Anwendung
         
Nun glaube ich das ich an irgendeiner Stelle einen Fehler gemacht habe und ich fände es ziemlich schlecht wenn ich diesen Scan wiederholen müsste. Aber wenn es nicht anders geht muss ich wohl in den sauren Apfel beißen.

Danach habe ich das Programm "SecurityCheck" ausgeführt und folgendes erhalten:

SecurityCheck:

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.83  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
``````````````Antivirus/Firewall Check:`````````````` 
Norton Internet Security   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Setup - Call of Duty Ghosts (c) Activision ... 
 Java(TM) 6 Update 18  
 Java 7 Update 11  
 Java version out of Date! 
 Adobe Flash Player 10 Flash Player out of Date! 
  Adobe Flash Player 12.0.0.77 Flash Player out of Date!  
 Adobe Reader XI  
 Mozilla Firefox 21.0 Firefox out of Date!  
 Google Chrome 34.0.1847.137  
 Google Chrome 35.0.1916.114  
 Google Chrome Google Icon.ico..  
 Google Chrome Google Icon.ifx..  
 Google Chrome icon.png..  
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Und als letztes habe ich wieder das Programm "Farbar's Recovery Scan Tool" ausgeführt und folgendes erhalten:





FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Devil (administrator) on NEO on 03-06-2014 16:47:47
Running from C:\Users\Devil\Desktop\Desktop\Trojaner-Board
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrAdm.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrDba.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrHis.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrPas.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrSaz.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbar.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\SLSTaskbar64.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrAuf.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Devil\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2770432 2010-02-10] (VIA)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1033395003-4163772576-2144622384-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UltraMon.lnk
ShortcutTarget: UltraMon.lnk -> C:\Windows\Installer\{ED7FE81C-378C-411D-B5B4-509B978BA204}\IcoUltraMon.ico ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll No File
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {A1DABF90-F83C-4a5a-8000-514E06654FA7} URL = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5369970905&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms}
SearchScopes: HKCU - {C3EA6126-6E4F-4d88-978E-291625E6B2A1} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - D:\ElsaWin\bin\wiprot.dll (TODO: <Company name>)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Devil\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Devil\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\admin@proxy-listen.de.xpi [2013-02-12]
FF Extension: Adblock Plus - C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\c5mp85gy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-19]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-14]
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: https://www.google.de/
CHR StartupUrls: "https://www.google.de/"
CHR Plugin: (Shockwave Flash) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Devil\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U11) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (phonostar Detector) - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
CHR Plugin: (Google Update) - C:\Users\Devil\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Extension: (ProxFlow) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-05-30]
CHR Extension: (Adblock Plus) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-04-28]
CHR Extension: (AdBlock) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-04-28]
CHR Extension: (Google Wallet) - C:\Users\Devil\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR HKCU\...\Chrome\Extension: [jopemfhojpebdeollanchfjhpbkcijoi] - C:\Users\Devil\AppData\Local\CRE\jopemfhojpebdeollanchfjhpbkcijoi.crx [2013-12-10]
CHR HKLM-x32\...\Chrome\Extension: [jopemfhojpebdeollanchfjhpbkcijoi] - C:\Users\Devil\AppData\Local\CRE\jopemfhojpebdeollanchfjhpbkcijoi.crx [2013-12-10]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-24]
CHR HKLM-x32\...\Chrome\Extension: [ohlfohjgijhjlpidbbnmcdooegafnnnm] - C:\Program Files (x86)\SockshareDownloader\SockshareDownloader10.crx [2014-05-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
R2 LcSvrAdm; D:\ElsaWin\bin\LcSvrAdm.exe [240640 2011-12-06] (Volkswagen AG)
R3 LcSvrAuf; D:\ElsaWin\bin\LcSvrAuf.exe [1321472 2011-12-06] (Volkswagen AG)
R2 LcSvrDba; D:\ElsaWin\bin\LcSvrDba.exe [392704 2011-12-06] (Volkswagen AG)
R2 LcSvrHis; D:\ElsaWin\bin\LcSvrHis.exe [335360 2011-12-06] (Volkswagen AG)
R2 LcSvrPAS; D:\ElsaWin\bin\LcSvrPas.exe [477696 2011-12-06] (Volkswagen AG)
R2 LcSvrSaz; D:\ElsaWin\bin\LcSvrSaz.exe [373248 2011-12-06] (Volkswagen AG)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-10-29] ()
S4 S3DSvc32; C:\Program Files (x86)\iZ3D Driver\Win32\S3DCService.exe [360960 2010-10-25] (iZ3D Inc.)
