![]() |
|
Log-Analyse und Auswertung: Windows7x64 Ewiger Wilkommensbildschirm+MBAM startet nichtWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Windows7x64 Ewiger Wilkommensbildschirm+MBAM startet nicht Hallo liebe Profis, ich beschreibe hier kurz mein Problem. Vor ein paar Monaten ist mir Aufgefallen das mein rechner ewig lange im Wilkommen-bildschirm ist(Trotz SSD). nach ca 5 minuten kommt dann der desktop. Ich habe ein wenig geforscht und fand im Ereigniss fenster von Windows das die mbam.exe und die avira.exe einen Timeout von 300000ms verursachen. Darauf habe ich wieder gegoogled, das es sein kann das AviraPro und MBAM blockieren, ich soll jeweils den anderen Virenscanner in die Ausschlüsse stecken.Das habe ich dann auch gemacht, und siehe da Windows startete wieder in normalzeit. Dann nach einiger zeit fiel mir auf das MBAM garnicht mehr unten neben der uhr ist, ich habe versucht zu starten ging aber nicht mehr. Eine Neuinstallation löste mein problem. Doch jetzt wieder das selbe spiel gestern musste ich wieder mbam neu installieren weil es wieder nicht ging. Heute nach der arbeit war dann ganz vorbei, Windows im Boot abgestürzt, restet, wikommen 5 minuten lang, MBAM ging, avira hatte den status "ungeschützt", taskleiste nicht klickbar mauskreis, vor wut wieder resettet, lief wieder alles. Ich habe einen scan mit beiden antivieren gemacht 0 Funde, ich habe einen scan mit dem rootkit tool von avira gemacht, 0 funde. chdsk habe ich auch bereits gemacht. FRST: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014 01 Ran by Lil' Hagbrain (administrator) on INTEL3770K-PC on 14-08-2014 16:44:43 Running from C:\Users\Lil' Hagbrain\Downloads Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 10 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe () C:\AMD\amdacpusrsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.25\AsusFanControlService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Malwarebytes Corporation) C:\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\ Malwarebytes Anti-Malware \mbamservice.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Malwarebytes Corporation) C:\ Malwarebytes Anti-Malware \mbam.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe () C:\Sapphire TRIXX\TRIXX.exe (Beepa P/L) C:\Fraps\fraps.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe (Apple Inc.) D:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPOP3.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Beepa P/L) C:\Fraps\fraps64.dat (FinalWire Ltd.) C:\Program Files (x86)\FinalWire\AIDA64 Extreme\aida64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation) HKLM-x32\...\Run: [CTxfiHlp] => CTXFIHLP.EXE HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => D:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-07] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.) Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKLM\...\Policies\Explorer: [NoWelcomeScreen] 1 HKU\.DEFAULT\...\Run: [CtxfiReg] => CTXFIREG.exe /FAIL1 HKU\S-1-5-21-729600091-3301723442-1201444741-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-729600091-3301723442-1201444741-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.) Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB3CE59F40B31CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Lil' Hagbrain\AppData\Roaming\Mozilla\Firefox\Profiles\mri478wi.default-1407223672330 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> D:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.122.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.138.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.3 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.4.1 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.4.1 -> C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=0.9.9 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: BlackFox V2 - C:\Users\Lil' Hagbrain\AppData\Roaming\Mozilla\Firefox\Profiles\mri478wi.default-1407223672330\Extensions\zigboom@hotmail.com [2014-08-05] FF Extension: FT DeepDark - C:\Users\Lil' Hagbrain\AppData\Roaming\Mozilla\Firefox\Profiles\mri478wi.default-1407223672330\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-08-05] FF Extension: MEGA - C:\Users\Lil' Hagbrain\AppData\Roaming\Mozilla\Firefox\Profiles\mri478wi.default-1407223672330\Extensions\firefox@mega.co.nz.xpi [2014-08-05] FF Extension: leethax.net extension - C:\Users\Lil' Hagbrain\AppData\Roaming\Mozilla\Firefox\Profiles\mri478wi.default-1407223672330\Extensions\leethax@leethax.net.xpi [2014-08-05] FF Extension: YouTube High Definition - C:\Users\Lil' Hagbrain\AppData\Roaming\Mozilla\Firefox\Profiles\mri478wi.default-1407223672330\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2014-08-05] FF Extension: Adblock Plus - C:\Users\Lil' Hagbrain\AppData\Roaming\Mozilla\Firefox\Profiles\mri478wi.default-1407223672330\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-05] FF Extension: DownThemAll! - C:\Users\Lil' Hagbrain\AppData\Roaming\Mozilla\Firefox\Profiles\mri478wi.default-1407223672330\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-08-05] FF HKLM-x32\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] - C:\Program Files (x86)\Fiddler2\FiddlerHook FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook [2014-01-25] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 amdacpusrsvc; C:\AMD\amdacpusrsvc.exe [82432 2014-04-17] () [File not signed] R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [804944 2014-08-07] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-08-07] (Avira Operations GmbH & Co. KG) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-06-04] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [945664 2013-06-13] (ASUSTeK Computer Inc.) [File not signed] R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.) R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.25\AsusFanControlService.exe [1643008 2013-06-13] (ASUSTeK Computer Inc.) [File not signed] S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-07-16] () [File not signed] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-08-25] (Creative Labs) [File not signed] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [File not signed] R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240584 2012-10-02] (DTS, Inc) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [528096 2014-06-08] (Futuremark) S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-09] (Intel Corporation) R2 MBAMScheduler; C:\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-08-22] (Overwolf Ltd) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2013-01-28] (ASUSTek Computer Inc.) R3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64 [34136 2014-07-29] () R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [274656 2014-04-18] (Advanced Micro Devices) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [47512 2013-01-10] (Asmedia Technology) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-06-04] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-09-14] () S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation) S3 atillk64; C:\Users\Lil' Hagbrain\Desktop\ATIWINFLASH\atillk64.sys [14608 2006-07-19] (ATI Technologies Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-27] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [42040 2014-07-15] (Avira Operations GmbH & Co. KG) S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.) S3 BTWDPAN; C:\Windows\System32\DRIVERS\btwdpan.sys [89640 2011-09-17] (Broadcom Corporation.) S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [14646560 2011-12-15] (Intel Corporation) [File not signed] S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [331264 2011-12-05] (Intel(R) Corporation) [File not signed] S3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.) R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-14] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2011-08-02] (Apple Inc.) [File not signed] S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.) S3 ALSysIO; \??\C:\Users\LIL'HA~1\AppData\Local\Temp\ALSysIO64.sys [X] S3 cpuz135; \??\C:\Users\LIL'HA~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X] S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X] S3 GPU-Z; \??\C:\Users\LIL'HA~1\AppData\Local\Temp\GPU-Z.sys [X] S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X] R3 TRIXX; \??\C:\Users\LIL'HA~1\AppData\Local\Temp\TRIXX.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-14 16:44 - 2014-08-14 16:44 - 00019773 _____ () C:\Users\Lil' Hagbrain\Downloads\FRST.txt 2014-08-14 16:31 - 2014-08-14 16:31 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{0E22FE37-C15C-4A33-8F53-88624F8E1608} 2014-08-14 16:28 - 2014-08-14 16:44 - 00000000 ____D () C:\FRST 2014-08-14 16:28 - 2014-08-14 16:28 - 02100224 _____ (Farbar) C:\Users\Lil' Hagbrain\Downloads\FRST64.exe 2014-08-14 16:03 - 2014-08-14 16:03 - 00000750 _____ () C:\Users\Lil' Hagbrain\Desktop\ Malwarebytes Anti-Malware .lnk 2014-08-14 15:54 - 2014-08-14 15:54 - 00003230 _____ () C:\Windows\System32\Tasks\{EBB8A93E-F56B-44BA-ACDB-B902A59DE51F} 2014-08-14 15:53 - 2014-08-14 15:53 - 00232608 _____ () C:\Users\Lil' Hagbrain\Downloads\gfgffsg.exe 2014-08-13 20:03 - 2014-08-14 16:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\ Malwarebytes Anti-Malware 2014-08-13 20:03 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-08-13 20:03 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-08-13 20:03 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-08-13 20:00 - 2014-08-13 20:00 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Lil' Hagbrain\Downloads\mbam-clean-2.1.1.1001.exe 2014-08-13 19:52 - 2014-08-13 19:52 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lil' Hagbrain\Downloads\ixplor1.exe 2014-08-13 19:40 - 2014-08-13 19:59 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\Windows 2014-08-13 19:40 - 2014-08-13 19:40 - 04872677 _____ () C:\Users\Lil' Hagbrain\Downloads\mbam-chameleon-3.1.4.0.zip 2014-08-13 19:33 - 2014-08-13 19:33 - 00350716 _____ () C:\Users\Lil' Hagbrain\Documents\ts3_clientui-win64-1407159763-2014-08-13 19_33_21.879914.dmp 2014-08-13 17:11 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-08-13 17:11 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-08-13 17:11 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-08-13 17:11 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-13 17:11 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-08-13 17:11 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-08-13 17:11 