Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Avast Schädliche Datei Blockade Mozilla Firefox

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 13.11.2014, 13:20   #1
Horncrowned
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Avast findet permanent Schädliche Datein und blockiert sie, sobald ich Mozilla Firefox öffne.
Avast findet aber keine Viren, aus diesem Grund bin ich Planlos.
Ich habe bemerkt, dass es meine Logindaten im Facebook nicht abspeichert, obwohl ich "Eingelogt bleiben" anklicke.
Das trifft eigentlich auf alle Seiten zu, wo man sich anmelden muss.
Unter anderen auch Yahoo, Last.fm und der gleichen.

Ich bitte um Hilfe

Alt 13.11.2014, 13:39   #2
Bootsektor
/// TB-Ausbilder
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox





Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
  • Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
  • Bitte kein Crossposting ( posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
  • Poste die Logfiles direkt in deinen Thread in Code-Tags.
  • Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Posten in Code Tags
Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:
  • Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [] CODE /CODE.
  • Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also CODE Logfile /CODE
  • Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 13.11.2014, 13:47   #3
Horncrowned
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Scans




FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014
Ran by Scotty (administrator) on SCOTT on 13-11-2014 14:45:20
Running from C:\Users\Scotty\Desktop
Loaded Profile: Scotty (Available profiles: Scotty)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) D:\Programme\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Windows\SysWOW64\SMITSC.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Avast Software) D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) D:\Programme\Avast\ng\ngservice.exe
(Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
() C:\Program Files\TOSHIBA\Hotkey\Hotkey\TCrdKBB.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
() C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe
(AVAST Software) D:\Programme\Avast\avastui.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(Valve Corporation) D:\SteamLibrary\Steam\Steam.exe
(Valve Corporation) D:\SteamLibrary\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\SteamLibrary\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13261456 2012-12-10] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [SRS Premium Sound 3D] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-19] (SRS Labs, Inc.)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-30] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-04] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] ()
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software)
HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-09-06] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShA64.dll (AVAST Software)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
SearchScopes: HKLM - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin HKU\S-1-5-21-549461420-2757155598-784121854-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: YoutubeAdBlocke - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\CnZ@P.edu [2014-11-12]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-07-19]
FF Extension: Download Status Bar - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2014-07-19]
FF Extension: Gutscheinaffe - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9220f99f-5b7d-4a4d-97ca-209991796400}.xpi [2014-07-19]
FF Extension: ImTranslator - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-07-19]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\Avast\WebRep\FF
FF Extension: Avast Online Security - D:\Programme\Avast\WebRep\FF [2014-11-01]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-01]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; D:\Programme\Avast\AvastSvc.exe [50344 2014-11-01] (AVAST Software)
R3 AvastVBoxSvc; D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-01] (Avast Software)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-24] (Microsoft Corporation)
R2 MBAMScheduler; D:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; D:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] ()
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-24] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
R2 SMITS; C:\windows\SysWOW64\SMITSC.exe [13312 2014-03-06] () [File not signed]
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-01] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-01] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3349984 2014-04-17] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R2 VBoxAswDrv; D:\Programme\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-11-01] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-13 14:45 - 2014-11-13 14:45 - 00014219 _____ () C:\Users\Scotty\Desktop\FRST.txt
2014-11-13 14:45 - 2014-11-13 14:45 - 00000000 ____D () C:\FRST
2014-11-13 14:43 - 2014-11-13 14:43 - 02116096 _____ (Farbar) C:\Users\Scotty\Desktop\FRST64.exe
2014-11-13 14:02 - 2014-11-13 14:02 - 05597734 _____ (Swearware) C:\Users\Scotty\Downloads\ComboFix.exe
2014-11-13 14:00 - 2014-11-13 14:00 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-13-00-07.064-AvastVBoxSVC.exe-3616.log
2014-11-13 13:51 - 2014-11-13 13:58 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-11-13 13:51 - 2014-11-13 13:51 - 00000762 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-13 13:51 - 2014-11-13 13:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-13 13:51 - 2014-11-13 13:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-13 13:51 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-11-13 13:51 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-11-13 13:51 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-11-13 13:50 - 2014-11-13 13:50 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-13 13:50 - 2014-11-13 13:50 - 00451205 _____ () C:\Users\Scotty\Downloads\Last.fm_Scrobbler_1.0.2.29.mmip
2014-11-13 13:38 - 2014-11-13 13:38 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-12-38-51.090-AvastVBoxSVC.exe-3436.log
2014-11-12 22:46 - 2014-11-12 22:46 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-12 22:46 - 2014-11-12 22:46 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-12 22:34 - 2014-11-12 22:34 - 00000204 _____ () C:\Users\Scotty\Desktop\File Search Engine FileTram.URL
2014-11-12 22:33 - 2014-11-12 22:33 - 00000217 _____ () C:\Users\Scotty\Desktop\Google.URL
2014-11-12 22:33 - 2014-11-12 22:33 - 00000212 _____ () C:\Users\Scotty\Desktop\Google Übersetzer.URL
2014-11-12 22:33 - 2014-11-12 22:33 - 00000208 _____ () C:\Users\Scotty\Desktop\FilesTube - Files Search Engine, Search & Download.URL
2014-11-12 22:33 - 2014-11-12 22:33 - 00000000 ____D () C:\Users\Scotty\Desktop\Musik
2014-11-12 22:32 - 2014-11-12 22:33 - 00000321 _____ () C:\Users\Scotty\Desktop\Facebook.URL
2014-11-12 22:32 - 2014-11-12 22:32 - 00000433 _____ () C:\Users\Scotty\Desktop\Chronik-Fotos - Hot Schönheiten aus dem Osten.URL
2014-11-12 22:32 - 2014-11-12 22:32 - 00000245 _____ () C:\Users\Scotty\Desktop\(179 ungelesen) – superscotttom – Yahoo Mail.URL
2014-11-12 22:32 - 2014-11-12 22:32 - 00000225 _____ () C:\Users\Scotty\Desktop\Ports, die Sie in Windows-Firewall öffnen müssen, um ein Multiplayer-Spiel von Age of Empires III zu spielen oder Gastgeber .URL
2014-11-12 22:32 - 2014-11-12 22:32 - 00000209 _____ () C:\Users\Scotty\Desktop\Startseite – Last.fm.URL
2014-11-12 22:22 - 2014-11-12 22:22 - 00000000 ____D () C:\ProgramData\4015569669760776887
2014-11-12 22:21 - 2014-11-12 22:21 - 00001631 _____ () C:\Users\Scotty\Desktop\MediaMonkey Gold.lnk
2014-11-12 22:02 - 2014-11-12 22:02 - 15204184 _____ (Ventis Media Inc. ) C:\Users\Scotty\Downloads\MediaMonkey_4.1.5.1719.exe
2014-11-12 21:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-12 21:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-12 21:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-12 21:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-12 21:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-12 21:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-12 21:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-12 21:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-12 21:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-12 21:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-12 21:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-12 21:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-12 21:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-12 21:12 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-12 21:12 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-12 21:12 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-12 21:12 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-12 21:12 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-12 21:11 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-12 21:11 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-12 21:11 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-12 21:11 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-12 21:11 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-12 21:11 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-12 21:11 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-12 21:11 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-12 21:11 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-12 21:11 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-12 21:11 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-12 21:11 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-12 21:11 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-12 21:11 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-12 21:11 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-12 21:11 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-12 21:11 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-12 21:11 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-12 21:11 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-12 21:11 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-12 21:11 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-12 21:11 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-12 21:11 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-12 21:11 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-12 21:11 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-12 21:11 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-12 21:10 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-12 21:10 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-12 21:10 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-12 21:10 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-12 21:10 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-12 21:10 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-12 21:10 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-12 21:10 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-12 21:10 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-12 21:09 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-12 21:09 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-12 21:09 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-12 21:09 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-12 21:09 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-12 21:09 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-12 21:09 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-12 21:09 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-12 21:09 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-12 21:09 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-12 21:09 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-12 21:09 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-12 21:09 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-12 21:09 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-12 21:09 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-12 21:09 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-12 21:09 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-12 21:09 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-12 21:09 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-12 21:09 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-12 21:09 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-12 21:09 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-12 21:09 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-12 21:09 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-12 21:09 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-12 21:09 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-12 21:09 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-12 21:09 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-12 21:09 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-12 21:09 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-12 21:09 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-12 21:09 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-12 21:09 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-12 21:09 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-12 21:09 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-12 21:09 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-12 21:09 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-12 21:09 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-12 21:09 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-12 21:09 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-12 21:09 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-12 21:09 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-12 21:09 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-12 21:09 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-12 21:09 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-12 21:09 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-12 21:09 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-12 21:09 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-12 21:09 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-12 21:09 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-12 21:09 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-12 21:09 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-12 21:09 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-12 21:09 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-12 21:09 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-12 21:09 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-12 21:09 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-12 21:09 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-12 21:09 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-12 21:09 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-12 21:09 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-12 21:09 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-12 21:09 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-12 21:09 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-12 21:09 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-12 21:09 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-12 21:09 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-12 21:09 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-12 21:09 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-12 21:09 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-12 21:09 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-12 21:09 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-12 21:09 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-12 21:09 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-12 21:09 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-12 21:09 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-12 21:09 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-12 21:09 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-12 21:09 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-12 21:09 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-12 21:09 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-12 21:09 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-12 21:09 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-12 21:09 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-12 21:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-12 21:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-12 21:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-12 21:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-12 21:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-12 21:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-12 21:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-12 21:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-12 21:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-12 21:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-12 21:09 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-12 21:09 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-12 21:09 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-12 21:09 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-12 21:09 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-12 21:09 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-12 21:09 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-12 21:09 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-12 21:09 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-12 21:09 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-12 21:09 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-12 21:09 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-12 21:09 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-12 21:09 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-12 21:09 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 21:09 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-12 21:09 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-12 21:09 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-12 21:09 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-12 21:09 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-12 21:09 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-12 21:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-12 21:09 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-12 21:09 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-12 21:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-12 21:09 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-12 21:09 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-12 21:09 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-11 15:50 - 2014-11-11 15:50 - 00000157 _____ () C:\WINDOWS\system32\2014-11-11-14-50-38.003-AvastVBoxSVC.exe-3684.log
2014-11-11 15:48 - 2014-11-11 15:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-11-11 15:44 - 2014-11-12 22:50 - 00000000 ____D () C:\AdwCleaner
2014-11-11 15:43 - 2014-11-11 15:43 - 02140160 _____ () C:\Users\Scotty\Desktop\AdwCleaner_4.101.exe
2014-11-08 19:37 - 2014-11-12 22:49 - 00000000 ____D () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7
2014-11-08 19:10 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Chromium
2014-11-08 19:09 - 2014-11-08 19:09 - 00000000 ____D () C:\Users\Scotty\AppData\Local\The Lord of the Rings Online
2014-11-08 18:54 - 2014-11-08 18:54 - 00000816 _____ () C:\Users\Public\Desktop\Play Euro Truck Simulator 2 Multiplayer.lnk
2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\Users\Scotty\Documents\ETS2MP
2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer
2014-11-08 18:03 - 2014-11-11 15:47 - 00000000 ____D () C:\Program Files (x86)\EnterDigital
2014-11-08 18:02 - 2014-11-08 18:02 - 00860576 _____ ( ) C:\Users\Scotty\Downloads\OpenofficeSetup.exe
2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieUserList
2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieSiteList
2014-11-08 15:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-11-08 15:05 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2014-11-08 15:04 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\Documents\The Lord of the Rings Online
2014-11-08 15:04 - 2014-11-08 15:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Turbine
2014-11-08 15:04 - 2014-11-08 15:04 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Akamai
2014-11-02 23:19 - 2014-11-02 23:19 - 00000097 _____ () C:\Users\Scotty\AppData\Roaming\LauncherSettings_live.cfg
2014-11-02 22:40 - 2014-11-02 22:40 - 00000040 _____ () C:\Users\Scotty\AppData\Roaming\TheHunterSettings_steam_live.cfg
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\Documents\theHunter
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunter
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\theHunter
2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunterSteam
2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\ProgramData\Hunter
2014-11-01 16:54 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-54-58.025-aswFe.exe-7940.log
2014-11-01 16:52 - 2014-11-13 13:51 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-01 16:52 - 2014-11-01 16:52 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-01 16:50 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-50-59.092-aswFe.exe-3560.log
2014-11-01 16:50 - 2014-11-01 16:51 - 00000157 _____ () C:\WINDOWS\system32\2014-11-01-15-50-58.091-AvastVBoxSVC.exe-5864.log
2014-11-01 16:50 - 2014-11-01 16:50 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\AVAST Software
2014-11-01 16:49 - 2014-11-04 16:09 - 00004144 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-11-01 16:49 - 2014-11-01 16:49 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-11-01 16:49 - 2014-11-01 16:49 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-11-01 16:49 - 2014-11-01 16:49 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00000838 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\system32\vbox
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-01 16:46 - 2014-11-01 16:46 - 131078000 _____ (AVAST Software) C:\Users\Scotty\Downloads\avast_free_antivirus_setup.exe
2014-10-27 00:14 - 2014-11-04 16:16 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Nero
2014-10-27 00:14 - 2014-11-04 16:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero
2014-10-27 00:14 - 2014-10-27 00:14 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero_AG
2014-10-24 17:58 - 2014-10-24 17:58 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-10-23 20:31 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-10-23 20:29 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-10-23 20:29 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-10-23 20:29 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-10-23 20:29 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-10-23 20:29 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-10-23 20:29 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-10-23 20:29 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-10-23 20:29 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-10-23 20:29 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-10-23 20:29 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-10-23 20:29 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-10-23 20:29 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-10-23 20:29 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-23 20:29 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-10-23 20:29 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-10-23 20:29 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-10-23 20:29 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-10-23 20:29 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-10-23 20:29 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-10-23 20:29 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-10-23 20:29 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-23 20:29 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-10-23 20:29 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-23 20:29 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-23 20:29 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-23 20:29 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-10-23 20:29 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-23 20:29 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-10-23 20:29 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-10-23 20:29 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-10-23 20:29 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-10-23 20:29 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-10-23 20:28 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-10-23 20:28 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-10-23 20:28 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-10-23 20:28 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-10-23 20:28 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-10-23 20:28 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-10-23 20:28 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-10-23 20:28 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-10-23 20:28 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-10-23 20:28 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-10-23 20:28 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-10-23 20:28 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-10-23 20:28 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-10-23 20:28 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-10-23 20:28 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-10-23 20:28 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-10-23 20:28 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-10-23 20:28 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-10-23 20:28 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-10-23 20:28 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-10-23 20:28 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-10-23 20:28 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-10-23 20:28 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-10-23 20:28 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-10-23 20:28 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-10-23 20:28 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-10-23 20:28 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-10-23 20:28 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-10-23 20:28 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-10-23 20:28 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-10-23 20:28 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-10-23 20:27 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-10-23 20:27 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2014-10-23 20:27 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-10-23 20:27 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-10-23 20:27 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-10-23 20:27 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-10-23 20:27 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-10-23 20:27 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-10-23 20:27 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-10-23 20:27 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-10-23 17:09 - 2014-11-13 14:40 - 00000000 ____D () C:\Users\Scotty\Documents\Euro Truck Simulator 2
2014-10-23 16:33 - 2014-10-23 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\arma 2
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\SIX Networks
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\SIX Networks
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\IsolatedStorage
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\ProgramData\SIX Networks
2014-10-23 16:32 - 2014-10-23 16:32 - 15225168 _____ (SIX Networks) C:\Users\Scotty\Downloads\withSIX-Play.exe
2014-10-23 16:32 - 2014-10-23 16:32 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Downloaded Installations
2014-10-23 15:26 - 2014-11-03 15:02 - 00025088 ___SH () C:\Users\Scotty\Desktop\Thumbs.db
2014-10-19 21:25 - 2014-10-19 21:25 - 856838616 _____ () C:\WINDOWS\MEMORY.DMP
2014-10-19 21:25 - 2014-10-19 21:25 - 00301704 _____ () C:\WINDOWS\Minidump\101914-11281-01.dmp
2014-10-19 21:25 - 2014-10-19 21:25 - 00000000 ____D () C:\WINDOWS\Minidump
2014-10-19 19:38 - 2014-10-19 19:40 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\MAGIX
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-10-19 19:29 - 2014-11-12 21:55 - 00000000 ____D () C:\Users\Scotty\Downloads\musik
2014-10-19 13:17 - 2014-10-19 13:17 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-10-19 13:17 - 2014-10-19 12:26 - 00000000 ___DC () C:\WINDOWS\Panther
2014-10-19 13:16 - 2014-10-19 13:16 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-10-19 13:16 - 2014-10-19 13:16 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-10-19 13:16 - 2014-10-19 13:16 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\MSBuild
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-10-19 13:15 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-10-19 12:27 - 2014-10-19 12:27 - 00002088 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-10-19 12:26 - 2014-10-19 12:26 - 00001461 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-19 12:26 - 2014-10-19 12:26 - 00000020 ___SH () C:\Users\Scotty\ntuser.ini
2014-10-19 12:23 - 2014-10-19 12:23 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-10-19 12:21 - 2014-10-19 12:21 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-19 12:20 - 2014-10-23 22:34 - 00000000 ____D () C:\Users\Scotty
2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Vorlagen
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Startmenü
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Netzwerkumgebung
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Lokale Einstellungen
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Eigene Dateien
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Druckumgebung
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Musik
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Bilder
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Verlauf
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Anwendungsdaten
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Anwendungsdaten
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-10-19 12:18 - 2014-11-13 13:57 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-19 12:18 - 2014-11-13 13:49 - 01841869 _____ () C:\WINDOWS\WindowsUpdate.log
2014-10-19 12:18 - 2014-10-19 12:21 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-10-19 12:18 - 2014-10-19 12:18 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Synaptics
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Realtek
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-10-19 12:18 - 2013-12-23 11:34 - 00061216 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-10-19 12:18 - 2013-12-23 11:34 - 00053024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-10-19 12:18 - 2013-11-05 06:39 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-10-19 12:17 - 2014-11-13 13:58 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.dll
2014-10-19 12:17 - 2014-11-13 13:58 - 00017408 _____ () C:\WINDOWS\system32\rpcnetp.exe
2014-10-19 12:17 - 2014-11-13 13:57 - 00029336 _____ () C:\WINDOWS\system32\wpbbin.exe
2014-10-19 12:17 - 2014-11-13 13:57 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-13 14:03 - 2014-07-18 13:56 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-549461420-2757155598-784121854-1001
2014-11-13 14:02 - 2014-09-24 07:17 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-13 14:02 - 2014-09-24 06:43 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat
2014-11-13 14:02 - 2014-09-24 06:43 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat
2014-11-13 14:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-13 13:58 - 2014-07-18 14:06 - 00069792 _____ (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.dll
2014-11-13 13:57 - 2014-09-23 22:06 - 00017540 _____ () C:\WINDOWS\PFRO.log
2014-11-13 13:57 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-13 13:36 - 2013-08-22 15:44 - 00338184 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-13 06:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-13 01:46 - 2014-07-20 23:47 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-13 01:46 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-13 01:44 - 2014-07-20 23:47 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-12 22:45 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-11-11 15:44 - 2012-07-26 06:26 - 00000226 _____ () C:\WINDOWS\win.ini
2014-11-09 20:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy
2014-11-01 16:48 - 2014-07-19 16:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-30 17:28 - 2014-10-08 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\Neuer Ordner
2014-10-30 12:25 - 2014-09-01 20:48 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-10-30 01:55 - 2014-09-24 08:46 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-10-30 01:55 - 2014-09-24 08:46 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-26 22:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-10-25 02:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-10-24 18:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-10-24 17:58 - 2014-07-17 17:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Packages
2014-10-24 04:09 - 2013-08-22 15:46 - 00289910 _____ () C:\WINDOWS\setupact.log
2014-10-23 16:33 - 2014-08-08 19:02 - 00000000 ____D () C:\Users\Scotty\Documents\Arma 3
2014-10-19 21:28 - 2014-07-18 14:06 - 00069792 ____N (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.exe
2014-10-19 21:23 - 2014-08-01 20:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Last.fm
2014-10-19 19:54 - 2014-07-19 18:37 - 00000000 ____D () C:\Users\Scotty\AppData\Local\CDWLauncher
2014-10-19 19:54 - 2014-07-18 16:27 - 00000000 ____D () C:\Users\Scotty\Documents\My Games
2014-10-19 19:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-10-19 19:40 - 2012-10-19 01:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-19 13:17 - 2014-07-26 12:05 - 00000000 __SHD () C:\Recovery
2014-10-19 13:17 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-10-19 12:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-10-19 12:23 - 2014-07-26 10:40 - 00008125 _____ () C:\WINDOWS\comsetup.log
2014-10-19 12:23 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-10-19 12:23 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-10-19 12:23 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\de
2014-10-19 12:21 - 2014-08-08 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2014-10-19 12:21 - 2014-08-05 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2014-10-19 12:21 - 2014-08-01 20:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm
2014-10-19 12:21 - 2014-07-26 08:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-10-19 12:21 - 2014-07-18 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-10-19 12:21 - 2014-07-04 14:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\tr
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sv
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sk
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\ru
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pt
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pl
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\no
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\hu
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\fi
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\es
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\el
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\da
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\cs
2014-10-19 12:21 - 2014-07-04 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
2014-10-19 12:21 - 2014-07-04 14:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-10-19 12:21 - 2014-07-04 14:04 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-10-19 12:21 - 2014-07-04 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-10-19 12:21 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-10-19 12:21 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Cursors
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-10-19 12:21 - 2012-10-19 01:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2014-10-19 12:21 - 2012-10-19 01:17 - 00000000 ____D () C:\ProgramData\PRICache
2014-10-19 12:21 - 2012-08-01 18:03 - 00000000 ____D () C:\WINDOWS\system32\nl
2014-10-19 12:21 - 2012-08-01 17:54 - 00000000 ____D () C:\WINDOWS\system32\it
2014-10-19 12:21 - 2012-08-01 17:46 - 00000000 ____D () C:\WINDOWS\system32\fr
2014-10-19 12:21 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2014-10-19 12:20 - 2014-08-10 17:21 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-10-19 12:18 - 2014-07-04 14:01 - 00000000 ____D () C:\Intel
2014-10-19 12:18 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-10-19 12:13 - 2014-07-17 17:40 - 01952667 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-10-19 11:57 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent

Some content of TEMP:
====================
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll
C:\Users\Scotty\AppData\Local\Temp\awesomium_setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-13 01:44

==================== End Of Log ============================
         
--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2014
Ran by Scotty at 2014-11-13 14:45:45
Running from C:\Users\Scotty\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (Obsolete) (HKLM-x32\...\Steam App 219540) (Version:  - )
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.6 - Atheros Communications Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software)
Awesomium Redistributable (HKLM-x32\...\{5BCB064B-9F65-4E15-BAFB-669E72E54FD9}) (Version: 1.7.4.2 - SIX Networks GmbH)
Call of Juarez Gunslinger (HKLM-x32\...\Steam App 204450) (Version:  - Techland)
Combat Arms EU (HKLM-x32\...\Combat Arms EU) (Version:  - )
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version:  - Relic Entertainment)
Euro Truck Simulator 2 Multiplayer 0.1.0.9 Alpha R3 (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.0.9 Alpha R3 - ETS2MP Team)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
Far Cry® 3 Blood Dragon (HKLM-x32\...\Steam App 233270) (Version:  - Ubisoft Montreal)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version:  - Reto-Moto)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33268) (Version: 3.6.1.33268.15 - Intel)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{8e41467d-297e-496d-8b0f-e771b6c87c06}) (Version: 16.11.0 - Intel Corporation)
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Mount & Blade (HKLM-x32\...\Steam App 22100) (Version:  - TaleWorlds Entertainment)
Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
Mount & Blade: With Fire and Sword (HKLM-x32\...\Steam App 48720) (Version:  - TaleWorlds Entertainment)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1 - Mozilla)
Nero 12 Essentials Toshiba (HKLM-x32\...\{2EF76291-8647-46F0-89D8-0AA8B72A5420}) (Version: 12.0.00600 - Nero AG)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.51.0 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 327.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.65 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.65 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0604 - NVIDIA Corporation)
Painkiller: Black Edition (HKLM-x32\...\Steam App 39530) (Version:  - People Can Fly)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6794 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.)
Risen (HKLM-x32\...\Steam App 40300) (Version:  - Piranha – Bytes)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version:  - Piranha Bytes)
Saints Row 2 (HKLM-x32\...\Steam App 9480) (Version:  - Volition)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Sniper Elite 3 (HKLM-x32\...\Steam App 238090) (Version:  - Rebellion)
SRS Premium Sound Control Panel (HKLM\...\{94F03B8E-CB73-4653-AFE9-79112C01FED2}) (Version: 1.12.5000 - SRS Labs, Inc.)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.5 - Synaptics Incorporated)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version:  - Turbine, Inc.)
theHunter (HKLM-x32\...\Steam App 253710) (Version:  - Expansive Worlds)
TOSHIBA Blu-ray Disc Player (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 1.0.5.207  - Toshiba Corporation)
TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.00.6625.6402 - Toshiba Corporation)
TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.5.1.1 - Toshiba Corporation)
TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA)
TOSHIBA Password Utility (HKLM-x32\...\{B1786E63-2127-42C9-95A3-146E5F727BF1}) (Version: v1.0.0.9 - TOSHIBA Corporation)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.8.17.640104 - Toshiba Corporation)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM\...\{11A5F0A4-5738-4857-9CEA-216E4F78BEB5}) (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0013 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.5.1 - Toshiba Europe GmbH)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.3.3417 - TOSHIBA Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 2.1 - Ubisoft)
Welcome App (Start-up experience) (x32 Version: 12.0.14000 - Nero AG) Hidden
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

26-10-2014 21:03:47 Windows Update
01-11-2014 15:48:41 avast! antivirus system restore point
02-11-2014 21:37:03 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert
08-11-2014 14:05:15 DirectX wurde installiert
13-11-2014 00:44:27 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {2B2120BC-BFED-4F3B-B65B-D6168C49D53B} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2012-07-27] (TOSHIBA Corporation)
Task: {5FB4302F-346E-4919-8CDE-704090A3F00A} - System32\Tasks\avast! Emergency Update => D:\Programme\Avast\AvastEmUpdate.exe [2014-11-01] (AVAST Software)
Task: {6DD9D18D-A117-43A5-A9D6-4AD3E4801B96} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-13] (Microsoft Corporation)
Task: {8A09220B-49F8-4EC6-A1E0-88A3CE316A43} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {988DD466-E223-4BE3-9644-79286E172A0C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-01] (Adobe Systems Incorporated)
Task: {F742380F-F7C4-452A-8F71-33DD759FFFF6} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2012-09-25] (Toshiba Europe GmbH)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (whitelisted) =============