S4 S3DSvc64; C:\Program Files (x86)\iZ3D Driver\Win64\S3DCService.exe [480768 2010-10-25] (iZ3D Inc.)

==================== Drivers (Whitelisted) ====================

S3 AODDriver4.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [63872 2006-10-29] (Broadcom Corporation.)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-05-29] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-01-03] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140530.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R1 iZ3DInjectionDriver; C:\Program Files (x86)\iZ3D Driver\Win64\S3DInjectionDriver.sys [43704 2010-10-06] ()
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140602.008\ENG64.SYS [126040 2014-04-29] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140602.008\EX64.SYS [2099288 2014-04-29] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-04-24] (Duplex Secure Ltd.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-13] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-09-17] (Anchorfree Inc.)
S3 usbaudio; C:\Windows\SysWOW64\drivers\usbaudio.sys [39840 1998-08-21] (Microsoft Corporation)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.)
S3 usbcamcl; C:\Windows\System32\DRIVERS\usbcamcl.sys [53960 2011-01-13] (usb camera)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.)
S3 zonescreen; C:\Windows\System32\DRIVERS\zsport.sys [12024 2010-10-31] (ZoneOS)
S3 btaudio; system32\drivers\btaudio.sys [X]
S3 BTDriver; system32\DRIVERS\btport.sys [X]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X]
S3 btwhid; system32\DRIVERS\btwhid.sys [X]
S3 btwmodem; system32\DRIVERS\btwmodem.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S1 EIO64; system32\DRIVERS\EIO64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-02 21:56 - 2014-06-02 21:56 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-02 00:35 - 2014-06-02 00:35 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\mp3DirectCut
2014-06-01 23:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-01 22:51 - 2014-06-02 21:41 - 00000000 ____D () C:\AdwCleaner
2014-06-01 22:37 - 2014-06-01 22:37 - 00029503 _____ () C:\mbam.txt
2014-06-01 22:18 - 2014-06-02 21:45 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 22:18 - 2014-06-01 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-01 22:18 - 2014-06-01 22:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-01 22:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-01 22:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-01 22:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-31 23:05 - 2014-05-31 23:15 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\MAGIX
2014-05-31 22:59 - 2014-05-31 22:59 - 00000000 ____D () C:\Users\Devil\Documents\MAGIX_MusicEditor
2014-05-31 22:58 - 2014-05-31 23:06 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-31 22:58 - 2014-05-31 23:05 - 00000000 ___RD () C:\Users\Devil\Documents\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-05-31 21:13 - 2014-05-31 21:13 - 00025994 _____ () C:\ComboFix.txt
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\dub_cm_auto\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Administrator\AppData\Local\temp
2014-05-31 21:00 - 2014-06-02 21:42 - 00032198 _____ () C:\Windows\PFRO.log
2014-05-31 20:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-31 20:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-31 20:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-31 20:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-31 20:41 - 2014-05-31 21:13 - 00000000 ____D () C:\Qoobox
2014-05-31 20:41 - 2014-05-31 21:11 - 00000000 ____D () C:\Windows\erdnt
2014-05-31 20:26 - 2014-05-31 20:26 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-30 20:56 - 2014-05-30 20:58 - 00000000 ____D () C:\Users\Devil\kratzer
2014-05-29 23:26 - 2014-05-29 23:26 - 00018473 _____ () C:\Windows\DirectX.log
2014-05-29 16:46 - 2014-05-29 16:54 - 00000000 ____D () C:\Users\Devil\UNI
2014-05-29 15:27 - 2014-05-29 15:27 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-05-28 20:10 - 2014-06-03 16:47 - 00000000 ____D () C:\FRST
2014-05-28 19:59 - 2014-06-02 21:43 - 00011905 _____ () C:\Windows\setupact.log