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-08-13 17:11 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-08-13 17:09 - 2014-08-13 17:09 - 00003306 _____ () C:\Windows\System32\Tasks\SidebarExecute 2014-08-13 16:00 - 2014-07-24 14:11 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-08-13 16:00 - 2014-07-24 14:10 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-13 16:00 - 2014-07-24 14:10 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 15399936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-08-13 16:00 - 2014-07-24 14:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-08-13 16:00 - 2014-07-24 14:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-08-13 16:00 - 2014-07-24 12:52 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-08-13 16:00 - 2014-07-24 12:52 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-08-13 16:00 - 2014-07-24 12:51 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-08-13 16:00 - 2014-07-24 12:51 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-08-13 16:00 - 2014-07-24 12:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-13 16:00 - 2014-07-24 12:29 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-08-13 15:59 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-13 15:59 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-13 15:59 - 2014-07-24 14:09 - 19279872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-13 15:59 - 2014-07-24 14:09 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-13 15:59 - 2014-07-24 14:09 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-08-13 15:59 - 2014-07-24 14:09 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-13 15:59 - 2014-07-24 14:09 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-08-13 15:59 - 2014-07-24 14:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-13 15:59 - 2014-07-24 12:51 - 14371328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-08-13 15:59 - 2014-07-24 12:51 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-08-13 15:59 - 2014-07-24 12:51 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-08-13 15:59 - 2014-07-24 12:51 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-08-13 15:59 - 2014-07-24 12:51 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-08-13 15:59 - 2014-07-16 05:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-13 15:59 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-08-13 15:59 - 2014-07-16 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-13 15:59 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-08-13 15:59 - 2014-07-16 04:12 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-13 15:59 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-08-13 15:59 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-08-13 15:59 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-08-13 15:59 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-08-13 15:59 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-08-13 15:59 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-08-13 15:59 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-08-13 15:59 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-08-13 15:59 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-08-13 15:59 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-08-13 15:59 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-08-13 15:59 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-08-13 15:59 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-08-13 15:59 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls 2014-08-13 15:59 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-08-13 15:59 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-08-13 15:59 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-13 15:59 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-13 15:59 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-13 15:59 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-13 15:59 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-13 15:59 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-08-13 15:59 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-08-13 15:59 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-08-12 21:47 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys 2014-08-12 21:46 - 2014-08-12 21:46 - 00000441 _____ () C:\Users\Lil' Hagbrain\Desktop\report.txt 2014-08-12 21:45 - 2014-08-12 21:45 - 00131072 _____ () C:\Users\Lil' Hagbrain\Desktop\Hawaii.bin 2014-08-11 22:23 - 2014-08-11 22:23 - 00277648 _____ () C:\Windows\Minidump\081114-11996-01.dmp 2014-08-11 18:22 - 2014-08-11 18:22 - 00062044 _____ () C:\Windows\SysWOW64\CCCInstall_201408111822375768.log 2014-08-11 18:22 - 2014-08-11 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2014-08-11 18:22 - 2014-08-11 18:22 - 00000000 ____D () C:\ProgramData\ATI 2014-08-11 18:22 - 2014-08-11 18:22 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2014-08-11 18:22 - 2014-08-11 18:22 - 00000000 ____D () C:\Program Files (x86)\AMD AVT 2014-08-11 18:21 - 2014-08-11 18:22 - 00000000 ____D () C:\Program Files\ATI Technologies 2014-08-11 18:21 - 2014-08-11 18:21 - 00000000 ____D () C:\Program Files\ATI 2014-08-11 18:20 - 2014-08-11 18:20 - 00055860 _____ () C:\Windows\SysWOW64\CCCInstall_201408111820028054.log 