2014-08-01 21:14 - 2014-03-06 11:37 - 00013312 _____ () C:\windows\SysWOW64\SMITSC.exe
2014-11-01 16:49 - 2014-11-01 16:49 - 00388208 _____ () D:\Programme\Avast\ng\vbox\VBoxDDU.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 05846160 _____ () D:\Programme\Avast\ng\vbox\VBoxRT.dll
2012-08-30 13:34 - 2012-08-30 13:34 - 02609064 _____ () C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
2012-07-18 17:38 - 2012-07-18 17:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2012-07-18 17:38 - 2012-07-18 17:38 - 00049064 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnZ.dll
2011-08-12 13:57 - 2011-08-12 13:57 - 00437632 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe
2012-08-13 18:13 - 2012-08-13 18:13 - 00018344 _____ () C:\Program Files\TOSHIBA\Teco\TecoMUI.dll
2012-08-04 14:01 - 2012-08-04 14:01 - 00213136 _____ () C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
2014-11-13 13:38 - 2014-11-13 13:38 - 02902016 _____ () D:\Programme\Avast\defs\14111300\algo.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 04491192 _____ () D:\Programme\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 38561576 _____ () D:\Programme\Avast\libcef.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 01171456 _____ () D:\SteamLibrary\Steam\libavcodec-56.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00332800 _____ () D:\SteamLibrary\Steam\libavresample-2.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00442368 _____ () D:\SteamLibrary\Steam\libavutil-54.dll
2014-11-13 13:45 - 2014-11-11 19:47 - 00774656 _____ () D:\SteamLibrary\Steam\SDL2.dll
2014-11-13 13:45 - 2014-11-12 02:04 - 02227904 _____ () D:\SteamLibrary\Steam\video.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00403968 _____ () D:\SteamLibrary\Steam\libavformat-56.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00485888 _____ () D:\SteamLibrary\Steam\libswscale-3.dll
2014-11-13 13:45 - 2014-11-12 02:04 - 00690880 _____ () D:\SteamLibrary\Steam\bin\chromehtml.DLL
2014-11-13 13:45 - 2014-11-11 19:48 - 34589888 _____ () D:\SteamLibrary\Steam\bin\libcef.dll
2014-11-13 13:45 - 2014-11-11 19:48 - 00837824 _____ () D:\SteamLibrary\Steam\bin\ffmpegsumo.dll
2014-11-12 22:46 - 2014-11-07 01:09 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-549461420-2757155598-784121854-500 - Administrator - Disabled)
ASPNET (S-1-5-21-549461420-2757155598-784121854-1002 - Limited - Enabled)
Gast (S-1-5-21-549461420-2757155598-784121854-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-549461420-2757155598-784121854-1004 - Limited - Enabled)
Scotty (S-1-5-21-549461420-2757155598-784121854-1001 - Administrator - Enabled) => C:\Users\Scotty

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/13/2014 04:05:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "\\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (11/13/2014 04:05:52 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (11/13/2014 01:44:28 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service MaintainerSvc6.37.565328 since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (11/12/2014 11:01:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.3.9600.17284 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b50

Startzeit: 01cffe8a2b43c1de

Endzeit: 0

Anwendungspfad: C:\WINDOWS\Explorer.EXE

Berichts-ID: 758454ec-6ab7-11e4-be94-6036dd09dd90

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/12/2014 10:45:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.17344 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1010

Startzeit: 01cffec1cacab1b7

Endzeit: 5

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID: 2e1508fd-6ab5-11e4-be94-6036dd09dd90

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/12/2014 10:23:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm MediaMonkey_4.1.5.1719.tmp, Version 51.1052.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 27c8

Startzeit: 01cffebdc5a08de8

Endzeit: 4294967295

Anwendungspfad: C:\Users\Scotty\AppData\Local\Temp\is-L781V.tmp\MediaMonkey_4.1.5.1719.tmp

Berichts-ID: 154617a2-6ab2-11e4-be94-6036dd09dd90

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/12/2014 10:22:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.3.5422, Zeitstempel: 0x545b5277
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.3.5422, Zeitstempel: 0x545b2aeb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x1dc0
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5

Error: (11/10/2014 08:14:04 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "\\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (11/10/2014 08:14:03 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (11/09/2014 03:14:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: eurotrucks2.exe, Version: 1.13.4.0, Zeitstempel: 0x5437aff9
Name des fehlerhaften Moduls: eurotrucks2.exe, Version: 1.13.4.0, Zeitstempel: 0x5437aff9
Ausnahmecode: 0xc0000094
Fehleroffset: 0x005ca645
ID des fehlerhaften Prozesses: 0x37dc
Startzeit der fehlerhaften Anwendung: 0xeurotrucks2.exe0
Pfad der fehlerhaften Anwendung: eurotrucks2.exe1
Pfad des fehlerhaften Moduls: eurotrucks2.exe2
Berichtskennung: eurotrucks2.exe3
Vollständiger Name des fehlerhaften Pakets: eurotrucks2.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: eurotrucks2.exe5


System errors:
=============
Error: (11/13/2014 01:57:54 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (11/13/2014 01:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/13/2014 01:46:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (11/13/2014 01:36:27 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (11/12/2014 04:05:47 PM) (Source: MEIx64) (EventID: 3) (User: )
Description: Intel(R) Management Engine Interface driver has failed to perform handshake with the Firmware.

Error: (11/11/2014 03:48:19 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (11/11/2014 03:48:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (11/11/2014 03:48:03 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (11/11/2014 03:48:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" ist vom Dienst "Windows Search" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1069

Error: (11/11/2014 03:48:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069


Microsoft Office Sessions:
=========================
Error: (11/13/2014 04:05:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: \\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\Falscher Parameter. (0x80070057)

Error: (11/13/2014 04:05:52 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: SystemFalscher Parameter. (0x80070057)

Error: (11/13/2014 01:44:28 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service MaintainerSvc6.37.565328 since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (11/12/2014 11:01:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.3.9600.172841b5001cffe8a2b43c1de0C:\WINDOWS\Explorer.EXE758454ec-6ab7-11e4-be94-6036dd09dd90

Error: (11/12/2014 10:45:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe11.0.9600.17344101001cffec1cacab1b75C:\Program Files\Internet Explorer\iexplore.exe2e1508fd-6ab5-11e4-be94-6036dd09dd90

Error: (11/12/2014 10:23:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: MediaMonkey_4.1.5.1719.tmp51.1052.0.027c801cffebdc5a08de84294967295C:\Users\Scotty\AppData\Local\Temp\is-L781V.tmp\MediaMonkey_4.1.5.1719.tmp154617a2-6ab2-11e4-be94-6036dd09dd90

Error: (11/12/2014 10:22:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.0.3.5422545b5277mozalloc.dll33.0.3.5422545b2aeb80000003000014251dc001cffeb4fe28190dC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll0347e269-6ab2-11e4-be94-6036dd09dd90

Error: (11/10/2014 08:14:04 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: \\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\Falscher Parameter. (0x80070057)

Error: (11/10/2014 08:14:03 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: SystemFalscher Parameter. (0x80070057)

Error: (11/09/2014 03:14:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: eurotrucks2.exe1.13.4.05437aff9eurotrucks2.exe1.13.4.05437aff9c0000094005ca64537dc01cffc2767ec156bD:\SteamLibrary\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeD:\SteamLibrary\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeba024e75-681a-11e4-be93-6036dd09dd90


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Percentage of memory in use: 12%
Total physical RAM: 16336.22 MB
Available physical RAM: 14283.29 MB
Total Pagefile: 32720.22 MB
Available Pagefile: 30306.07 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (TI30995500B) (Fixed) (Total:108.08 GB) (Free:58.26 GB) NTFS
Drive d: (HDD) (Fixed) (Total:931.51 GB) (Free:259.88 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: EFA10BF8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
__________________

Alt 14.11.2014, 01:24   #4
Bootsektor
/// TB-Ausbilder
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Hallo,

hast du da auch ne Meldung von Avast zu?

Ist das Absicht, dass du Chrome als einen Browser für Entwickler betreibst?

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: YoutubeAdBlocke - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\CnZ@P.edu [2014-11-12]
emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad.
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language Deutsch aus.
  • Klicke im Anschluss auf Suchlauf, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf jetzt starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Aktionen anwenden.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3
Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Alt 14.11.2014, 05:33   #5
Horncrowned
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Ich nutze kein Chrome und Avast findet nichts.

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-11-2014 02
Ran by Scotty at 2014-11-14 06:17:49 Run:1
Running from C:\Users\Scotty\Desktop
Loaded Profiles: Scotty &  (Available profiles: Scotty)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: YoutubeAdBlocke - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\CnZ@P.edu [2014-11-12]
emptytemp:
         
*****************

C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully.
C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\CnZ@P.edu => Moved successfully.
EmptyTemp: => Removed 741.8 MB temporary data.


The system needed a reboot. 

==== End of Fixlog ====
         
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org


Update, 14.11.2014 06:15:28, SYSTEM, SCOTT, Scheduler, Malware Database, 2014.11.13.9, 2014.11.14.1, 
Protection, 14.11.2014 06:15:28, SYSTEM, SCOTT, Protection, Refresh, Starting, 
Protection, 14.11.2014 06:15:28, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopping, 
Protection, 14.11.2014 06:15:28, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopped, 
Protection, 14.11.2014 06:19:00, SYSTEM, SCOTT, Protection, Malware Protection, Starting, 
Protection, 14.11.2014 06:19:00, SYSTEM, SCOTT, Protection, Malware Protection, Started, 
Protection, 14.11.2014 06:19:00, SYSTEM, SCOTT, Protection, Malicious Website Protection, Starting, 
Protection, 14.11.2014 06:19:00, SYSTEM, SCOTT, Protection, Malicious Website Protection, Started, 
Protection, 14.11.2014 06:19:56, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopping, 
Protection, 14.11.2014 06:19:56, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopped, 
Protection, 14.11.2014 06:19:56, SYSTEM, SCOTT, Protection, Malware Protection, Stopping, 
Protection, 14.11.2014 06:19:56, SYSTEM, SCOTT, Protection, Malware Protection, Stopped, 
Protection, 14.11.2014 06:20:43, SYSTEM, SCOTT, Protection, Malware Protection, Starting, 
Protection, 14.11.2014 06:20:43, SYSTEM, SCOTT, Protection, Malware Protection, Started, 
Protection, 14.11.2014 06:20:43, SYSTEM, SCOTT, Protection, Malicious Website Protection, Starting, 
Protection, 14.11.2014 06:20:43, SYSTEM, SCOTT, Protection, Malicious Website Protection, Started, 
Update, 14.11.2014 06:20:46, SYSTEM, SCOTT, Manual, Rootkit Database, 2014.9.18.1, 2014.11.12.1, 
Update, 14.11.2014 06:20:47, SYSTEM, SCOTT, Manual, Malware Database, 2014.9.19.5, 2014.11.14.1, 
Protection, 14.11.2014 06:20:47, SYSTEM, SCOTT, Protection, Refresh, Starting, 
Protection, 14.11.2014 06:20:47, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopping, 
Protection, 14.11.2014 06:20:47, SYSTEM, SCOTT, Protection, Malicious Website Protection, Stopped, 
Protection, 14.11.2014 06:20:52, SYSTEM, SCOTT, Protection, Refresh, Success, 
Protection, 14.11.2014 06:20:52, SYSTEM, SCOTT, Protection, Malicious Website Protection, Starting, 
Protection, 14.11.2014 06:20:52, SYSTEM, SCOTT, Protection, Malicious Website Protection, Started, 
Scan, 14.11.2014 06:27:18, SYSTEM, SCOTT, Manual, Start: % 1 "% 2", Dauer: % 1 min 4 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, "% 1" nicht-Malware-Erkennung, 
Protection, 14.11.2014 06:28:15, SYSTEM, SCOTT, Protection, Malware Protection, Starting, 
Protection, 14.11.2014 06:28:15, SYSTEM, SCOTT, Protection, Malware Protection, Started, 
Protection, 14.11.2014 06:28:15, SYSTEM, SCOTT, Protection, Malicious Website Protection, Starting, 
Protection, 14.11.2014 06:28:17, SYSTEM, SCOTT, Protection, Malicious Website Protection, Started, 

(end)
         