2014-05-28 19:59 - 2014-05-28 19:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-28 19:58 - 2014-05-28 19:58 - 00000188 _____ () C:\Users\Devil\defogger_reenable
2014-05-27 23:20 - 2014-05-27 23:20 - 00000000 ____D () C:\ProgramData\ATI
2014-05-27 23:17 - 2014-05-27 23:17 - 00061432 _____ () C:\Windows\SysWOW64\CCCInstall_201405272317260220.log
2014-05-27 23:17 - 2014-05-27 23:17 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-05-27 23:14 - 2014-05-27 23:14 - 00000000 ____D () C:\Program Files\AMD
2014-05-27 23:13 - 2014-04-18 04:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-05-27 23:13 - 2014-04-18 04:43 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 06799688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-05-27 23:13 - 2014-04-18 04:42 - 00099520 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2014-05-27 23:13 - 2014-04-18 04:39 - 00274656 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-05-27 23:13 - 2014-04-18 04:36 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-05-27 23:13 - 2014-04-18 04:23 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-05-27 23:13 - 2014-04-18 04:22 - 28685824 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-05-27 23:13 - 2014-04-18 04:22 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-05-27 23:13 - 2014-04-18 04:17 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-27 23:13 - 2014-04-18 04:13 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-05-27 23:13 - 2014-04-18 04:13 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-05-27 23:13 - 2014-04-18 04:12 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-05-27 23:13 - 2014-04-18 04:12 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-05-27 23:13 - 2014-04-18 03:58 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-05-27 23:13 - 2014-04-18 03:51 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00580816 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-05-27 23:13 - 2014-04-18 03:46 - 00580816 _____ () C:\Windows\system32\atiapfxx.blb
2014-05-27 23:13 - 2014-04-18 03:46 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-05-27 23:13 - 2014-04-18 03:46 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-05-27 23:13 - 2014-04-18 03:46 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-05-27 23:13 - 2014-04-18 03:45 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-05-27 23:13 - 2014-04-18 03:45 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-05-27 23:13 - 2014-04-18 03:42 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-05-27 23:13 - 2014-04-18 03:33 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-05-27 23:13 - 2014-04-18 03:33 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-05-27 23:13 - 2014-04-18 03:30 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-05-27 23:13 - 2014-04-18 03:30 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-05-27 23:13 - 2014-04-18 03:29 - 00586240 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-05-27 23:13 - 2014-04-18 03:29 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-05-27 23:13 - 2014-04-18 03:28 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-05-27 23:13 - 2014-04-18 03:28 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-05-27 23:13 - 2014-04-18 03:21 - 00806912 _____ (AMD) C:\Windows\system32\coinst_14.100.dll
2014-05-27 23:13 - 2014-04-18 03:17 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-05-27 23:13 - 2014-04-18 03:09 - 01177600 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-05-27 23:13 - 2014-04-18 03:07 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-05-27 23:13 - 2014-04-18 03:07 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-05-27 23:13 - 2014-04-18 03:04 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-05-27 23:13 - 2014-04-10 19:58 - 00082128 _____ () C:\Windows\system32\ativce02.dat
2014-05-27 23:13 - 2014-04-01 00:06 - 00234804 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-05-27 23:13 - 2014-04-01 00:04 - 00233008 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-05-27 23:13 - 2014-02-06 17:45 - 00134192 _____ () C:\Windows\system32\ativce03.dat