2014-08-11 18:18 - 2014-08-11 18:18 - 06422528 _____ (Advanced Micro Devices) C:\Users\Lil' Hagbrain\Downloads\amdcleanuputility-1.4.0.0.exe 2014-08-11 17:56 - 2013-10-25 17:39 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\MemoryInfo 1005 2014-08-10 15:01 - 2014-08-10 15:01 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{9AA463DB-53C6-4F92-AC01-1E1B906E4E55} 2014-08-10 13:48 - 2014-08-10 13:48 - 00002840 _____ () C:\Users\Lil' Hagbrain\Unigine_Heaven_Benchmark_4.0_20140810_1348.html 2014-08-10 12:48 - 2014-08-10 12:48 - 00672192 _____ () C:\Users\Lil' Hagbrain\Downloads\RBE_128.exe 2014-08-10 12:17 - 2014-08-10 12:17 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\Neuer Ordner (2) 2014-08-10 12:16 - 2008-07-11 15:27 - 00098304 _____ (Hewlett-Packard Company) C:\Users\Lil' Hagbrain\Desktop\HPUSBFW.exe 2014-08-10 12:15 - 2014-08-10 12:15 - 00237695 _____ () C:\Users\Lil' Hagbrain\Downloads\Boot_Diskette.rar 2014-08-10 12:15 - 2014-08-10 12:15 - 00098304 _____ (Hewlett-Packard Company) C:\Users\Lil' Hagbrain\Downloads\hpusbfwv2.2.3.exe 2014-08-10 12:14 - 2014-08-10 12:14 - 00503615 _____ () C:\Users\Lil' Hagbrain\Downloads\file.zip 2014-08-10 12:09 - 2014-08-10 14:02 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\Neuer Ordner 2014-08-10 12:08 - 2014-08-10 12:08 - 00131072 _____ () C:\Users\Lil' Hagbrain\Desktop\Hawaiioc.rom 2014-08-10 11:57 - 2014-08-10 11:57 - 00242003 _____ () C:\Users\Lil' Hagbrain\Downloads\atiflash_417.zip 2014-08-10 11:57 - 2013-10-09 11:38 - 00665600 _____ () C:\Users\Lil' Hagbrain\Desktop\flash.exe 2014-08-10 11:29 - 2014-08-10 11:29 - 269338400 _____ (AMD Inc.) C:\Users\Lil' Hagbrain\Downloads\14-4-win7-win8-win8.1-64-dd-ccc-whql.exe 2014-08-09 14:11 - 2014-08-09 14:11 - 25347999 _____ () C:\Users\Lil' Hagbrain\Downloads\GPUTweak_2_5_2.zip 2014-08-09 14:07 - 2014-08-09 14:07 - 01538989 _____ () C:\Users\Lil' Hagbrain\Downloads\ati_winflash_2.3.0.zip 2014-08-09 14:07 - 2014-08-09 14:07 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\ATIWINFLASH 2014-08-08 21:05 - 2014-08-10 13:10 - 00003240 _____ () C:\Windows\System32\Tasks\Sapphire TRIXX 2014-08-08 20:41 - 2014-08-08 20:41 - 320787824 _____ (AMD Inc.) C:\Users\Lil' Hagbrain\Downloads\amd-catalyst-14.7-rc1-windows-july9.exe 2014-08-08 20:08 - 2014-08-08 20:08 - 00000000 ____D () C:\Users\Lil' Hagbrain\Documents\PCMark 8 2014-08-08 17:29 - 2014-08-08 17:29 - 00000000 ____D () C:\Program Files\Futuremark 2014-08-08 16:12 - 2014-08-08 16:12 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{2BA3B15D-34CF-4A2B-975C-E0656316C98D} 2014-08-08 15:58 - 2014-08-08 15:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{8F5DBC1C-460C-42E0-8EA0-2B84842B1B24} 2014-08-07 16:38 - 2014-08-11 18:29 - 00000000 ____D () C:\Users\Lil' Hagbrain\Documents\3DMark 2014-08-07 16:17 - 2014-08-07 16:17 - 00002845 _____ () C:\Users\Lil' Hagbrain\Desktop\Unigine_Heaven_Benchmark_4.0_20140807_1617.html 2014-08-05 17:30 - 2014-08-05 17:30 - 00277648 _____ () C:\Windows\Minidump\080514-10171-01.dmp 2014-08-05 10:01 - 2014-08-05 10:01 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{EEDCD8FA-FF4A-4B2B-B11F-67024EF54A03} 2014-08-05 09:27 - 2014-08-05 09:27 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\Alte Firefox-Daten 2014-08-02 12:45 - 2014-08-03 15:40 - 00154241 _____ () C:\Users\Lil' Hagbrain\Desktop\ROPAMD DISPLAY.lglcd 2014-08-01 15:07 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-01 15:07 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-01 15:07 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-08-01 15:07 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-01 15:07 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-08-01 15:07 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-08-01 15:07 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-08-01 15:07 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-01 15:07 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-01 15:07 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-08-01 15:07 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-01 15:07 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-08-01 15:07 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-01 15:07 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-07-31 19:14 - 2014-07-31 19:14 - 00277648 _____ () C:\Windows\Minidump\073114-10389-01.dmp 2014-07-31 18:46 - 2014-07-31 18:46 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab 2014-07-31 17:55 - 2014-07-31 17:55 - 00001196 _____ () C:\Users\Lil' Hagbrain\Desktop\AIDA64 Extreme.lnk 2014-07-30 16:47 - 2014-07-30 16:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-30 16:39 - 2014-07-30 16:39 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{EC600916-BC49-4AF1-907C-BA4591AADF16} 2014-07-29 20:58 - 2014-07-29 20:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{23D15F95-9C84-48C5-91EE-CEE46A04ACC1} 2014-07-29 20:54 - 2014-07-29 20:54 - 00000541 _____ () C:\Users\Lil' Hagbrain\Desktop\Steam.lnk 2014-07-27 22:41 - 2014-08-14 16:06 - 00003262 _____ () C:\Windows\System32\Tasks\AIDA64 AutoStart 2014-07-27 22:14 - 2014-07-27 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire 2014-07-27 22:14 - 2014-07-27 22:14 - 00000000 ____D () C:\Program Files (x86)\FinalWire 