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2014 02
Ran by Scotty (administrator) on SCOTT on 14-11-2014 06:30:54
Running from C:\Users\Scotty\Desktop
Loaded Profile: Scotty (Available profiles: Scotty)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) D:\Programme\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Absolute Software Corp.) C:\Windows\SysWOW64\rpcnet.exe
() C:\Windows\SysWOW64\SMITSC.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Avast Software) D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) D:\Programme\Avast\ng\ngservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
() C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
() C:\Program Files\TOSHIBA\Hotkey\Hotkey\TCrdKBB.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe
(AVAST Software) D:\Programme\Avast\avastui.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13261456 2012-12-10] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [SRS Premium Sound 3D] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-19] (SRS Labs, Inc.)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-30] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-04] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] ()
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software)
HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-09-06] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
SearchScopes: HKLM - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin HKU\S-1-5-21-549461420-2757155598-784121854-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Deutsch (DE) Language Pack - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-07-19]
FF Extension: Download Status Bar - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2014-07-19]
FF Extension: Gutscheinaffe - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9220f99f-5b7d-4a4d-97ca-209991796400}.xpi [2014-07-19]
FF Extension: ImTranslator - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-07-19]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\Avast\WebRep\FF
FF Extension: Avast Online Security - D:\Programme\Avast\WebRep\FF [2014-11-01]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-01]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; D:\Programme\Avast\AvastSvc.exe [50344 2014-11-01] (AVAST Software)
R3 AvastVBoxSvc; D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-01] (Avast Software)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-24] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] ()
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-24] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
R2 SMITS; C:\windows\SysWOW64\SMITSC.exe [13312 2014-03-06] () [File not signed]
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-01] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-01] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-14] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3349984 2014-04-17] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R2 VBoxAswDrv; D:\Programme\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-11-01] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-14 06:30 - 2014-11-14 06:30 - 00000157 _____ () C:\WINDOWS\system32\2014-11-14-05-30-20.025-AvastVBoxSVC.exe-3488.log
2014-11-14 06:29 - 2014-11-14 06:29 - 00002940 _____ () C:\Users\Scotty\Desktop\MB.txt
2014-11-14 06:21 - 2014-11-14 06:30 - 00000000 ____D () C:\Users\Scotty\Desktop\Neuer Ordner
2014-11-14 06:21 - 2014-11-14 06:21 - 00000157 _____ () C:\WINDOWS\system32\2014-11-14-05-21-10.036-AvastVBoxSVC.exe-4312.log
2014-11-14 06:20 - 2014-11-14 06:28 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-11-14 06:20 - 2014-11-14 06:20 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025(1).exe
2014-11-14 06:20 - 2014-11-14 06:20 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-14 06:20 - 2014-11-14 06:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-14 06:20 - 2014-11-14 06:20 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-11-14 06:20 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-11-14 06:20 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-11-14 06:20 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-11-14 06:17 - 2014-11-14 06:17 - 00000000 ____D () C:\Users\Scotty\Desktop\FRST-OlderVersion
2014-11-13 20:25 - 2014-11-13 20:25 - 00462912 _____ () C:\Users\Scotty\Downloads\Media_Monkesy_Gold_v_3.2.x.full.rar.exe
2014-11-13 15:34 - 2014-11-13 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm
2014-11-13 15:30 - 2014-11-13 15:30 - 00001086 _____ () C:\Users\Scotty\Desktop\WoTLauncher - Verknüpfung.lnk
2014-11-13 15:29 - 2014-11-13 15:29 - 00000284 _____ () C:\Users\Scotty\Desktop\Avast Schädliche Datei Blockade Mozilla Firefox - Trojaner-Board.URL
2014-11-13 14:45 - 2014-11-14 06:30 - 00013542 _____ () C:\Users\Scotty\Desktop\FRST.txt
2014-11-13 14:45 - 2014-11-14 06:30 - 00000000 ____D () C:\FRST
2014-11-13 14:45 - 2014-11-13 14:46 - 00027816 _____ () C:\Users\Scotty\Desktop\Addition.txt
2014-11-13 14:43 - 2014-11-14 06:17 - 02116608 _____ (Farbar) C:\Users\Scotty\Desktop\FRST64.exe
2014-11-13 14:02 - 2014-11-13 14:02 - 05597734 _____ (Swearware) C:\Users\Scotty\Downloads\ComboFix.exe
2014-11-13 14:00 - 2014-11-13 14:00 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-13-00-07.064-AvastVBoxSVC.exe-3616.log
2014-11-13 13:51 - 2014-11-13 13:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-13 13:50 - 2014-11-13 13:50 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-13 13:50 - 2014-11-13 13:50 - 00451205 _____ () C:\Users\Scotty\Downloads\Last.fm_Scrobbler_1.0.2.29.mmip
2014-11-13 13:38 - 2014-11-13 13:38 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-12-38-51.090-AvastVBoxSVC.exe-3436.log
2014-11-12 22:46 - 2014-11-12 22:46 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-12 22:46 - 2014-11-12 22:46 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-12 22:33 - 2014-11-12 22:33 - 00000212 _____ () C:\Users\Scotty\Desktop\Google Übersetzer.URL
2014-11-12 22:33 - 2014-11-12 22:33 - 00000000 ____D () C:\Users\Scotty\Desktop\Musik
2014-11-12 22:22 - 2014-11-12 22:22 - 00000000 ____D () C:\ProgramData\4015569669760776887
2014-11-12 22:02 - 2014-11-12 22:02 - 15204184 _____ (Ventis Media Inc. ) C:\Users\Scotty\Downloads\MediaMonkey_4.1.5.1719.exe
2014-11-12 21:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-12 21:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-12 21:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-12 21:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-12 21:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-12 21:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-12 21:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-12 21:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-12 21:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-12 21:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-12 21:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-12 21:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-12 21:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-12 21:12 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-12 21:12 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-12 21:12 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-12 21:12 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-12 21:12 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-12 21:11 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-12 21:11 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-12 21:11 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-12 21:11 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-12 21:11 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-12 21:11 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-12 21:11 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-12 21:11 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-12 21:11 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-12 21:11 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-12 21:11 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-12 21:11 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-12 21:11 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-12 21:11 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-12 21:11 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-12 21:11 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-12 21:11 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-12 21:11 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-12 21:11 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-12 21:11 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-12 21:11 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-12 21:11 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-12 21:11 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-12 21:11 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-12 21:11 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-12 21:11 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-12 21:10 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-12 21:10 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-12 21:10 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-12 21:10 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-12 21:10 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-12 21:10 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-12 21:10 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-12 21:10 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-12 21:10 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-12 21:09 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-12 21:09 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-12 21:09 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-12 21:09 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-12 21:09 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-12 21:09 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-12 21:09 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-12 21:09 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-12 21:09 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-12 21:09 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-12 21:09 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-12 21:09 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-12 21:09 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-12 21:09 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-12 21:09 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-12 21:09 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-12 21:09 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-12 21:09 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-12 21:09 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-12 21:09 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-12 21:09 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-12 21:09 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-12 21:09 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-12 21:09 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-12 21:09 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-12 21:09 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-12 21:09 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-12 21:09 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-12 21:09 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-12 21:09 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-12 21:09 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-12 21:09 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-12 21:09 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-12 21:09 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-12 21:09 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-12 21:09 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-12 21:09 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-12 21:09 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-12 21:09 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-12 21:09 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-12 21:09 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-12 21:09 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-12 21:09 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-12 21:09 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-12 21:09 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-12 21:09 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-12 21:09 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-12 21:09 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-12 21:09 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-12 21:09 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-12 21:09 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-12 21:09 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-12 21:09 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-12 21:09 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-12 21:09 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-12 21:09 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-12 21:09 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-12 21:09 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-12 21:09 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-12 21:09 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-12 21:09 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-12 21:09 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-12 21:09 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-12 21:09 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-12 21:09 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-12 21:09 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-12 21:09 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-12 21:09 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-12 21:09 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-12 21:09 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-12 21:09 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-12 21:09 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-12 21:09 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-12 21:09 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-12 21:09 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-12 21:09 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-12 21:09 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-12 21:09 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-12 21:09 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-12 21:09 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-12 21:09 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-12 21:09 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-12 21:09 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-12 21:09 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-12 21:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-12 21:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-12 21:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-12 21:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-12 21:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-12 21:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-12 21:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-12 21:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-12 21:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-12 21:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-12 21:09 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-12 21:09 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-12 21:09 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-12 21:09 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-12 21:09 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-12 21:09 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-12 21:09 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-12 21:09 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-12 21:09 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-12 21:09 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-12 21:09 - 2014-08-31 01:17 - 00148800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-12 21:09 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-12 21:09 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-12 21:09 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-12 21:09 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 21:09 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-12 21:09 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-12 21:09 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-12 21:09 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-12 21:09 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-12 21:09 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-12 21:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-12 21:09 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-12 21:09 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-12 21:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-12 21:09 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-12 21:09 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-12 21:09 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-11 15:50 - 2014-11-11 15:50 - 00000157 _____ () C:\WINDOWS\system32\2014-11-11-14-50-38.003-AvastVBoxSVC.exe-3684.log
2014-11-11 15:48 - 2014-11-14 06:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-11-11 15:44 - 2014-11-12 22:50 - 00000000 ____D () C:\AdwCleaner
2014-11-11 15:43 - 2014-11-11 15:43 - 02140160 _____ () C:\Users\Scotty\Desktop\AdwCleaner_4.101.exe
2014-11-08 19:37 - 2014-11-12 22:49 - 00000000 ____D () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7
2014-11-08 19:10 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Chromium
2014-11-08 19:09 - 2014-11-08 19:09 - 00000000 ____D () C:\Users\Scotty\AppData\Local\The Lord of the Rings Online
2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\Users\Scotty\Documents\ETS2MP
2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer
2014-11-08 18:03 - 2014-11-11 15:47 - 00000000 ____D () C:\Program Files (x86)\EnterDigital
2014-11-08 18:02 - 2014-11-08 18:02 - 00860576 _____ ( ) C:\Users\Scotty\Downloads\OpenofficeSetup.exe
2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieUserList
2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieSiteList
2014-11-08 15:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-11-08 15:05 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2014-11-08 15:04 - 2014-11-14 06:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Akamai
2014-11-08 15:04 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\Documents\The Lord of the Rings Online
2014-11-08 15:04 - 2014-11-08 15:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Turbine
2014-11-02 23:19 - 2014-11-02 23:19 - 00000097 _____ () C:\Users\Scotty\AppData\Roaming\LauncherSettings_live.cfg
2014-11-02 22:40 - 2014-11-02 22:40 - 00000040 _____ () C:\Users\Scotty\AppData\Roaming\TheHunterSettings_steam_live.cfg
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\Documents\theHunter
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunter
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\theHunter
2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunterSteam
2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\ProgramData\Hunter
2014-11-01 16:54 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-54-58.025-aswFe.exe-7940.log
2014-11-01 16:52 - 2014-11-13 22:51 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-01 16:52 - 2014-11-01 16:52 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-01 16:50 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-50-59.092-aswFe.exe-3560.log
2014-11-01 16:50 - 2014-11-01 16:51 - 00000157 _____ () C:\WINDOWS\system32\2014-11-01-15-50-58.091-AvastVBoxSVC.exe-5864.log
2014-11-01 16:50 - 2014-11-01 16:50 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\AVAST Software
2014-11-01 16:49 - 2014-11-04 16:09 - 00004144 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-11-01 16:49 - 2014-11-01 16:49 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-11-01 16:49 - 2014-11-01 16:49 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-11-01 16:49 - 2014-11-01 16:49 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00000838 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\system32\vbox
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-01 16:46 - 2014-11-01 16:46 - 131078000 _____ (AVAST Software) C:\Users\Scotty\Downloads\avast_free_antivirus_setup.exe
2014-10-27 00:14 - 2014-11-04 16:16 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Nero
2014-10-27 00:14 - 2014-11-04 16:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero
2014-10-27 00:14 - 2014-10-27 00:14 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero_AG
2014-10-24 17:58 - 2014-10-24 17:58 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-10-23 20:31 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-10-23 20:29 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-10-23 20:29 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-10-23 20:29 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-10-23 20:29 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-10-23 20:29 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-10-23 20:29 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-10-23 20:29 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-10-23 20:29 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-10-23 20:29 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-10-23 20:29 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-10-23 20:29 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-10-23 20:29 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-10-23 20:29 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-23 20:29 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-10-23 20:29 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-10-23 20:29 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-10-23 20:29 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-10-23 20:29 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-10-23 20:29 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-10-23 20:29 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-10-23 20:29 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-23 20:29 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-10-23 20:29 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-23 20:29 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-23 20:29 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-23 20:29 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-10-23 20:29 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-23 20:29 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-10-23 20:29 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-10-23 20:29 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-10-23 20:29 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-10-23 20:29 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-10-23 20:28 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-10-23 20:28 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-10-23 20:28 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-10-23 20:28 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-10-23 20:28 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-10-23 20:28 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-10-23 20:28 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-10-23 20:28 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-10-23 20:28 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-10-23 20:28 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-10-23 20:28 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-10-23 20:28 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-10-23 20:28 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-10-23 20:28 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-10-23 20:28 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-10-23 20:28 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-10-23 20:28 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-10-23 20:28 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-10-23 20:28 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-10-23 20:28 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-10-23 20:28 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-10-23 20:28 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-10-23 20:28 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-10-23 20:28 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-10-23 20:28 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-10-23 20:28 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-10-23 20:28 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-10-23 20:28 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-10-23 20:28 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-10-23 20:28 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-10-23 20:28 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-10-23 20:27 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-10-23 20:27 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2014-10-23 20:27 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-10-23 20:27 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-10-23 20:27 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-10-23 20:27 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-10-23 20:27 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-10-23 20:27 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-10-23 20:27 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-10-23 20:27 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-10-23 17:09 - 2014-11-13 15:27 - 00000000 ____D () C:\Users\Scotty\Documents\Euro Truck Simulator 2
2014-10-23 16:33 - 2014-10-23 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\arma 2
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\SIX Networks
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\SIX Networks
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\IsolatedStorage
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\ProgramData\SIX Networks
2014-10-23 16:32 - 2014-10-23 16:32 - 15225168 _____ (SIX Networks) C:\Users\Scotty\Downloads\withSIX-Play.exe
2014-10-23 16:32 - 2014-10-23 16:32 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Downloaded Installations
2014-10-23 15:26 - 2014-11-03 15:02 - 00025088 ___SH () C:\Users\Scotty\Desktop\Thumbs.db
2014-10-19 21:25 - 2014-10-19 21:25 - 856838616 _____ () C:\WINDOWS\MEMORY.DMP
2014-10-19 21:25 - 2014-10-19 21:25 - 00301704 _____ () C:\WINDOWS\Minidump\101914-11281-01.dmp
2014-10-19 21:25 - 2014-10-19 21:25 - 00000000 ____D () C:\WINDOWS\Minidump
2014-10-19 19:38 - 2014-10-19 19:40 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\MAGIX
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-10-19 19:29 - 2014-11-12 21:55 - 00000000 ____D () C:\Users\Scotty\Downloads\musik
2014-10-19 13:17 - 2014-10-19 13:17 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-10-19 13:17 - 2014-10-19 12:26 - 00000000 ___DC () C:\WINDOWS\Panther
2014-10-19 13:16 - 2014-10-19 13:16 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-10-19 13:16 - 2014-10-19 13:16 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-10-19 13:16 - 2014-10-19 13:16 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\MSBuild
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-10-19 13:15 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-10-19 12:27 - 2014-10-19 12:27 - 00002088 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-10-19 12:26 - 2014-10-19 12:26 - 00001461 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-19 12:26 - 2014-10-19 12:26 - 00000020 ___SH () C:\Users\Scotty\ntuser.ini
2014-10-19 12:23 - 2014-10-19 12:23 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-10-19 12:21 - 2014-10-19 12:21 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-19 12:20 - 2014-10-23 22:34 - 00000000 ____D () C:\Users\Scotty
2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Vorlagen
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Startmenü
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Netzwerkumgebung
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Lokale Einstellungen
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Eigene Dateien
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Druckumgebung
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Musik
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Bilder
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Verlauf
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Anwendungsdaten
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Anwendungsdaten
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-10-19 12:18 - 2014-11-14 06:28 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-19 12:18 - 2014-11-14 06:27 - 01911018 _____ () C:\WINDOWS\WindowsUpdate.log
2014-10-19 12:18 - 2014-10-19 12:21 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-10-19 12:18 - 2014-10-19 12:18 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Synaptics
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Realtek
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-10-19 12:18 - 2013-12-23 11:34 - 00061216 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-10-19 12:18 - 2013-12-23 11:34 - 00053024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-10-19 12:18 - 2013-11-05 06:39 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-10-19 12:17 - 2014-11-14 06:28 - 00029336 _____ () C:\WINDOWS\system32\wpbbin.exe
2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.exe
2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.dll
2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\system32\rpcnetp.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-14 06:28 - 2014-09-23 22:06 - 00019448 _____ () C:\WINDOWS\PFRO.log
2014-11-14 06:28 - 2014-07-18 14:06 - 00069792 _____ (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.dll
2014-11-14 06:28 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-14 06:25 - 2014-07-18 13:56 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-549461420-2757155598-784121854-1001
2014-11-14 06:24 - 2014-09-24 07:17 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-14 06:24 - 2014-09-24 06:43 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat
2014-11-14 06:24 - 2014-09-24 06:43 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat
2014-11-14 06:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy
2014-11-14 06:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-13 16:18 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-11-13 16:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-11-13 15:34 - 2014-08-01 20:59 - 00000663 _____ () C:\Users\Public\Desktop\Last.fm Scrobbler.lnk
2014-11-13 13:36 - 2013-08-22 15:44 - 00338184 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-13 06:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-13 01:46 - 2014-07-20 23:47 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-13 01:46 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-13 01:44 - 2014-07-20 23:47 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-11 15:44 - 2012-07-26 06:26 - 00000226 _____ () C:\WINDOWS\win.ini
2014-11-01 16:48 - 2014-07-19 16:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-30 17:28 - 2014-10-08 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\Neuer Ordner
2014-10-30 12:25 - 2014-09-01 20:48 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-10-30 01:55 - 2014-09-24 08:46 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-10-30 01:55 - 2014-09-24 08:46 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-25 02:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-10-24 18:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-10-24 17:58 - 2014-07-17 17:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Packages
2014-10-24 04:09 - 2013-08-22 15:46 - 00289910 _____ () C:\WINDOWS\setupact.log
2014-10-23 16:33 - 2014-08-08 19:02 - 00000000 ____D () C:\Users\Scotty\Documents\Arma 3
2014-10-19 21:28 - 2014-07-18 14:06 - 00069792 ____N (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.exe
2014-10-19 21:23 - 2014-08-01 20:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Last.fm
2014-10-19 19:54 - 2014-07-19 18:37 - 00000000 ____D () C:\Users\Scotty\AppData\Local\CDWLauncher
2014-10-19 19:54 - 2014-07-18 16:27 - 00000000 ____D () C:\Users\Scotty\Documents\My Games
2014-10-19 19:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-10-19 19:40 - 2012-10-19 01:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-19 13:17 - 2014-07-26 12:05 - 00000000 __SHD () C:\Recovery
2014-10-19 13:17 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-10-19 12:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-10-19 12:23 - 2014-07-26 10:40 - 00008125 _____ () C:\WINDOWS\comsetup.log
2014-10-19 12:23 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-10-19 12:23 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-10-19 12:23 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\de
2014-10-19 12:21 - 2014-08-08 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2014-10-19 12:21 - 2014-08-05 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2014-10-19 12:21 - 2014-07-26 08:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-10-19 12:21 - 2014-07-18 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-10-19 12:21 - 2014-07-04 14:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\tr
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sv
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sk
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\ru
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pt
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pl
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\no
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\hu
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\fi
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\es
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\el
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\da
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\cs
2014-10-19 12:21 - 2014-07-04 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
2014-10-19 12:21 - 2014-07-04 14:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-10-19 12:21 - 2014-07-04 14:04 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-10-19 12:21 - 2014-07-04 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-10-19 12:21 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-10-19 12:21 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Cursors
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-10-19 12:21 - 2012-10-19 01:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2014-10-19 12:21 - 2012-10-19 01:17 - 00000000 ____D () C:\ProgramData\PRICache
2014-10-19 12:21 - 2012-08-01 18:03 - 00000000 ____D () C:\WINDOWS\system32\nl
2014-10-19 12:21 - 2012-08-01 17:54 - 00000000 ____D () C:\WINDOWS\system32\it
2014-10-19 12:21 - 2012-08-01 17:46 - 00000000 ____D () C:\WINDOWS\system32\fr
2014-10-19 12:21 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2014-10-19 12:20 - 2014-08-10 17:21 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-10-19 12:18 - 2014-07-04 14:01 - 00000000 ____D () C:\Intel
2014-10-19 12:18 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-10-19 12:13 - 2014-07-17 17:40 - 01952667 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-10-19 11:57 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent

Some content of TEMP:
====================
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-13 16:17

==================== End Of Log ============================
         
--- --- ---


Alt 14.11.2014, 13:03   #6
Bootsektor
/// TB-Ausbilder
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Hallo,

du hast mir das Schutzprotokoll von Malwarebytes gepostet.
Ich brauche aber das Suchlaufsprotokoll.
  • Starte Malwarebytes
  • Gehe nun oben auf Verlauf
  • links findest du nun die Auswahl Quarantäne und Anwendungsprotokolle
  • Gehe auf Anwendungsprotokolle
  • suche hier das letzte Suchlaufsprotokoll und wähle das aus
  • nun gehe oben auf Ansicht, das Protokoll öffnet sich
  • unten links steht exportieren, wähle das aus und klicke auf Textdatei
  • speichere nun das Log unter mbam.txt ab
  • öffne das Log mit deinem Texteditor
  • poste mir den Inhalt
__________________
--> Avast Schädliche Datei Blockade Mozilla Firefox

Alt 14.11.2014, 13:26   #7
Horncrowned
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Ich bitte um Verzeihung!

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 14.11.2014
Suchlauf-Zeit: 06:21:23
Logdatei: Suchlauf.txt
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.11.14.01
Rootkit Datenbank: v2014.11.12.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Scotty

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 359876
Verstrichene Zeit: 4 Min, 59 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-549461420-2757155598-784121854-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, In Quarantäne, [1891bf7c077501351dc1860007fdc838], 

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 0
(Keine schädliche Elemente erkannt)

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
         

Alt 15.11.2014, 03:37   #8
Bootsektor
/// TB-Ausbilder
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Hallo,

das sieht doch gut aus.

Dann bitte so weiter

Schritt 1
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt 2
Starte noch einmal FRST.
  • Setze den Haken bei addition.txt und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
  • Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

Alt 16.11.2014, 18:35   #9
Horncrowned
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=2e54f9445a7b644e95f09c72920fc1f2
# engine=21104
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-15 01:29:45
# local_time=2014-11-15 02:29:45 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 94 340889 1204949 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 203202 6362504 0 0
# scanned=687364
# found=35
# cleaned=0
# scan_time=12651
sh=B825F8CBC9DFF5563B8D1A3D47F4217FAE6AD0C3 ft=0 fh=0000000000000000 vn="Win32/BrowseFox.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\cpoomjocjelojiflbhbplglmkggfcjgd.crx.vir"
sh=26B23789D9A72EFD081B7433BA173699236340C0 ft=1 fh=df276d9722cf3a18 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\EnterDigital.FirstRun.exe.vir"
sh=3578A2878098606DA8230BEF78AE2815FF9320E2 ft=1 fh=cf2c7b3b381b00c5 vn="Variante von Win32/BrowseFox.O evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\EnterDigitalbho.dll.vir"
sh=0DDC9546E916F18ED36682634A8DD29E277C84AD ft=1 fh=da586ef9a06ddc8a vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\updateEnterDigital.exe.vir"
sh=96CC08EEF31CE5AB3B71286B73A1D4D45E7AFBC8 ft=1 fh=59321c4896c8916f vn="Variante von Win32/BrowseFox.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\9015bae7cdbb4473a5d0.dll.vir"
sh=E771C5E2CD860880048540238178753FDBADF53C ft=1 fh=eb08195b0cefe8c6 vn="Variante von Win32/BrowseFox.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\dbe9acb7ca744c18ad13.dll.vir"
sh=1022CF8EB3AA7BA21E181D8E3EA0614F7575D5FC ft=1 fh=63d2c93c31451cd4 vn="Variante von Win32/BrowseFox.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\EnterDigital.BOAS.exe.vir"
sh=C01703102021C3FC6053A9CCAC43F9AE87BB73F3 ft=1 fh=b2307a0f5f0dd166 vn="Variante von Win32/BrowseFox.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\EnterDigital.BOASHelper.exe.vir"
sh=44C8C467CBA83BD5F02846D49ADB9FC453EAFC33 ft=1 fh=75e9e36a4bcf75cd vn="Variante von Win32/BrowseFox.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\EnterDigital.BOASPRT.exe.vir"
sh=92B0FE3D7EF857DB608E1B3049213D53A719D986 ft=1 fh=df18c1a940d117ac vn="Variante von Win64/BrowseFox.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\EnterDigital.BrowserAdapter64.exe.vir"
sh=761D3915E91D9B526E71280A148FAC90FA334198 ft=1 fh=d0466f763f597d79 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp3B5B.tmp.vir"
sh=4F0CF0B91786B4800A12D0B1BD5C087A4AB13595 ft=1 fh=ae2fc6b8e18d7d7d vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp4B07.tmp.vir"
sh=10C5085A195C8D301886A3403182A73AAA51DFE5 ft=1 fh=47bdf92d363a0c1d vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp5133.tmp.vir"
sh=D80AEC5B4CDDC9E34645D54E8A3C65E1FC1C7834 ft=1 fh=58ba924d8057b81c vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp67CC.tmp.vir"
sh=2510B89AE35CD500FABE4A8D42F0EABD5C5D4DB0 ft=1 fh=a04e3dfcf81dc242 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmp7FC3.tmp.vir"
sh=3ACBDB1F98F857372C9C224ABB652625DAF31CEC ft=1 fh=909998afd384b3b2 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmpA7B6.tmp.vir"
sh=F013B1011257EDF7644DD56F44BF4A0E694511EE ft=1 fh=219913d957ded619 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\tmpDB31.tmp.vir"
sh=0DDC9546E916F18ED36682634A8DD29E277C84AD ft=1 fh=da586ef9a06ddc8a vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\utilEnterDigital.exe.vir"
sh=7D640D8CCB602A777EB1521C710D6423D9914EC1 ft=1 fh=d1f52a61c288f237 vn="Win64/BrowseFox.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}64.dll.vir"
sh=FA9784C7C8FC81B3F8583D9E799334689DD109AE ft=1 fh=a6d203875e1987d4 vn="Win64/BrowseFox.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}64.dll.vir"
sh=DE76B8D256FDEF881C77E24A1A44BE1B3C51494B ft=1 fh=5fbfaa6425b94337 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.BOAS.dll.vir"
sh=FB1F93F97AC8FD958CCFF1EFBF11A948C4489831 ft=1 fh=9f404a1dab3379e0 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.Bromon.dll.vir"
sh=B62308F63ED49BAD5062C5F4B0B2D93FC3DF4542 ft=1 fh=82f60c019e2e56de vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.BroStats.dll.vir"
sh=9A1F2C179B121E8888901E4A1D1E940C0A8F88A0 ft=1 fh=84c164e0c0b25443 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.CompatibilityChecker.dll.vir"
sh=0E99EC75A950F886992B0BFB5A31FD51F1427ABA ft=1 fh=90a65b889bf98a4e vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.GCUpdate.dll.vir"
sh=A8BBCA40415525489EA0C5EDB370D8F53C34E70F ft=1 fh=e88399f729aad936 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.Msvcmon.dll.vir"
sh=0DB3DCFF991642E98B2A1ACBD1D2058E4EFF3CD6 ft=1 fh=f77eabf3d75b1bad vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\EnterDigital\bin\plugins\EnterDigital.PurBrowseG.dll.vir"
sh=3DF50126BB1FEF0A639DBA9ED499E5F3F5D66A5B ft=1 fh=2d2d599767c17a2d vn="Variante von Win64/BrowseFox.CG evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}Gw64.sys.vir"
sh=72B6F7BDC642DD09E0812137B50B53294DD787DB ft=1 fh=0a07b2223f7931b4 vn="Variante von Win64/BrowseFox.CG evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64.sys.vir"
sh=986E11826FA848AC8C39CAB33A95CAEAB48B9976 ft=1 fh=cf1c6312ac080124 vn="Variante von Win32/InstallCore.RB evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Scotty\Downloads\OpenofficeSetup.exe"
sh=91BACB2F469F2A0C5640E31D841CB22B458D5E07 ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo Anwendung" ac=I fn="G:\SCOTT\Backup Set 2013-05-05 190008\Backup Files 2013-06-09 190002\Backup files 2.zip"
sh=E9A348989C23D0F9B7FA3677AF80C1FFF68ED114 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SCOTT\Backup Set 2013-05-05 190008\Backup Files 2013-06-09 190002\Backup files 4.zip"
sh=B5089A45FF8948E9F91149C7A7AB6AB1321E5CEC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\SCOTT\Backup Set 2013-05-05 190008\Backup Files 2013-08-04 190001\Backup files 1.zip"
sh=ACADF2B82AECDEDB4D590808EEB01D436999E91E ft=1 fh=f1e915411acfaf75 vn="Variante von Win32/Packed.VMProtect.AAA Trojaner" ac=I fn="G:\$RECYCLE.BIN\$R6Q1911\Ubisoft Game Launcher\ubiorbitapi_r2.dll"
sh=480FA2E02978E8173DE15B98EC3C8FEC9A4A424C ft=1 fh=1e3ce5e42604fd71 vn="Variante von Win32/Packed.VMProtect.AAD Trojaner" ac=I fn="G:\Spiele\^games\Bulletstorm\Fairlight\xlive.dll"
         