2014-05-27 23:13 - 2014-01-16 19:00 - 00273712 _____ () C:\Windows\system32\ativvaxy_vi_nd.dat
2014-05-27 23:13 - 2014-01-16 18:59 - 00275124 _____ () C:\Windows\system32\ativvaxy_vi.dat
2014-05-27 23:13 - 2014-01-16 10:34 - 00723841 _____ () C:\Windows\system32\atiicdxx.dat
2014-05-27 23:13 - 2013-12-19 18:45 - 00094720 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2014-05-27 23:13 - 2013-12-19 18:44 - 00110080 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sapphire TRIXX
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Program Files (x86)\Sapphire TRIXX
2014-05-27 22:45 - 2014-05-27 22:46 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2014-05-27 22:45 - 2014-05-27 22:45 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2014-05-27 21:20 - 2014-05-27 21:20 - 00000007 _____ () C:\Users\Devil\SeatPW.txt
2014-05-25 11:09 - 2014-05-25 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL8FB2.tmp
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL7FE8.tmp
2014-05-16 23:35 - 2014-05-16 23:35 - 00000130 _____ () C:\Users\Devil\Documents\Jochen TT.txt
2014-05-12 21:43 - 2014-05-12 21:43 - 00030208 _____ () C:\devdll.dll
2014-05-10 11:13 - 2014-05-10 11:13 - 00007595 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.cl
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.log
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75AC.tmp
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL756D.tmp
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\Program Files (x86)\Aeria Games
2014-05-05 22:25 - 2014-05-06 18:41 - 00000000 ____D () C:\Users\Devil\AppData\Local\Akamai
2014-05-05 22:25 - 2014-05-05 22:25 - 00000000 ____D () C:\AeriaGames
2014-05-04 00:21 - 2014-05-16 19:57 - 00000603 _____ () C:\Users\Devil\Documents\SeatTeile.txt

==================== One Month Modified Files and Folders =======

2056-04-24 22:17 - 2014-03-25 23:02 - 00004096 _____ () C:\Users\Public\Documents\0000319C.LCS
2056-04-24 22:17 - 2014-03-25 23:00 - 00000000 ____D () C:\WDIGIPET
2015-08-01 19:43 - 2014-03-26 00:14 - 00000368 _____ () C:\Users\Devil\Documents\ax_files.xml
2015-08-01 19:43 - 2013-10-27 20:58 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{72B68498-F2A6-46D9-BBFA-FB3ABA89363F}
2014-06-03 16:47 - 2014-05-28 20:10 - 00000000 ____D () C:\FRST
2014-06-03 16:47 - 2013-04-20 18:20 - 00000000 ____D () C:\Users\Devil\AppData\Local\Temp
2014-06-03 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-06-03 16:41 - 2012-09-27 15:39 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA.job
2014-06-03 16:37 - 2012-10-20 13:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-03 16:36 - 2014-04-25 22:24 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-02 23:34 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-02 23:34 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-02 21:56 - 2014-06-02 21:56 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-02 21:47 - 2012-08-26 16:38 - 01833231 _____ () C:\Windows\WindowsUpdate.log
2014-06-02 21:45 - 2014-06-01 22:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-02 21:43 - 2014-05-28 19:59 - 00011905 _____ () C:\Windows\setupact.log
2014-06-02 21:43 - 2014-04-25 22:24 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-02 21:42 - 2014-05-31 21:00 - 00032198 _____ () C:\Windows\PFRO.log
2014-06-02 21:42 - 2014-02-20 23:05 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-06-02 21:42 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-02 21:41 - 2014-06-01 22:51 - 00000000 ____D () C:\AdwCleaner
2014-06-02 21:38 - 2012-08-26 19:37 - 00000000 ____D () C:\Users\Devil\AppData\Local\CrashDumps
2014-06-02 21:13 - 2012-08-30 23:10 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\vlc
2014-06-02 20:33 - 2009-08-25 20:32 - 00666448 _____ () C:\Windows\system32\perfh01D.dat
2014-06-02 20:33 - 2009-08-25 20:32 - 00147772 _____ () C:\Windows\system32\perfc01D.dat
2014-06-02 20:33 - 2009-08-25 19:41 - 00728092 _____ () C:\Windows\system32\perfh019.dat
2014-06-02 20:33 - 2009-08-25 19:41 - 00156268 _____ () C:\Windows\system32\perfc019.dat
2014-06-02 20:33 - 2009-08-25 19:33 - 00747838 _____ () C:\Windows\system32\perfh013.dat