2014-07-27 13:31 - 2014-07-27 13:32 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{FEC58128-C051-49FE-B643-A32E640CE843} 2014-07-27 11:59 - 2014-08-06 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor 3.0 2014-07-27 11:59 - 2014-08-06 16:11 - 00000000 ____D () C:\Program Files\MSI Kombustor 3.0 2014-07-24 17:18 - 2014-07-24 19:06 - 00000000 ____D () C:\Users\Lil' Hagbrain\Downloads\Neuer Ordner 2014-07-21 22:11 - 2014-07-21 22:11 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{C32691E9-5373-464F-B658-2F1AABE8020A} 2014-07-20 12:26 - 2014-07-20 12:26 - 00056720 _____ () C:\Windows\SysWOW64\CCCInstall_201407201226596362.log 2014-07-19 14:30 - 2014-07-19 14:30 - 00001064 _____ () C:\Users\Lil' Hagbrain\Desktop\NFS14.lnk 2014-07-19 14:17 - 2014-07-19 14:29 - 00001274 _____ () C:\Users\Lil' Hagbrain\Desktop\Need For Speed The Run.lnk 2014-07-19 13:29 - 2014-07-19 13:29 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{EC15CB6D-9D46-481E-B76B-D9487947E3E8} 2014-07-18 21:02 - 2014-07-18 21:02 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{652AEF2F-74CC-442E-B2E6-D99C4A4C4D19} 2014-07-18 16:02 - 2014-08-11 18:26 - 00000022 _____ () C:\Windows\GPU-Z.INI 2014-07-18 15:59 - 2014-07-18 15:59 - 00000000 ____D () C:\Program Files (x86)\Futuremark 2014-07-18 15:58 - 2014-08-08 20:26 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\Futuremark 2014-07-18 15:58 - 2014-07-18 16:02 - 00000000 ____D () C:\Users\Lil' Hagbrain\Documents\3DMark 11 2014-07-18 15:58 - 2014-07-18 15:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\IsolatedStorage 2014-07-18 15:15 - 2014-07-18 15:15 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sapphire TRIXX 2014-07-18 15:15 - 2014-07-18 15:15 - 00000000 ____D () C:\Sapphire TRIXX 2014-07-18 15:10 - 2014-07-18 15:10 - 00002841 _____ () C:\Users\Lil' Hagbrain\Unigine_Heaven_Benchmark_4.0_20140718_1510.html 2014-07-18 14:26 - 2014-07-18 14:26 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-07-18 14:12 - 2014-07-18 14:12 - 00062044 _____ () C:\Windows\SysWOW64\CCCInstall_201407181412381851.log 2014-07-18 14:09 - 2014-08-14 16:05 - 00065536 _____ () C:\Windows\system32\spu_storage.bin 2014-07-18 12:52 - 2014-07-18 12:52 - 00055860 _____ () C:\Windows\SysWOW64\CCCInstall_201407181252560169.log 2014-07-18 12:52 - 2014-07-18 12:52 - 00000000 ____D () C:\Program Files\AMD 2014-07-17 19:22 - 2014-07-17 19:33 - 00000000 ____D () C:\Users\Lil' Hagbrain\Heaven 2014-07-17 19:21 - 2014-08-11 18:24 - 01065984 _____ () C:\Users\Lil' Hagbrain\AppData\Local\file__0.localstorage 2014-07-17 16:11 - 2014-07-17 16:12 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{4F3A50DD-CDBD-438A-85C3-547BC2DBEABB} 2014-07-16 18:09 - 2014-07-16 18:09 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{1E82F5E7-C7ED-4E2F-8FC8-7396501BF709} 2014-07-15 22:33 - 2014-07-15 22:33 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{C40A1708-F9A1-4A7E-9C96-BD3C310D2977} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-14 16:44 - 2014-08-14 16:44 - 00019773 _____ () C:\Users\Lil' Hagbrain\Downloads\FRST.txt 2014-08-14 16:44 - 2014-08-14 16:28 - 00000000 ____D () C:\FRST 2014-08-14 16:39 - 2013-04-16 14:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-08-14 16:31 - 2014-08-14 16:31 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{0E22FE37-C15C-4A33-8F53-88624F8E1608} 2014-08-14 16:31 - 2014-05-03 16:31 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {F293C081-28AA-429E-A81F-BC06028E5F5B}.job 2014-08-14 16:31 - 2014-05-03 16:31 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {F293C081-28AA-429E-A81F-BC06028E5F5B}.job 2014-08-14 16:28 - 2014-08-14 16:28 - 02100224 _____ (Farbar) C:\Users\Lil' Hagbrain\Downloads\FRST64.exe 2014-08-14 16:27 - 2014-08-13 20:03 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-08-14 16:13 - 2009-07-14 19:58 - 00699432 _____ () C:\Windows\system32\perfh007.dat 2014-08-14 16:13 - 2009-07-14 19:58 - 00149572 _____ () C:\Windows\system32\perfc007.dat 2014-08-14 16:13 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-08-14 16:13 - 2009-07-14 06:45 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-08-14 16:13 - 2009-07-14 06:45 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-08-14 16:09 - 2012-05-15 18:09 - 01142131 _____ () C:\Windows\WindowsUpdate.log 2014-08-14 16:06 - 2014-07-27 22:41 - 00003262 _____ () C:\Windows\System32\Tasks\AIDA64 AutoStart 2014-08-14 16:06 - 2014-05-27 09:27 - 00017216 _____ () C:\Windows\setupact.log 2014-08-14 16:06 - 2012-05-22 20:26 - 00000000 ____D () C:\Fraps 2014-08-14 16:06 - 2012-05-15 18:18 - 01345492 _____ () C:\Windows\PFRO.log 2014-08-14 16:06 - 2012-05-14 22:33 - 00003164 _____ () C:\Windows\System32\Tasks\FRAPS 2014-08-14 16:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-08-14 16:05 - 2014-07-18 14:09 - 00065536 _____ () C:\Windows\system32\spu_storage.bin 2014-08-14 16:03 - 2014-08-14 16:03 - 00000750 _____ () C:\Users\Lil' Hagbrain\Desktop\ Malwarebytes Anti-Malware .lnk 2014-08-14 16:01 - 2009-07-14 06:45 - 04858024 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-14 15:54 - 2014-08-14 15:54 - 00003230 _____ () C:\Windows\System32\Tasks\{EBB8A93E-F56B-44BA-ACDB-B902A59DE51F} 2014-08-14 15:53 - 2014-08-14 15:53 - 00232608 _____ () C:\Users\Lil' Hagbrain\Downloads\gfgffsg.exe 2014-08-13 23:08 - 2012-05-15 19:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\TS3Client 2014-08-13 22:33 - 2013-12-22 19:51 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\DayZ 2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\ Malwarebytes Anti-Malware 2014-08-13 20:00 - 2014-08-13 20:00 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Lil' Hagbrain\Downloads\mbam-clean-2.1.1.1001.exe 2014-08-13 19:59 - 2014-08-13 19:40 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\Windows 2014-08-13 19:59 - 2012-05-15 19:06 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\CrashDumps 2014-08-13 19:52 - 2014-08-13 19:52 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lil' Hagbrain\Downloads\ixplor1.exe 2014-08-13 19:40 - 2014-08-13 19:40 - 04872677 _____ () C:\Users\Lil' Hagbrain\Downloads\mbam-chameleon-3.1.4.0.zip 2014-08-13 19:33 - 2014-08-13 19:33 - 00350716 _____ () C:\Users\Lil' Hagbrain\Documents\ts3_clientui-win64-1407159763-2014-08-13 19_33_21.879914.dmp 2014-08-13 17:14 - 2013-07-23 23:03 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-13 17:13 - 2012-05-15 20:18 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-13 17:11 - 2014-05-06 20:57 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-13 17:09 - 2014-08-13 17:09 - 00003306 _____ () C:\Windows\System32\Tasks\SidebarExecute 2014-08-13 17:03 - 2014-06-07 22:12 - 00225280 ___SH () C:\Users\Lil' Hagbrain\Desktop\Thumbs.db 2014-08-12 21:48 - 2012-10-13 17:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dream Aquarium 2014-08-12 21:46 - 2014-08-12 21:46 - 00000441 _____ () C:\Users\Lil' Hagbrain\Desktop\report.txt 2014-08-12 21:45 - 2014-08-12 21:45 - 00131072 _____ () C:\Users\Lil' Hagbrain\Desktop\Hawaii.bin 2014-08-11 22:23 - 2014-08-11 22:23 - 00277648 _____ () C:\Windows\Minidump\081114-11996-01.dmp 2014-08-11 22:23 - 2014-06-05 19:32 - 570760084 _____ () C:\Windows\MEMORY.DMP 2014-08-11 22:23 - 2013-02-03 14:16 - 00000000 ____D () C:\Windows\Minidump 2014-08-11 18:29 - 2014-08-07 16:38 - 00000000 ____D () C:\Users\Lil' Hagbrain\Documents\3DMark 2014-08-11 18:26 - 2014-07-18 16:02 - 00000022 _____ () C:\Windows\GPU-Z.INI 2014-08-11 18:24 - 2014-07-17 19:21 - 01065984 _____ () C:\Users\Lil' Hagbrain\AppData\Local\file__0.localstorage 2014-08-11 18:22 - 2014-08-11 18:22 - 00062044 _____ () C:\Windows\SysWOW64\CCCInstall_201408111822375768.log 2014-08-11 18:22 - 2014-08-11 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2014-08-11 18:22 - 2014-08-11 18:22 - 00000000 ____D () C:\ProgramData\ATI 2014-08-11 18:22 - 2014-08-11 18:22 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2014-08-11 18:22 - 2014-08-11 18:22 - 00000000 ____D () C:\Program Files (x86)\AMD AVT 2014-08-11 18:22 - 2014-08-11 18:21 - 00000000 ____D () C:\Program Files\ATI Technologies 2014-08-11 18:22 - 2013-09-21 12:35 - 00000000 ____D () C:\AMD 2014-08-11 18:22 - 2012-05-15 18:59 - 00000000 ____D () C:\ProgramData\AMD 2014-08-11 18:22 - 2012-05-15 18:59 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2014-08-11 18:21 - 2014-08-11 18:21 - 00000000 ____D () C:\Program Files\ATI 2014-08-11 18:20 - 2014-08-11 18:20 - 00055860 _____ () C:\Windows\SysWOW64\CCCInstall_201408111820028054.log 2014-08-11 18:18 - 2014-08-11 18:18 - 06422528 _____ (Advanced Micro Devices) C:\Users\Lil' Hagbrain\Downloads\amdcleanuputility-1.4.0.0.exe 2014-08-10 15:01 - 2014-08-10 15:01 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{9AA463DB-53C6-4F92-AC01-1E1B906E4E55} 2014-08-10 14:56 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-08-10 14:02 - 2014-08-10 12:09 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\Neuer Ordner 2014-08-10 13:48 - 2014-08-10 13:48 - 00002840 _____ () C:\Users\Lil' Hagbrain\Unigine_Heaven_Benchmark_4.0_20140810_1348.html 2014-08-10 13:48 - 2012-05-15 18:09 - 00000000 ____D () C:\Users\Lil' Hagbrain 2014-08-10 13:10 - 2014-08-08 21:05 - 00003240 _____ () C:\Windows\System32\Tasks\Sapphire TRIXX 2014-08-10 12:48 - 2014-08-10 12:48 - 00672192 _____ () C:\Users\Lil' Hagbrain\Downloads\RBE_128.exe 2014-08-10 12:17 - 2014-08-10 12:17 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\Neuer Ordner (2) 2014-08-10 12:15 - 2014-08-10 12:15 - 00237695 _____ () C:\Users\Lil' Hagbrain\Downloads\Boot_Diskette.rar 2014-08-10 12:15 - 2014-08-10 12:15 - 00098304 _____ (Hewlett-Packard Company) C:\Users\Lil' Hagbrain\Downloads\hpusbfwv2.2.3.exe 2014-08-10 12:14 - 2014-08-10 12:14 - 00503615 _____ () C:\Users\Lil' Hagbrain\Downloads\file.zip 2014-08-10 12:08 - 2014-08-10 12:08 - 00131072 _____ () C:\Users\Lil' Hagbrain\Desktop\Hawaiioc.rom 2014-08-10 11:57 - 2014-08-10 11:57 - 00242003 _____ () C:\Users\Lil' Hagbrain\Downloads\atiflash_417.zip 2014-08-10 11:29 - 2014-08-10 11:29 - 269338400 _____ (AMD Inc.) C:\Users\Lil' Hagbrain\Downloads\14-4-win7-win8-win8.1-64-dd-ccc-whql.exe 2014-08-10 11:20 - 2012-05-15 19:47 - 00000000 ____D () C:\ProgramData\Origin 2014-08-10 11:20 - 2012-05-15 19:47 - 00000000 ____D () C:\Program Files (x86)\Origin 2014-08-09 18:41 - 2012-05-17 16:05 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\UseNeXT 2014-08-09 15:27 - 2012-05-15 23:23 - 00000000 ____D () C:\Program Files (x86)\ASUS 2014-08-09 15:27 - 2012-05-15 18:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-08-09 14:11 - 2014-08-09 14:11 - 25347999 _____ () C:\Users\Lil' Hagbrain\Downloads\GPUTweak_2_5_2.zip 2014-08-09 14:11 - 2012-09-02 14:11 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-08-09 14:07 - 2014-08-09 14:07 - 01538989 _____ () C:\Users\Lil' Hagbrain\Downloads\ati_winflash_2.3.0.zip 2014-08-09 14:07 - 2014-08-09 14:07 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\ATIWINFLASH 2014-08-09 13:42 - 2012-05-15 21:25 - 01095157 _____ () C:\Windows\DirectX.log 2014-08-08 21:12 - 2012-05-15 15:36 - 00000000 ____D () C:\System&Analyse 2014-08-08 20:41 - 2014-08-08 20:41 - 320787824 _____ (AMD Inc.) C:\Users\Lil' Hagbrain\Downloads\amd-catalyst-14.7-rc1-windows-july9.exe 2014-08-08 20:26 - 2014-07-18 15:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\Futuremark 2014-08-08 20:14 - 2013-08-25 18:13 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-08 20:08 - 2014-08-08 20:08 - 00000000 ____D () C:\Users\Lil' Hagbrain\Documents\PCMark 8 2014-08-08 17:29 - 2014-08-08 17:29 - 00000000 ____D () C:\Program Files\Futuremark 2014-08-08 16:12 - 2014-08-08 16:12 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{2BA3B15D-34CF-4A2B-975C-E0656316C98D} 2014-08-08 15:58 - 2014-08-08 15:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{8F5DBC1C-460C-42E0-8EA0-2B84842B1B24} 2014-08-07 22:13 - 2012-05-15 19:58 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client 2014-08-07 16:17 - 2014-08-07 16:17 - 00002845 _____ () C:\Users\Lil' Hagbrain\Desktop\Unigine_Heaven_Benchmark_4.0_20140807_1617.html 2014-08-07 04:06 - 2014-08-13 15:59 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-07 04:01 - 2014-08-13 15:59 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-06 16:11 - 2014-07-27 11:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor 3.0 2014-08-06 16:11 - 2014-07-27 11:59 - 00000000 ____D () C:\Program Files\MSI Kombustor 3.0 2014-08-05 17:30 - 2014-08-05 17:30 - 00277648 _____ () C:\Windows\Minidump\080514-10171-01.dmp 2014-08-05 10:01 - 2014-08-05 10:01 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{EEDCD8FA-FF4A-4B2B-B11F-67024EF54A03} 2014-08-05 09:27 - 2014-08-05 09:27 - 00000000 ____D () C:\Users\Lil' Hagbrain\Desktop\Alte Firefox-Daten 2014-08-03 18:39 - 2013-12-22 19:51 - 00000000 ____D () C:\Users\Lil' Hagbrain\Documents\DayZ 2014-08-03 15:44 - 2012-05-15 21:19 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\Xfire 2014-08-03 15:41 - 2012-05-15 21:19 - 00000000 ____D () C:\ProgramData\Xfire 2014-08-03 15:40 - 2014-08-02 12:45 - 00154241 _____ () C:\Users\Lil' Hagbrain\Desktop\ROPAMD DISPLAY.lglcd 2014-08-02 14:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-08-02 12:42 - 2012-06-18 16:03 - 00000132 _____ () C:\Users\Lil' Hagbrain\AppData\Roaming\Adobe PNG Format CS5 Prefs 2014-07-31 19:14 - 2014-07-31 19:14 - 00277648 _____ () C:\Windows\Minidump\073114-10389-01.dmp 2014-07-31 18:46 - 2014-07-31 18:46 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab 2014-07-31 18:46 - 2013-09-01 14:39 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab 2014-07-31 17:55 - 2014-07-31 17:55 - 00001196 _____ () C:\Users\Lil' Hagbrain\Desktop\AIDA64 Extreme.lnk 2014-07-31 17:53 - 2012-05-15 18:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-30 16:47 - 2014-07-30 16:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-30 16:39 - 2014-07-30 16:39 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{EC600916-BC49-4AF1-907C-BA4591AADF16} 2014-07-29 22:19 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Performance 2014-07-29 20:58 - 2014-07-29 20:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{23D15F95-9C84-48C5-91EE-CEE46A04ACC1} 2014-07-29 20:55 - 2012-05-17 20:57 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-07-29 20:54 - 2014-07-29 20:54 - 00000541 _____ () C:\Users\Lil' Hagbrain\Desktop\Steam.lnk 2014-07-27 22:14 - 2014-07-27 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire 2014-07-27 22:14 - 2014-07-27 22:14 - 00000000 ____D () C:\Program Files (x86)\FinalWire 2014-07-27 18:04 - 2014-06-24 22:19 - 00000879 _____ () C:\Users\Public\Desktop\PVZ Garden Warfare.lnk 2014-07-27 13:32 - 2014-07-27 13:31 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{FEC58128-C051-49FE-B643-A32E640CE843} 2014-07-24 19:06 - 2014-07-24 17:18 - 00000000 ____D () C:\Users\Lil' Hagbrain\Downloads\Neuer Ordner 2014-07-24 14:11 - 2014-08-13 16:00 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-24 14:10 - 2014-08-13 16:00 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-24 14:10 - 2014-08-13 16:00 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 15399936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-24 14:09 - 2014-08-13 16:00 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-24 14:09 - 2014-08-13 16:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-24 14:09 - 2014-08-13 15:59 - 19279872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-24 14:09 - 2014-08-13 15:59 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-24 14:09 - 2014-08-13 15:59 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-07-24 14:09 - 2014-08-13 15:59 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-24 14:09 - 2014-08-13 15:59 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-07-24 