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2014 02
Ran by Scotty (administrator) on SCOTT on 15-11-2014 16:43:57
Running from C:\Users\Scotty\Desktop
Loaded Profile: Scotty (Available profiles: Scotty)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) D:\Programme\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Windows\SysWOW64\SMITSC.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Avast Software) D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) D:\Programme\Avast\ng\ngservice.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
() C:\Program Files\TOSHIBA\Hotkey\Hotkey\TCrdKBB.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
() C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Akamai Technologies, Inc.) C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe
(AVAST Software) D:\Programme\Avast\avastui.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13261456 2012-12-10] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [SRS Premium Sound 3D] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-19] (SRS Labs, Inc.)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-30] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-04] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] ()
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software)
HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Scotty\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-09-06] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
SearchScopes: HKLM - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - DefaultScope {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {61D3FC1D-BBFB-4527-B4CB-BA8E32F805D0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin HKU\S-1-5-21-549461420-2757155598-784121854-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Deutsch (DE) Language Pack - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-07-19]
FF Extension: Download Status Bar - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2014-07-19]
FF Extension: Gutscheinaffe - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9220f99f-5b7d-4a4d-97ca-209991796400}.xpi [2014-07-19]
FF Extension: ImTranslator - C:\Users\Scotty\AppData\Roaming\Mozilla\Firefox\Profiles\kdaqtm4u.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-07-19]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\Avast\WebRep\FF
FF Extension: Avast Online Security - D:\Programme\Avast\WebRep\FF [2014-11-01]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-01]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; D:\Programme\Avast\AvastSvc.exe [50344 2014-11-01] (AVAST Software)
R3 AvastVBoxSvc; D:\Programme\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-01] (Avast Software)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-24] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] ()
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-24] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
R2 SMITS; C:\windows\SysWOW64\SMITSC.exe [13312 2014-03-06] () [File not signed]
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-01] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-01] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3349984 2014-04-17] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R2 VBoxAswDrv; D:\Programme\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-11-01] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-15 12:54 - 2014-11-15 12:55 - 00000000 ____D () C:\Users\Scotty\Desktop\Mutti
2014-11-15 10:54 - 2014-11-15 10:54 - 02347384 _____ (ESET) C:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe
2014-11-15 10:54 - 2014-11-15 10:54 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-11-14 14:25 - 2014-11-14 14:25 - 00001354 _____ () C:\Users\Scotty\Downloads\Suchlauf.txt
2014-11-14 14:24 - 2014-11-14 14:24 - 00002940 _____ () C:\Users\Scotty\Downloads\mb.txt
2014-11-14 06:30 - 2014-11-14 06:30 - 00000157 _____ () C:\WINDOWS\system32\2014-11-14-05-30-20.025-AvastVBoxSVC.exe-3488.log
2014-11-14 06:21 - 2014-11-14 06:30 - 00000000 ____D () C:\Users\Scotty\Desktop\Neuer Ordner
2014-11-14 06:21 - 2014-11-14 06:21 - 00000157 _____ () C:\WINDOWS\system32\2014-11-14-05-21-10.036-AvastVBoxSVC.exe-4312.log
2014-11-14 06:20 - 2014-11-15 14:57 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-11-14 06:20 - 2014-11-14 06:20 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025(1).exe
2014-11-14 06:20 - 2014-11-14 06:20 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-14 06:20 - 2014-11-14 06:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-14 06:20 - 2014-11-14 06:20 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-11-14 06:20 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-11-14 06:20 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-11-14 06:20 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-11-14 06:17 - 2014-11-14 06:17 - 00000000 ____D () C:\Users\Scotty\Desktop\FRST-OlderVersion
2014-11-13 20:25 - 2014-11-13 20:25 - 00462912 _____ () C:\Users\Scotty\Downloads\Media_Monkesy_Gold_v_3.2.x.full.rar.exe
2014-11-13 15:34 - 2014-11-13 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm
2014-11-13 15:30 - 2014-11-13 15:30 - 00001086 _____ () C:\Users\Scotty\Desktop\WoTLauncher - Verknüpfung.lnk
2014-11-13 14:45 - 2014-11-15 16:44 - 00013629 _____ () C:\Users\Scotty\Desktop\FRST.txt
2014-11-13 14:45 - 2014-11-15 16:43 - 00000000 ____D () C:\FRST
2014-11-13 14:45 - 2014-11-13 14:46 - 00027816 _____ () C:\Users\Scotty\Desktop\Addition.txt
2014-11-13 14:43 - 2014-11-14 06:17 - 02116608 _____ (Farbar) C:\Users\Scotty\Desktop\FRST64.exe
2014-11-13 14:02 - 2014-11-13 14:02 - 05597734 _____ (Swearware) C:\Users\Scotty\Downloads\ComboFix.exe
2014-11-13 14:00 - 2014-11-13 14:00 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-13-00-07.064-AvastVBoxSVC.exe-3616.log
2014-11-13 13:51 - 2014-11-13 13:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-13 13:50 - 2014-11-13 13:50 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Scotty\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-13 13:50 - 2014-11-13 13:50 - 00451205 _____ () C:\Users\Scotty\Downloads\Last.fm_Scrobbler_1.0.2.29.mmip
2014-11-13 13:38 - 2014-11-13 13:38 - 00000157 _____ () C:\WINDOWS\system32\2014-11-13-12-38-51.090-AvastVBoxSVC.exe-3436.log
2014-11-12 22:46 - 2014-11-12 22:46 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-12 22:46 - 2014-11-12 22:46 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-12 22:46 - 2014-11-12 22:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-12 22:33 - 2014-11-12 22:33 - 00000212 _____ () C:\Users\Scotty\Desktop\Google Übersetzer.URL
2014-11-12 22:33 - 2014-11-12 22:33 - 00000000 ____D () C:\Users\Scotty\Desktop\Musik
2014-11-12 22:22 - 2014-11-12 22:22 - 00000000 ____D () C:\ProgramData\4015569669760776887
2014-11-12 22:02 - 2014-11-12 22:02 - 15204184 _____ (Ventis Media Inc. ) C:\Users\Scotty\Downloads\MediaMonkey_4.1.5.1719.exe
2014-11-12 21:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-12 21:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-12 21:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-12 21:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-12 21:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-12 21:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-12 21:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-12 21:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-12 21:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-12 21:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-12 21:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-12 21:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-12 21:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-12 21:12 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-12 21:12 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-12 21:12 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-12 21:12 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-12 21:12 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-12 21:11 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-12 21:11 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-12 21:11 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-12 21:11 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-12 21:11 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-12 21:11 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-12 21:11 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-12 21:11 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-12 21:11 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-12 21:11 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-12 21:11 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-12 21:11 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-12 21:11 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-12 21:11 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-12 21:11 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-12 21:11 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-12 21:11 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-12 21:11 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-12 21:11 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-12 21:11 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-12 21:11 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-12 21:11 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-12 21:11 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-12 21:11 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-12 21:11 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-12 21:11 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-12 21:10 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-12 21:10 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-12 21:10 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-12 21:10 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-12 21:10 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-12 21:10 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-12 21:10 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-12 21:10 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-12 21:10 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-12 21:09 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-12 21:09 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-12 21:09 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-12 21:09 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-12 21:09 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-12 21:09 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-12 21:09 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-12 21:09 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-12 21:09 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-12 21:09 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-12 21:09 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-12 21:09 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-12 21:09 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-12 21:09 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-12 21:09 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-12 21:09 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-12 21:09 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-12 21:09 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-12 21:09 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-12 21:09 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-12 21:09 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-12 21:09 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-12 21:09 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-12 21:09 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-12 21:09 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-12 21:09 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-12 21:09 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-12 21:09 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-12 21:09 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-12 21:09 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-12 21:09 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-12 21:09 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-12 21:09 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-12 21:09 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-12 21:09 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-12 21:09 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-12 21:09 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-12 21:09 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-12 21:09 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-12 21:09 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-12 21:09 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-12 21:09 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-12 21:09 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-12 21:09 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-12 21:09 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-12 21:09 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-12 21:09 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-12 21:09 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-12 21:09 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-12 21:09 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-12 21:09 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-12 21:09 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-12 21:09 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-12 21:09 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-12 21:09 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-12 21:09 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-12 21:09 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-12 21:09 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-12 21:09 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-12 21:09 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-12 21:09 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-12 21:09 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-12 21:09 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-12 21:09 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-12 21:09 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-12 21:09 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-12 21:09 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-12 21:09 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-12 21:09 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-12 21:09 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-12 21:09 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-12 21:09 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-12 21:09 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-12 21:09 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-12 21:09 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-12 21:09 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-12 21:09 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-12 21:09 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-12 21:09 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-12 21:09 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-12 21:09 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-12 21:09 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-12 21:09 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-12 21:09 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-12 21:09 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-12 21:09 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-12 21:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-12 21:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-12 21:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-12 21:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-12 21:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-12 21:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-12 21:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-12 21:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-12 21:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-12 21:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-12 21:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-12 21:09 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-12 21:09 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-12 21:09 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-12 21:09 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-12 21:09 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-12 21:09 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-12 21:09 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-12 21:09 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-12 21:09 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-12 21:09 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-12 21:09 - 2014-08-31 01:17 - 00148800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-12 21:09 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-12 21:09 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-12 21:09 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-12 21:09 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 21:09 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-12 21:09 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-12 21:09 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-12 21:09 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-12 21:09 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-12 21:09 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-12 21:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-12 21:09 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-12 21:09 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-12 21:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-12 21:09 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-12 21:09 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-12 21:09 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-11 15:50 - 2014-11-11 15:50 - 00000157 _____ () C:\WINDOWS\system32\2014-11-11-14-50-38.003-AvastVBoxSVC.exe-3684.log
2014-11-11 15:48 - 2014-11-14 06:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-11-11 15:44 - 2014-11-12 22:50 - 00000000 ____D () C:\AdwCleaner
2014-11-11 15:43 - 2014-11-11 15:43 - 02140160 _____ () C:\Users\Scotty\Desktop\AdwCleaner_4.101.exe
2014-11-08 19:37 - 2014-11-12 22:49 - 00000000 ____D () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7
2014-11-08 19:10 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Chromium
2014-11-08 19:09 - 2014-11-08 19:09 - 00000000 ____D () C:\Users\Scotty\AppData\Local\The Lord of the Rings Online
2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\Users\Scotty\Documents\ETS2MP
2014-11-08 18:54 - 2014-11-08 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer
2014-11-08 18:03 - 2014-11-11 15:47 - 00000000 ____D () C:\Program Files (x86)\EnterDigital
2014-11-08 18:02 - 2014-11-08 18:02 - 00860576 _____ ( ) C:\Users\Scotty\Downloads\OpenofficeSetup.exe
2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieUserList
2014-11-08 18:02 - 2014-11-08 18:02 - 00000000 __SHD () C:\Users\Scotty\AppData\Local\EmieSiteList
2014-11-08 15:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2014-11-08 15:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-11-08 15:05 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2014-11-08 15:04 - 2014-11-14 06:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Akamai
2014-11-08 15:04 - 2014-11-08 19:10 - 00000000 ____D () C:\Users\Scotty\Documents\The Lord of the Rings Online
2014-11-08 15:04 - 2014-11-08 15:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Turbine
2014-11-02 23:19 - 2014-11-02 23:19 - 00000097 _____ () C:\Users\Scotty\AppData\Roaming\LauncherSettings_live.cfg
2014-11-02 22:40 - 2014-11-02 22:40 - 00000040 _____ () C:\Users\Scotty\AppData\Roaming\TheHunterSettings_steam_live.cfg
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\Documents\theHunter
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunter
2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\theHunter
2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\theHunterSteam
2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\ProgramData\Hunter
2014-11-01 16:54 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-54-58.025-aswFe.exe-7940.log
2014-11-01 16:52 - 2014-11-15 15:51 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-01 16:52 - 2014-11-01 16:52 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-01 16:50 - 2014-11-01 16:54 - 00000207 _____ () C:\WINDOWS\system32\2014-11-01-15-50-59.092-aswFe.exe-3560.log
2014-11-01 16:50 - 2014-11-01 16:51 - 00000157 _____ () C:\WINDOWS\system32\2014-11-01-15-50-58.091-AvastVBoxSVC.exe-5864.log
2014-11-01 16:50 - 2014-11-01 16:50 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\AVAST Software
2014-11-01 16:49 - 2014-11-04 16:09 - 00004144 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-11-01 16:49 - 2014-11-01 16:49 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-11-01 16:49 - 2014-11-01 16:49 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-11-01 16:49 - 2014-11-01 16:49 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-11-01 16:49 - 2014-11-01 16:49 - 00000838 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\WINDOWS\system32\vbox
2014-11-01 16:49 - 2014-11-01 16:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-01 16:46 - 2014-11-01 16:46 - 131078000 _____ (AVAST Software) C:\Users\Scotty\Downloads\avast_free_antivirus_setup.exe
2014-10-27 00:14 - 2014-11-04 16:16 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Nero
2014-10-27 00:14 - 2014-11-04 16:15 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero
2014-10-27 00:14 - 2014-10-27 00:14 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Nero_AG
2014-10-24 17:58 - 2014-10-24 17:58 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-10-23 20:31 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-10-23 20:29 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-10-23 20:29 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-10-23 20:29 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-10-23 20:29 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-10-23 20:29 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-10-23 20:29 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-10-23 20:29 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-10-23 20:29 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-10-23 20:29 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-10-23 20:29 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-10-23 20:29 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-10-23 20:29 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-10-23 20:29 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-23 20:29 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-10-23 20:29 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-10-23 20:29 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-10-23 20:29 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-10-23 20:29 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-10-23 20:29 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-10-23 20:29 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-10-23 20:29 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-23 20:29 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-10-23 20:29 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-23 20:29 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-23 20:29 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-23 20:29 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-10-23 20:29 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-23 20:29 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-10-23 20:29 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-10-23 20:29 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-10-23 20:29 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-10-23 20:29 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-10-23 20:29 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-10-23 20:28 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-10-23 20:28 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-10-23 20:28 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-10-23 20:28 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-10-23 20:28 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-10-23 20:28 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-10-23 20:28 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-10-23 20:28 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-10-23 20:28 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-10-23 20:28 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-10-23 20:28 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-10-23 20:28 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-10-23 20:28 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-10-23 20:28 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-10-23 20:28 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-10-23 20:28 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-10-23 20:28 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-10-23 20:28 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-10-23 20:28 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-10-23 20:28 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-10-23 20:28 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-10-23 20:28 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-10-23 20:28 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-10-23 20:28 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-10-23 20:28 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-10-23 20:28 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-10-23 20:28 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-10-23 20:28 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-10-23 20:28 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-10-23 20:28 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-10-23 20:28 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-10-23 20:28 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-10-23 20:28 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-10-23 20:28 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-10-23 20:27 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-10-23 20:27 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2014-10-23 20:27 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-10-23 20:27 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-10-23 20:27 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-10-23 20:27 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-10-23 20:27 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-10-23 20:27 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-10-23 20:27 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-10-23 20:27 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-10-23 17:09 - 2014-11-13 15:27 - 00000000 ____D () C:\Users\Scotty\Documents\Euro Truck Simulator 2
2014-10-23 16:33 - 2014-10-23 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\arma 2
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\SIX Networks
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\SIX Networks
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\Users\Scotty\AppData\Local\IsolatedStorage
2014-10-23 16:33 - 2014-10-23 16:33 - 00000000 ____D () C:\ProgramData\SIX Networks
2014-10-23 16:32 - 2014-10-23 16:32 - 15225168 _____ (SIX Networks) C:\Users\Scotty\Downloads\withSIX-Play.exe
2014-10-23 16:32 - 2014-10-23 16:32 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Downloaded Installations
2014-10-23 15:26 - 2014-11-03 15:02 - 00025088 ___SH () C:\Users\Scotty\Desktop\Thumbs.db
2014-10-19 21:25 - 2014-10-19 21:25 - 856838616 _____ () C:\WINDOWS\MEMORY.DMP
2014-10-19 21:25 - 2014-10-19 21:25 - 00301704 _____ () C:\WINDOWS\Minidump\101914-11281-01.dmp
2014-10-19 21:25 - 2014-10-19 21:25 - 00000000 ____D () C:\WINDOWS\Minidump
2014-10-19 19:38 - 2014-10-19 19:40 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\MAGIX
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Abelssoft
2014-10-19 19:38 - 2014-10-19 19:38 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-10-19 19:29 - 2014-11-12 21:55 - 00000000 ____D () C:\Users\Scotty\Downloads\musik
2014-10-19 13:17 - 2014-10-19 13:17 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-10-19 13:17 - 2014-10-19 13:17 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-10-19 13:17 - 2014-10-19 12:26 - 00000000 ___DC () C:\WINDOWS\Panther
2014-10-19 13:16 - 2014-10-19 13:16 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-10-19 13:16 - 2014-10-19 13:16 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-10-19 13:16 - 2014-10-19 13:16 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files\MSBuild
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-10-19 13:15 - 2014-10-19 13:15 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-10-19 13:15 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-10-19 13:15 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-10-19 12:27 - 2014-10-19 12:27 - 00002088 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-10-19 12:26 - 2014-10-19 12:26 - 00001461 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-19 12:26 - 2014-10-19 12:26 - 00000020 ___SH () C:\Users\Scotty\ntuser.ini
2014-10-19 12:23 - 2014-10-19 12:23 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-10-19 12:23 - 2014-10-19 12:23 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-10-19 12:21 - 2014-10-19 12:21 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-19 12:20 - 2014-10-23 22:34 - 00000000 ____D () C:\Users\Scotty
2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-10-19 12:20 - 2014-10-19 12:23 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Vorlagen
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Startmenü
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Netzwerkumgebung
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Lokale Einstellungen
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Eigene Dateien
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Druckumgebung
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Musik
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Documents\Eigene Bilder
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Verlauf
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\AppData\Local\Anwendungsdaten
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 _SHDL () C:\Users\Scotty\Anwendungsdaten
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-10-19 12:20 - 2014-10-19 12:20 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-10-19 12:20 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-10-19 12:18 - 2014-11-15 16:30 - 02004545 _____ () C:\WINDOWS\WindowsUpdate.log
2014-10-19 12:18 - 2014-11-14 06:28 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-19 12:18 - 2014-10-19 12:21 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-10-19 12:18 - 2014-10-19 12:18 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Synaptics
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\Realtek
2014-10-19 12:18 - 2014-10-19 12:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-10-19 12:18 - 2013-12-23 11:34 - 00061216 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-10-19 12:18 - 2013-12-23 11:34 - 00053024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-10-19 12:18 - 2013-11-05 06:39 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-10-19 12:18 - 2013-11-05 06:39 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-10-19 12:17 - 2014-11-14 14:22 - 00017408 _____ () C:\WINDOWS\system32\rpcnetp.exe
2014-10-19 12:17 - 2014-11-14 06:28 - 00029336 _____ () C:\WINDOWS\system32\wpbbin.exe
2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.exe
2014-10-19 12:17 - 2014-11-14 06:28 - 00017408 _____ () C:\WINDOWS\SysWOW64\rpcnetp.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-15 16:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-15 13:00 - 2014-09-24 07:17 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-15 13:00 - 2014-09-24 06:43 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat
2014-11-15 13:00 - 2014-09-24 06:43 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat
2014-11-15 12:56 - 2013-08-22 15:46 - 00292297 _____ () C:\WINDOWS\setupact.log
2014-11-15 11:03 - 2014-07-18 13:56 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-549461420-2757155598-784121854-1001
2014-11-14 06:28 - 2014-09-23 22:06 - 00019448 _____ () C:\WINDOWS\PFRO.log
2014-11-14 06:28 - 2014-07-18 14:06 - 00069792 _____ (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.dll
2014-11-14 06:28 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-14 06:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy
2014-11-13 16:18 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-11-13 16:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-11-13 15:34 - 2014-08-01 20:59 - 00000663 _____ () C:\Users\Public\Desktop\Last.fm Scrobbler.lnk
2014-11-13 13:36 - 2013-08-22 15:44 - 00338184 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 06:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-13 06:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-13 01:46 - 2014-07-20 23:47 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-13 01:46 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-13 01:44 - 2014-07-20 23:47 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-11 15:44 - 2012-07-26 06:26 - 00000226 _____ () C:\WINDOWS\win.ini
2014-11-01 16:48 - 2014-07-19 16:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-30 17:28 - 2014-10-08 16:51 - 00000000 ____D () C:\Users\Scotty\Documents\Neuer Ordner
2014-10-30 12:25 - 2014-09-01 20:48 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-10-30 01:55 - 2014-09-24 08:46 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-10-30 01:55 - 2014-09-24 08:46 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-25 02:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-10-24 18:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-10-24 17:58 - 2014-07-17 17:40 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Packages
2014-10-23 16:33 - 2014-08-08 19:02 - 00000000 ____D () C:\Users\Scotty\Documents\Arma 3
2014-10-19 21:28 - 2014-07-18 14:06 - 00069792 ____N (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.exe
2014-10-19 21:23 - 2014-08-01 20:59 - 00000000 ____D () C:\Users\Scotty\AppData\Local\Last.fm
2014-10-19 19:54 - 2014-07-19 18:37 - 00000000 ____D () C:\Users\Scotty\AppData\Local\CDWLauncher
2014-10-19 19:54 - 2014-07-18 16:27 - 00000000 ____D () C:\Users\Scotty\Documents\My Games
2014-10-19 19:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-10-19 19:40 - 2012-10-19 01:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-19 13:17 - 2014-07-26 12:05 - 00000000 __SHD () C:\Recovery
2014-10-19 13:17 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-10-19 13:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-10-19 12:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-10-19 12:23 - 2014-07-26 10:40 - 00008125 _____ () C:\WINDOWS\comsetup.log
2014-10-19 12:23 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-10-19 12:23 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-10-19 12:23 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-10-19 12:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-19 12:21 - 2014-09-28 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-10-19 12:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\de
2014-10-19 12:21 - 2014-08-08 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2014-10-19 12:21 - 2014-08-05 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2014-10-19 12:21 - 2014-07-26 08:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-10-19 12:21 - 2014-07-18 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-10-19 12:21 - 2014-07-04 14:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\tr
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sv
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\sk
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\ru
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pt
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\pl
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\no
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\hu
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\fi
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\es
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\el
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\da
2014-10-19 12:21 - 2014-07-04 14:10 - 00000000 ____D () C:\WINDOWS\system32\cs
2014-10-19 12:21 - 2014-07-04 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
2014-10-19 12:21 - 2014-07-04 14:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-10-19 12:21 - 2014-07-04 14:04 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-10-19 12:21 - 2014-07-04 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-10-19 12:21 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-10-19 12:21 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Cursors
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-10-19 12:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-10-19 12:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-10-19 12:21 - 2012-10-19 01:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2014-10-19 12:21 - 2012-10-19 01:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2014-10-19 12:21 - 2012-10-19 01:17 - 00000000 ____D () C:\ProgramData\PRICache
2014-10-19 12:21 - 2012-08-01 18:03 - 00000000 ____D () C:\WINDOWS\system32\nl
2014-10-19 12:21 - 2012-08-01 17:54 - 00000000 ____D () C:\WINDOWS\system32\it
2014-10-19 12:21 - 2012-08-01 17:46 - 00000000 ____D () C:\WINDOWS\system32\fr
2014-10-19 12:21 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2014-10-19 12:20 - 2014-08-10 17:21 - 00000000 ____D () C:\Users\Scotty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-10-19 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-10-19 12:18 - 2014-07-04 14:01 - 00000000 ____D () C:\Intel
2014-10-19 12:18 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-10-19 12:13 - 2014-07-17 17:40 - 01952667 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-10-19 11:57 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent

Some content of TEMP:
====================
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-15 11:03

==================== End Of Log ============================
         
--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-11-2014 02
Ran by Scotty at 2014-11-15 16:44:21
Running from C:\Users\Scotty\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-549461420-2757155598-784121854-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (Obsolete) (HKLM-x32\...\Steam App 219540) (Version:  - )
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.6 - Atheros Communications Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software)
Awesomium Redistributable (HKLM-x32\...\{5BCB064B-9F65-4E15-BAFB-669E72E54FD9}) (Version: 1.7.4.2 - SIX Networks GmbH)
Call of Juarez Gunslinger (HKLM-x32\...\Steam App 204450) (Version:  - Techland)
Combat Arms EU (HKLM-x32\...\Combat Arms EU) (Version:  - )
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version:  - Relic Entertainment)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Euro Truck Simulator 2 Multiplayer 0.1.0.9 Alpha R3 (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.0.9 Alpha R3 - ETS2MP Team)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
Far Cry® 3 Blood Dragon (HKLM-x32\...\Steam App 233270) (Version:  - Ubisoft Montreal)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version:  - Reto-Moto)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33268) (Version: 3.6.1.33268.15 - Intel)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{8e41467d-297e-496d-8b0f-e771b6c87c06}) (Version: 16.11.0 - Intel Corporation)
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Mount & Blade (HKLM-x32\...\Steam App 22100) (Version:  - TaleWorlds Entertainment)
Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
Mount & Blade: With Fire and Sword (HKLM-x32\...\Steam App 48720) (Version:  - TaleWorlds Entertainment)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1 - Mozilla)
Nero 12 Essentials Toshiba (HKLM-x32\...\{2EF76291-8647-46F0-89D8-0AA8B72A5420}) (Version: 12.0.00600 - Nero AG)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.51.0 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 327.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.65 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.65 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0604 - NVIDIA Corporation)
Painkiller: Black Edition (HKLM-x32\...\Steam App 39530) (Version:  - People Can Fly)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6794 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.)
Risen (HKLM-x32\...\Steam App 40300) (Version:  - Piranha – Bytes)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version:  - Piranha Bytes)
Saints Row 2 (HKLM-x32\...\Steam App 9480) (Version:  - Volition)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Sniper Elite 3 (HKLM-x32\...\Steam App 238090) (Version:  - Rebellion)
SRS Premium Sound Control Panel (HKLM\...\{94F03B8E-CB73-4653-AFE9-79112C01FED2}) (Version: 1.12.5000 - SRS Labs, Inc.)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.5 - Synaptics Incorporated)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version:  - Turbine, Inc.)
theHunter (HKLM-x32\...\Steam App 253710) (Version:  - Expansive Worlds)
TOSHIBA Blu-ray Disc Player (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 1.0.5.207  - Toshiba Corporation)
TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.00.6625.6402 - Toshiba Corporation)
TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.5.1.1 - Toshiba Corporation)
TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA)
TOSHIBA Password Utility (HKLM-x32\...\{B1786E63-2127-42C9-95A3-146E5F727BF1}) (Version: v1.0.0.9 - TOSHIBA Corporation)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.8.17.640104 - Toshiba Corporation)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM\...\{11A5F0A4-5738-4857-9CEA-216E4F78BEB5}) (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0013 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.5.1 - Toshiba Europe GmbH)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.3.3417 - TOSHIBA Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 2.1 - Ubisoft)
Welcome App (Start-up experience) (x32 Version: 12.0.14000 - Nero AG) Hidden
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

26-10-2014 21:03:47 Windows Update
01-11-2014 15:48:41 avast! antivirus system restore point
02-11-2014 21:37:03 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert
08-11-2014 14:05:15 DirectX wurde installiert
13-11-2014 00:44:27 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {2B2120BC-BFED-4F3B-B65B-D6168C49D53B} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2012-07-27] (TOSHIBA Corporation)
Task: {5FB4302F-346E-4919-8CDE-704090A3F00A} - System32\Tasks\avast! Emergency Update => D:\Programme\Avast\AvastEmUpdate.exe [2014-11-01] (AVAST Software)
Task: {8A09220B-49F8-4EC6-A1E0-88A3CE316A43} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {988DD466-E223-4BE3-9644-79286E172A0C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-01] (Adobe Systems Incorporated)
Task: {EB66C861-EB85-45F2-9BDD-0F49F3207335} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-13] (Microsoft Corporation)
Task: {F742380F-F7C4-452A-8F71-33DD759FFFF6} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2012-09-25] (Toshiba Europe GmbH)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (whitelisted) =============