2014-06-02 20:33 - 2009-08-25 19:33 - 00158702 _____ () C:\Windows\system32\perfc013.dat
2014-06-02 20:33 - 2009-08-25 19:25 - 00497186 _____ () C:\Windows\system32\perfh014.dat
2014-06-02 20:33 - 2009-08-25 19:25 - 00100410 _____ () C:\Windows\system32\perfc014.dat
2014-06-02 20:33 - 2009-08-25 19:18 - 00744652 _____ () C:\Windows\system32\perfh010.dat
2014-06-02 20:33 - 2009-08-25 19:18 - 00152658 _____ () C:\Windows\system32\perfc010.dat
2014-06-02 20:33 - 2009-08-25 19:09 - 00749858 _____ () C:\Windows\system32\perfh00C.dat
2014-06-02 20:33 - 2009-08-25 19:09 - 00155216 _____ () C:\Windows\system32\perfc00C.dat
2014-06-02 20:33 - 2009-08-25 19:01 - 00484696 _____ () C:\Windows\system32\perfh00B.dat
2014-06-02 20:33 - 2009-08-25 19:01 - 00107284 _____ () C:\Windows\system32\perfc00B.dat
2014-06-02 20:33 - 2009-08-25 18:54 - 00749602 _____ () C:\Windows\system32\perfh00A.dat
2014-06-02 20:33 - 2009-08-25 18:54 - 00164930 _____ () C:\Windows\system32\perfc00A.dat
2014-06-02 20:33 - 2009-08-25 18:46 - 00712886 _____ () C:\Windows\system32\perfh007.dat
2014-06-02 20:33 - 2009-08-25 18:46 - 00155216 _____ () C:\Windows\system32\perfc007.dat
2014-06-02 20:33 - 2009-08-25 18:38 - 00512432 _____ () C:\Windows\system32\perfh006.dat
2014-06-02 20:33 - 2009-08-25 18:38 - 00104394 _____ () C:\Windows\system32\perfc006.dat
2014-06-02 20:33 - 2009-07-14 07:13 - 08781340 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-02 00:42 - 2012-11-07 20:16 - 05603328 ___SH () C:\Users\Devil\Desktop\Thumbs.db
2014-06-02 00:35 - 2014-06-02 00:35 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\mp3DirectCut
2014-06-01 23:04 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Performance
2014-06-01 22:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\TAPI
2014-06-01 22:37 - 2014-06-01 22:37 - 00029503 _____ () C:\mbam.txt
2014-06-01 22:25 - 2012-08-26 20:07 - 00000000 ___RD () C:\Users\Devil\Desktop\Programme
2014-06-01 22:18 - 2014-06-01 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-01 22:18 - 2014-06-01 22:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-01 22:18 - 2013-12-12 18:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 21:33 - 2009-07-14 06:45 - 03142656 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-31 23:24 - 2012-08-26 17:15 - 00158720 _____ () C:\Users\Devil\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-31 23:15 - 2014-05-31 23:05 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\MAGIX
2014-05-31 23:06 - 2014-05-31 22:58 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-31 23:05 - 2014-05-31 22:58 - 00000000 ___RD () C:\Users\Devil\Documents\MAGIX
2014-05-31 22:59 - 2014-05-31 22:59 - 00000000 ____D () C:\Users\Devil\Documents\MAGIX_MusicEditor
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-05-31 22:58 - 2014-05-31 22:58 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-05-31 22:58 - 2014-04-26 17:53 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-31 22:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-05-31 22:13 - 2013-02-11 00:36 - 00000000 ____D () C:\Users\Devil\Hitfaker
2014-05-31 22:13 - 2012-12-03 19:07 - 00000000 ____D () C:\Users\Devil\Schule
2014-05-31 22:13 - 2012-08-26 16:47 - 00000000 ____D () C:\Users\Devil
2014-05-31 21:13 - 2014-05-31 21:13 - 00025994 _____ () C:\ComboFix.txt
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\dub_cm_auto\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 21:13 - 00000000 ____D () C:\Users\Administrator\AppData\Local\temp
2014-05-31 21:13 - 2014-05-31 20:41 - 00000000 ____D () C:\Qoobox
2014-05-31 21:13 - 2014-04-22 21:07 - 00000000 ____D () C:\Users\dub_cm_auto
2014-05-31 21:11 - 2014-05-31 20:41 - 00000000 ____D () C:\Windows\erdnt
2014-05-31 21:01 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-31 20:59 - 2009-07-14 04:34 - 97517568 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-05-31 20:59 - 2009-07-14 04:34 - 21233664 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-05-31 20:59 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-05-31 20:59 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-05-31 20:59 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-05-31 20:26 - 2014-05-31 20:26 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-30 23:26 - 2012-08-26 20:07 - 00000000 ___RD () C:\Users\Devil\Desktop\Games