14:09 - 2014-08-13 15:59 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-24 12:52 - 2014-08-13 16:00 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-24 12:52 - 2014-08-13 16:00 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-24 12:51 - 2014-08-13 16:00 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-24 12:51 - 2014-08-13 16:00 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-24 12:51 - 2014-08-13 15:59 - 14371328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-24 12:51 - 2014-08-13 15:59 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-24 12:51 - 2014-08-13 15:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-07-24 12:51 - 2014-08-13 15:59 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-07-24 12:51 - 2014-08-13 15:59 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-24 12:33 - 2014-08-13 16:00 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-24 12:29 - 2014-08-13 16:00 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-23 22:47 - 2012-06-07 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games 2014-07-21 22:11 - 2014-07-21 22:11 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{C32691E9-5373-464F-B658-2F1AABE8020A} 2014-07-20 14:36 - 2013-04-16 14:36 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-20 14:36 - 2012-05-15 20:09 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-20 14:36 - 2012-05-15 20:09 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-20 14:34 - 2013-05-17 19:46 - 00008029 _____ () C:\Users\Lil' Hagbrain\Documents\TombRaider.log 2014-07-20 12:31 - 2014-02-16 13:07 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\Raptr 2014-07-20 12:31 - 2014-02-16 13:07 - 00000000 ____D () C:\Program Files (x86)\Raptr 2014-07-20 12:26 - 2014-07-20 12:26 - 00056720 _____ () C:\Windows\SysWOW64\CCCInstall_201407201226596362.log 2014-07-19 14:30 - 2014-07-19 14:30 - 00001064 _____ () C:\Users\Lil' Hagbrain\Desktop\NFS14.lnk 2014-07-19 14:29 - 2014-07-19 14:17 - 00001274 _____ () C:\Users\Lil' Hagbrain\Desktop\Need For Speed The Run.lnk 2014-07-19 13:29 - 2014-07-19 13:29 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{EC15CB6D-9D46-481E-B76B-D9487947E3E8} 2014-07-18 21:02 - 2014-07-18 21:02 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{652AEF2F-74CC-442E-B2E6-D99C4A4C4D19} 2014-07-18 16:02 - 2014-07-18 15:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\Documents\3DMark 11 2014-07-18 15:59 - 2014-07-18 15:59 - 00000000 ____D () C:\Program Files (x86)\Futuremark 2014-07-18 15:58 - 2014-07-18 15:58 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\IsolatedStorage 2014-07-18 15:15 - 2014-07-18 15:15 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sapphire TRIXX 2014-07-18 15:15 - 2014-07-18 15:15 - 00000000 ____D () C:\Sapphire TRIXX 2014-07-18 15:10 - 2014-07-18 15:10 - 00002841 _____ () C:\Users\Lil' Hagbrain\Unigine_Heaven_Benchmark_4.0_20140718_1510.html 2014-07-18 14:26 - 2014-07-18 14:26 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-07-18 14:12 - 2014-07-18 14:12 - 00062044 _____ () C:\Windows\SysWOW64\CCCInstall_201407181412381851.log 2014-07-18 12:52 - 2014-07-18 12:52 - 00055860 _____ () C:\Windows\SysWOW64\CCCInstall_201407181252560169.log 2014-07-18 12:52 - 2014-07-18 12:52 - 00000000 ____D () C:\Program Files\AMD 2014-07-17 23:08 - 2013-07-16 15:31 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\Arma 3 2014-07-17 19:33 - 2014-07-17 19:22 - 00000000 ____D () C:\Users\Lil' Hagbrain\Heaven 2014-07-17 16:12 - 2014-07-17 16:11 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{4F3A50DD-CDBD-438A-85C3-547BC2DBEABB} 2014-07-16 18:09 - 2014-07-16 18:09 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{1E82F5E7-C7ED-4E2F-8FC8-7396501BF709} 2014-07-16 05:25 - 2014-08-13 15:59 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-07-16 05:23 - 2014-08-13 15:59 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-07-16 04:46 - 2014-08-13 15:59 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-07-16 04:46 - 2014-08-13 15:59 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-07-16 04:12 - 2014-08-13 15:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-15 22:33 - 2014-07-15 22:33 - 00000000 ____D () C:\Users\Lil' Hagbrain\AppData\Local\{C40A1708-F9A1-4A7E-9C96-BD3C310D2977} 2014-07-15 16:27 - 2014-05-25 21:14 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys Some content of TEMP: ==================== C:\Users\Lil' Hagbrain\AppData\Local\Temp\AMDCleanupUtility.exe C:\Users\Lil' Hagbrain\AppData\Local\Temp\avgnt.exe C:\Users\Lil' Hagbrain\AppData\Local\Temp\Cleanup.dll C:\Users\Lil' Hagbrain\AppData\Local\Temp\difxapi.dll C:\Users\Lil' Hagbrain\AppData\Local\Temp\msvcm80.dll C:\Users\Lil' Hagbrain\AppData\Local\Temp\msvcp80.dll C:\Users\Lil' Hagbrain\AppData\Local\Temp\msvcr80.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-08 17:57 ==================== End Of Log ============================ Grüße Hagbrain |
Themen zu Windows7x64 Ewiger Wilkommensbildschirm+MBAM startet nicht |
administrator, antivir, asus, bonjour, browser, explorer, file, firefox, flash player, launch, mozilla, opera, realtek, registry, rootkit, scan, software, starten, svchost.exe, system, taskleiste, teamspeak, temp, usb, windows, winlogon.exe |