2014-05-30 20:58 - 2014-05-30 20:56 - 00000000 ____D () C:\Users\Devil\kratzer
2014-05-30 17:22 - 2013-12-31 18:49 - 00000000 ____D () C:\Windows\system32\Drivers\etc\SK
2014-05-29 23:42 - 2012-12-10 17:26 - 00000000 ____D () C:\ProgramData\Orbit
2014-05-29 23:42 - 2012-08-28 19:04 - 00000000 ____D () C:\Users\Devil\Documents\My Games
2014-05-29 23:27 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-29 23:26 - 2014-05-29 23:26 - 00018473 _____ () C:\Windows\DirectX.log
2014-05-29 19:41 - 2012-09-27 15:39 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core.job
2014-05-29 16:54 - 2014-05-29 16:46 - 00000000 ____D () C:\Users\Devil\UNI
2014-05-29 16:39 - 2012-12-18 20:56 - 00000000 ____D () C:\Users\Devil\.gimp-2.8
2014-05-29 16:27 - 2013-04-25 15:17 - 00000056 _____ () C:\Windows\Acroread.ini
2014-05-29 16:25 - 2013-04-24 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsaWin
2014-05-29 16:25 - 2013-04-24 21:56 - 00000344 _____ () C:\Windows\ODBC.INI
2014-05-29 15:27 - 2014-05-29 15:27 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-05-29 15:27 - 2012-11-15 20:52 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-05-29 15:27 - 2012-08-26 20:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\DAEMON Tools Lite
2014-05-28 20:19 - 2012-09-07 18:37 - 00000000 ____D () C:\Windows\pss
2014-05-28 19:59 - 2014-05-28 19:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-28 19:58 - 2014-05-28 19:58 - 00000188 _____ () C:\Users\Devil\defogger_reenable
2014-05-27 23:38 - 2012-09-12 20:18 - 00524288 ___SH () C:\Users\Devil\Thumbs.db
2014-05-27 23:20 - 2014-05-27 23:20 - 00000000 ____D () C:\ProgramData\ATI
2014-05-27 23:20 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-27 23:17 - 2014-05-27 23:17 - 00061432 _____ () C:\Windows\SysWOW64\CCCInstall_201405272317260220.log
2014-05-27 23:17 - 2014-05-27 23:17 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-05-27 23:17 - 2012-08-26 17:19 - 00000000 ____D () C:\ProgramData\AMD
2014-05-27 23:16 - 2012-08-26 17:17 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-05-27 23:14 - 2014-05-27 23:14 - 00000000 ____D () C:\Program Files\AMD
2014-05-27 23:08 - 2014-04-29 20:00 - 00000000 ____D () C:\Users\Devil\GLUCOFACTS Deluxe
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sapphire TRIXX
2014-05-27 23:01 - 2014-05-27 23:01 - 00000000 ____D () C:\Program Files (x86)\Sapphire TRIXX
2014-05-27 22:48 - 2012-09-07 18:45 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-05-27 22:46 - 2014-05-27 22:45 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2014-05-27 22:45 - 2014-05-27 22:45 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2014-05-27 21:20 - 2014-05-27 21:20 - 00000007 _____ () C:\Users\Devil\SeatPW.txt
2014-05-27 17:52 - 2012-08-26 22:39 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-05-27 13:31 - 2013-07-31 19:06 - 00000000 ___RD () C:\Users\Devil\Desktop\Software
2014-05-27 01:29 - 2014-02-15 21:37 - 00000000 ____D () C:\Program Files (x86)\Bridge Building Game
2014-05-25 11:09 - 2014-05-25 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL8FB2.tmp
2014-05-24 23:25 - 2014-05-24 23:25 - 00000000 _____ () C:\Windows\SysWOW64\OCL7FE8.tmp
2014-05-24 23:24 - 2014-03-29 19:59 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-24 23:24 - 2013-11-14 20:34 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-05-24 23:24 - 2013-04-23 18:54 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-05-23 17:13 - 2013-07-15 19:39 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-23 17:13 - 2012-08-30 22:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-23 17:12 - 2012-08-30 22:06 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\DVDVideoSoft
2014-05-16 23:35 - 2014-05-16 23:35 - 00000130 _____ () C:\Users\Devil\Documents\Jochen TT.txt
2014-05-16 19:57 - 2014-05-04 00:21 - 00000603 _____ () C:\Users\Devil\Documents\SeatTeile.txt
2014-05-12 21:43 - 2014-05-12 21:43 - 00030208 _____ () C:\devdll.dll
2014-05-12 07:26 - 2014-06-01 22:18 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-01 22:18 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-01 22:18 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-10 11:13 - 2014-05-10 11:13 - 00007595 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.cl
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75BD.tmp.log
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL75AC.tmp
2014-05-10 11:13 - 2014-05-10 11:13 - 00000000 _____ () C:\Windows\SysWOW64\OCL756D.tmp
2014-05-08 19:36 - 2012-09-27 15:39 - 00004094 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000UA
2014-05-08 19:36 - 2012-09-27 15:39 - 00003698 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1033395003-4163772576-2144622384-1000Core
2014-05-06 18:41 - 2014-05-05 22:25 - 00000000 ____D () C:\Users\Devil\AppData\Local\Akamai
2014-05-06 18:34 - 2014-04-28 22:16 - 00000000 ____D () C:\Keule306
2014-05-06 17:31 - 2014-04-25 22:24 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 17:31 - 2014-04-25 22:24 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-05 22:46 - 2013-01-21 18:32 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-05-05 22:43 - 2014-05-05 22:43 - 00000000 ____D () C:\Program Files (x86)\Aeria Games
2014-05-05 22:25 - 2014-05-05 22:25 - 00000000 ____D () C:\AeriaGames

Files to move or delete:
====================
C:\Users\Devil\AppData\Roaming\CamLayout.ini
C:\Users\Devil\AppData\Roaming\CamShapes.ini
C:\Users\Devil\scroll_app_smart_4.00.33.exe
C:\Users\Devil\setpoint6.61.15_64.exe
C:\Users\Devil\WhiteCap_505_Platinum.exe
C:\Users\Devil\AppData\Roaming\Origin\update.vbe


Some content of TEMP:
====================
C:\Users\Devil\AppData\Local\Temp\tmpFA19.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-06-03 10:15

==================== End Of Log ============================
         
--- --- ---
Miniaturansicht angehängter Grafiken
-eset-ordner.jpg  

Alt 04.06.2014, 13:11   #12
schrauber
/// the machine
/// TB-Ausbilder
 

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Java, Flash und Firefox updaten. Am besten den ganzen Ordner D:\Downloads löschen, vor allem den Crack-Scheiss.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
C:\Users\Devil\AppData\Local\CRE
C:\Users\Devil\AppData\Local\Temp\tmpFA19.exe
C:\Users\Devil\AppData\Roaming\Origin\update.vbe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.





Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 04.06.2014, 21:41   #13
SilentDeath
 
GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Hallo,

ich habe jetzt wie empfohlen, den gesamten Download-Ordner gelöscht und sämtlichen "Crack-Scheiss" gleich mit.
Außerdem werde ich all Deine Ratschläge beherzigen und mich auch zukünftig daran halten.

Eine kurze Frage hätte ich dann doch noch:
Ich habe doch mit ESET einen kompletten System-Scan durchgeführt und eine Text-Datei mit sämtlichen Pfaden von "gefährlichen Dateien" erhalten. Ich habe nun festgestellt das einige noch vorhanden sind.
Gehe ich richtig in der Annahme, das ich sämtlich Dateien einfach manuell löschen kann und dann los bin?


Ich habe noch einmal FRST benutzt und die Fixlog erstellt.

Fixlog:

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-06-2014
Ran by Devil at 2014-06-04 21:04:10 Run:2
Running from C:\Users\Devil\Desktop\Desktop\Trojaner-Board
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Devil\AppData\Local\CRE
C:\Users\Devil\AppData\Local\Temp\tmpFA19.exe
C:\Users\Devil\AppData\Roaming\Origin\update.vbe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
         
*****************

"C:\Users\Devil\AppData\Local\CRE" => File/Directory not found.
"C:\Users\Devil\AppData\Local\Temp\tmpFA19.exe" => File/Directory not found.
"C:\Users\Devil\AppData\Roaming\Origin\update.vbe" => File/Directory not found.
HKLM\SOFTWARE\Policies\Google => Key not found.

==== End of Fixlog ====
         
Danach habe ich DelFix benutzt und alle Scanprogramme entfernt.

An dieser Stelle möchte ich auf jeden Fall schon einmal vielen vielen Dank sagen und ich möchte auch meine Bewunderung zu Ausdruck bringen, dass Du soviel Zeit und Mühe für all die "PC-Laien" aufbringst und ihnen weiter hilfst.
Solltest Du mal Probleme mit einem Auto haben und Du bist durch Zufall in der Nähe von Erfurt dann zögere bitte nicht und sag mir Bescheid. Ich würde mich freuen mich einmal revanchieren zu können.

Alt 05.06.2014, 20:19   #14
schrauber
/// the machine
/// TB-Ausbilder
 

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Standard

GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur



Wenn nach entfernen der Scanprogramme und reinigen mit TFC noch ESET Funde über sind kannste die manuell löschen.


Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur
cyberghost, dvdvideosoft ltd., freemium, pup.optional.1clickdownload.a, pup.optional.1clickdownloader.a, pup.optional.babylon.a, pup.optional.babylontoolbar.a, pup.optional.browserprotect.a, pup.optional.conduit.a, pup.optional.coolpic, pup.optional.crossrider.a, pup.optional.datamangr.a, pup.optional.dealply.a, pup.optional.delta.a, pup.optional.elex.a, pup.optional.esafe.a, pup.optional.iminent.a, pup.optional.installbrain.a, pup.optional.multiie.a, pup.optional.opencandy, pup.optional.plushd.a, pup.optional.quickshare.a, pup.optional.softonic.a, pup.optional.surfcanyon.a, pup.optional.sweetim.a, pup.optional.valueapps.a, pup.optional.visualbee, pup.optional.wbcengine, required, tracker, win64



Ähnliche Themen: GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur


  1. CPU-Auslastung permanent über 55%, auch wenn ich nichts tue
    Alles rund um Windows - 13.10.2015 (26)
  2. Win 10 Auslastung des Prozessors permanent bei 100%
    Plagegeister aller Art und deren Bekämpfung - 11.09.2015 (3)
  3. Datenträgerauslastung ständig auf 100%-iger Auslastung, Lüfter dreht permanent, Notebook wird heiß
    Plagegeister aller Art und deren Bekämpfung - 14.06.2015 (3)
  4. Win8 seid paar Tagen langsamer und erhöhte CPU
    Plagegeister aller Art und deren Bekämpfung - 14.01.2015 (11)
  5. Windows 7 [64bit] : Abbruch von Downloads, permanent hohe CPU- und RAM-Auslastung
    Log-Analyse und Auswertung - 22.12.2013 (4)
  6. Installation ohne onboard Grafikkarte, Grafikkarte vorhanden
    Netzwerk und Hardware - 09.09.2013 (18)
  7. CPU auslastung permanent im hohen Bereich 70-100%
    Plagegeister aller Art und deren Bekämpfung - 29.08.2013 (11)
  8. Verdacht auf Schadsoftware - erhöhte CPU-Nutzung, Strg von selbst betätigt
    Plagegeister aller Art und deren Bekämpfung - 13.04.2013 (12)
  9. CPU-Auslastung permanent zu hoch
    Plagegeister aller Art und deren Bekämpfung - 15.02.2013 (10)
  10. Rundll32.exe seit tagen permanent bei 50% auslastung.
    Log-Analyse und Auswertung - 14.07.2012 (1)
  11. GPU Temperatur ok ?
    Netzwerk und Hardware - 07.07.2012 (7)
  12. Prozess "system" verursacht erhöhte Auslastung
    Mülltonne - 29.08.2011 (6)
  13. Permanent hohe CPU auslastung möglicherweise durch Virus/Trojaner
    Plagegeister aller Art und deren Bekämpfung - 19.08.2009 (10)
  14. CPU-Auslastung permanent 100 Prozent / Internet Explorer hängt, bekommt k. Verbindung
    Log-Analyse und Auswertung - 11.05.2009 (0)
  15. Hilfe CPU Auslastung permanent 100%
    Log-Analyse und Auswertung - 03.04.2008 (3)
  16. Permanent 100% Auslastung
    Mülltonne - 05.11.2007 (0)
  17. PC Temperatur
    Netzwerk und Hardware - 27.05.2007 (1)

Zum Thema GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur - Hallo liebe Community Ich bin noch sehr neu in diesem Forum und muss gestehen, ich habe nicht ganz so viel Ahnung. Trotzdem möchte ich mich schon einmal im voraus bei - GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur...
Archiv
Du betrachtest: GPU-Auslastung permanent 98% -> Grafikkarte erhöhte Temperatur auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.