2014-08-01 21:14 - 2014-03-06 11:37 - 00013312 _____ () C:\windows\SysWOW64\SMITSC.exe
2014-11-01 16:49 - 2014-11-01 16:49 - 00388208 _____ () D:\Programme\Avast\ng\vbox\VBoxDDU.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 05846160 _____ () D:\Programme\Avast\ng\vbox\VBoxRT.dll
2012-08-30 13:34 - 2012-08-30 13:34 - 02609064 _____ () C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
2012-07-18 17:38 - 2012-07-18 17:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2012-07-18 17:38 - 2012-07-18 17:38 - 00049064 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnZ.dll
2012-08-13 18:13 - 2012-08-13 18:13 - 00018344 _____ () C:\Program Files\TOSHIBA\Teco\TecoMUI.dll
2011-08-12 13:57 - 2011-08-12 13:57 - 00437632 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe
2012-08-04 14:01 - 2012-08-04 14:01 - 00213136 _____ () C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
2014-11-13 19:32 - 2014-11-13 19:32 - 02902016 _____ () D:\Programme\Avast\defs\14111301\algo.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 04491192 _____ () D:\Programme\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-11-15 14:58 - 2014-11-15 14:58 - 02903040 _____ () D:\Programme\Avast\defs\14111500\algo.dll
2014-11-01 16:49 - 2014-11-01 16:49 - 38561576 _____ () D:\Programme\Avast\libcef.dll
2014-11-12 22:46 - 2014-11-07 01:09 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-549461420-2757155598-784121854-500 - Administrator - Disabled)
ASPNET (S-1-5-21-549461420-2757155598-784121854-1002 - Limited - Enabled)
Gast (S-1-5-21-549461420-2757155598-784121854-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-549461420-2757155598-784121854-1004 - Limited - Enabled)
Scotty (S-1-5-21-549461420-2757155598-784121854-1001 - Administrator - Enabled) => C:\Users\Scotty

==================== Faulty Device Manager Devices =============

Name: Intel(R) Management Engine Interface 
Description: Intel(R) Management Engine Interface 
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: MEIx64
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/15/2014 00:30:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (11/15/2014 11:04:19 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (11/15/2014 10:54:24 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (11/15/2014 10:54:17 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (11/15/2014 10:54:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (11/15/2014 10:54:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (11/13/2014 04:05:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "\\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (11/13/2014 04:05:52 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (11/13/2014 01:44:28 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service MaintainerSvc6.37.565328 since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (11/12/2014 11:01:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.3.9600.17284 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b50

Startzeit: 01cffe8a2b43c1de

Endzeit: 0

Anwendungspfad: C:\WINDOWS\Explorer.EXE

Berichts-ID: 758454ec-6ab7-11e4-be94-6036dd09dd90

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


System errors:
=============
Error: (11/15/2014 11:04:13 AM) (Source: DCOM) (EventID: 10010) (User: scott)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (11/14/2014 02:22:07 PM) (Source: MEIx64) (EventID: 3) (User: )
Description: Intel(R) Management Engine Interface driver has failed to perform handshake with the Firmware.

Error: (11/14/2014 06:28:07 AM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (11/14/2014 06:18:48 AM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (11/14/2014 06:14:16 AM) (Source: MEIx64) (EventID: 3) (User: )
Description: Intel(R) Management Engine Interface driver has failed to perform handshake with the Firmware.

Error: (11/13/2014 04:18:59 PM) (Source: DCOM) (EventID: 10010) (User: scott)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (11/13/2014 04:18:28 PM) (Source: DCOM) (EventID: 10010) (User: scott)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (11/13/2014 01:57:54 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (11/13/2014 01:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/13/2014 01:46:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.


Microsoft Office Sessions:
=========================
Error: (11/15/2014 00:30:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (11/15/2014 11:04:19 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (11/15/2014 10:54:24 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe

Error: (11/15/2014 10:54:17 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe

Error: (11/15/2014 10:54:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe

Error: (11/15/2014 10:54:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Scotty\Downloads\esetsmartinstaller_deu.exe

Error: (11/13/2014 04:05:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: \\?\Volume{4aef6752-83cf-4720-ab8f-a40fc2615cef}\Falscher Parameter. (0x80070057)

Error: (11/13/2014 04:05:52 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: SystemFalscher Parameter. (0x80070057)

Error: (11/13/2014 01:44:28 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service MaintainerSvc6.37.565328 since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (11/12/2014 11:01:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.3.9600.172841b5001cffe8a2b43c1de0C:\WINDOWS\Explorer.EXE758454ec-6ab7-11e4-be94-6036dd09dd90


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Percentage of memory in use: 15%
Total physical RAM: 16336.22 MB
Available physical RAM: 13817.08 MB
Total Pagefile: 32720.22 MB
Available Pagefile: 29739.4 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (TI30995500B) (Fixed) (Total:108.08 GB) (Free:59.37 GB) NTFS
Drive d: (HDD) (Fixed) (Total:931.51 GB) (Free:256.03 GB) NTFS
Drive f: (USB(SCOTT)) (Removable) (Total:7.45 GB) (Free:7.45 GB) FAT32
Drive g: (SATAN) (Fixed) (Total:931.28 GB) (Free:122.89 GB) FAT32
Drive h: (MINION) (Removable) (Total:31.79 GB) (Free:21.49 GB) NTFS
Drive i: (Minion) (Removable) (Total:62.5 GB) (Free:60.97 GB) exFAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: EFA10BF8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7.5 GB) - (Type=0B)

========================================================
Disk: 3 (Size: 931.5 GB) (Disk ID: 692686E8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C)

========================================================
Disk: 4 (Size: 31.8 GB) (Disk ID: 0DC5F247)
Partition 1: (Not Active) - (Size=31.8 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (Size: 62.5 GB) (Disk ID: 1DD6F8F7)
Partition 1: (Not Active) - (Size=62.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Alt 16.11.2014, 21:10   #10
Bootsektor
/// TB-Ausbilder
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Hallo,

danke

Ganz viel liegt in der Quarantäne vom Adwarecleaner.

Bitte lösche die in ESET gelisteten Backups.

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
C:\Users\Scotty\Downloads\OpenofficeSetup.exe
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



OK
So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber.
Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir.

Schritt 1

Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren.
Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen.

Schritt 2
Downloade dir bitte delfix auf deinen Desktop.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
  • DelFix entfernt u. a. alle verwendeten Programme und löscht sich abschließend selbst.
Falls nach Delfix noch Programme aus unserer Bereinigung vorhanden sein sollten, kannst du diese nun bedenkenlos löschen.

Updates / Programme aktualisieren
  • FlashPlayer
Dein FlashPlayer für den Firefox ( Adobe Flash Player Plugin) ist nicht mehr aktuell.
  • deinstalliere die alten Versionen.
  • öffne mit dem Firefox folgenden Link Adobe - Adobe Flash Player installieren und lade Dir von dort die neueste Version herunter.
  • Falls sich dort etwas anderes als der FlashPlayer noch zusätzlich mitinstallieren möchte, entferne den Haken dort
Aktualisierung einstellen
Stelle sicher, dass dein FlashPlayer nach Updates sucht. Den FlashPlayer kann man direkt bei der Installation so konfigurieren, dass er nach Updates automatisch sucht, nachträglich kann man das über folgenden Link machen:
Adobe - Flash Player: Einstellungsmanager - Globale Benachrichtigungseinstellungen
  • Firefox
Dein Firefox ist veraltet, gehe im Firefox auf
  • Hilfe
  • Über Firefox - nun sollte Firefox nach updates suchen, lasse es herunterladen und installiere es, falls es nicht automatisch geschieht
Alternativ:
Lade dir bitte von hier den aktuellen Firefox herunter.

Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems.

Ändere regelmäßig alle deine Passwörter, jetzt, nach der Bereinigung ist ein idealer Zeitpunkt dafür
  • verwende für jede Anwendung und jeden Account ein anderes Passwort
  • ändere regelmäßig dein Passwort, vor allem bei Onlinebanking oder deinem Emailpostfach ist dieses sehr wichtig
  • speichere keine Passwörter auf deinem PC, gib diese nicht an dritte weiter
  • ein sicheres Passwort besteht aus mindestens 8 Zeichen und beinhaltet Groß- und Kleinbuchstaben, Zahlen, und Sonderzeichen
  • benutze keine Zahlen- oder Buchstabenkombinationen, ( zB 12345678, qwertzui) auch keine Zahlen oder Buchstabenmuster
  • verwende keine Passwörter die einen Bezug zu dir, deinem Wohnort, Familienmitglied oder Haustier (Geburtsdatum, Postleitzahl, Adresse, Name) haben


Aktualität des Systems
Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.
  • Bitte überprüfe, ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.

Antivirensoftware
  • Gehe sicher immer eine Antiviren Software installiert zu haben und halte diese unbedingt aktuell.

Zusätzlicher Schutz
  • MalwareBytes Anti-Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On-Demand Scantool welches viele aktuelle Malware erkennt und auch entfernt.
    Aktualisiere das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf einen Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.


Systemleistung
Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu die Datenträgerbereinigung von Windows.
Windows Vista
  • Klicke unten links auf das Vistasymbol
  • Gehe auf Programme -> Zubehör -> Systemprogramme -> Datenträgerbereinigung
  • Wähle nun Dateien von allen Benutzern des Computers aus und bestätige mit OK
  • Setze den Haken bei den zu löschenden Dateien zusätzlich bei Temporäre Dateien
  • Bestätige mit OK
  • Bestätige dass du die Dateien unwiderruflich löschen möchtest

Windows 7
  • Gehe auf das Windowsstartsymbol
  • Gebe im Suchfeld Datenträgerrereinigung ein
  • Setze den Haken zusätzlich bei Temporäre Dateien
  • Bestätige mit OK

Windows 8
  • Rechtsklicke in die untere linke Ecke deines Bildschirms
  • Klicke auf Suchen
  • Klicke auf Einstellungen
  • Gebe im Suchfeld Datenträgerbereinigung ein
  • Klicke in den Einstellungen auf der linken Seite nun auf Speicherplatz durch Löschen nicht erforderlicher Dateien freigeben
  • Setze den Haken zusätzlich bei Temporäre Dateien
  • Bestätige mit OK
  • Bestätige dass du die Dateien unwiderruflich löschen möchtest

Halte dich fern von jeglichen Registry Cleanern.
Diese schaden deinem System mehr als dass sie es schneller machen.

Verhaltensregeln zum sichereren Surfen
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
  • Achte besonders bei der Installation von Programmen darauf, ob sich weitere Software mitinstallieren möchte, wähle wo immer es geht die benutzerdefinierte Installation und wähle alles ab, was nichts mit dem Programm zu tun hat, welches du dir installieren möchtest.

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind.

Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun.

Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun.

Alt 16.11.2014, 23:36   #11
Horncrowned
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-11-2014 03
Ran by Scotty at 2014-11-16 23:25:33 Run:2
Running from C:\Users\Scotty\Desktop
Loaded Profile: Scotty (Available profiles: Scotty)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Scotty\Downloads\OpenofficeSetup.exe
*****************

C:\Users\Scotty\Downloads\OpenofficeSetup.exe => Moved successfully.

==== End of Fixlog ====
         


Was mich halt noch wundert ist, dass ich mich auf allen Seiten(ebenfalls Trojaner-Board) immer wieder neu anmelden muss, sobald ich den Browser schließe und erneut öffne, obwohl angemeldet bleiben angeklickt worden ist.
Ich nutze den Passwortspeicher nur bei Facebook, wo ich so oder so keine direkten Infos von mir preis gebe.

Falls die Informationen Hilfreich sein könnten *gg*
PC: Toshiba Qosmio
Intel(R) Core(TM) i7-3630QM CPU @ 2,40GHz 2,40GHz
Installierter Arbeitsspeicher (RAM): 16,0 GB
Systemtyp: 64-Bit-Betriebssystem, x64-basierter Prozessor
Grafikkarte: GeForce GTX 670M

Ich nutze Mozilla Firefox und habe dafür nun auch die beiden empfohlenen Add-Ons installiert, danke dafür.
Aus diesem Grund verstehe ich auch nicht, weshalb auf meinem PC Chrome gewesen sein sollte.

Avast habe ich als Browser, PC und Handyschutz.
Hierbei besitze ich aber nur die Kostenfreie Version.
Ich habe mir schon überlegt die Kostenpflichtige Version zu kaufen, da ich mit der Sandbox sicherer Online-Banking durchführen kann.

Von Malwarebytes habe ich die Premium-Version gekauft.

Falls noch weitere Tipps für Programme, Apps(Android) oder Add-Ons vorhanden sind, ich nehme sie äußerst gern entgegen.

Was ich ebenfalls nicht verstehe ist, dass ich bei meinem PC keine Recovery-CD erstellen kann.
Und was ist zudem auch besser dafür, CD oder Speichermedium wie USB Stick?

Und was ist mit Java?
Immer wenn ich Java auf dem PC hatte, war er von Viren befallen.
Ist Java wirklich vertrauenswürdig und wofür brauche ich es wirklich?

Ich bedanke mich vielmals für die tadellose Hilfe!

"Für ein besseres Nutzererlebnis auf Facebook aktiviere JavaScript in deinem Browser oder wechsle zu unserer Webseite für Mobilgeräte."

Ich muss noch weiter stören, mein Facebook lädt nicht mehr richtig, und oben steht die Nachricht.

Er ist aber eigentlich unter "true" statt "false" geschalten.

Geändert von Horncrowned (16.11.2014 um 23:29 Uhr)

Alt 17.11.2014, 22:52   #12
Bootsektor
/// TB-Ausbilder
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Hallo,

Zitat:
Was mich halt noch wundert ist, dass ich mich auf allen Seiten(ebenfalls Trojaner-Board) immer wieder neu anmelden muss, sobald ich den Browser schließe und erneut öffne, obwohl angemeldet bleiben angeklickt worden ist.
Hast du Cookies in den Browsern deaktiviert?

Zitat:
Avast habe ich als Browser, PC und Handyschutz.
Hierbei besitze ich aber nur die Kostenfreie Version.
Ich habe mir schon überlegt die Kostenpflichtige Version zu kaufen, da ich mit der Sandbox sicherer Online-Banking durchführen kann.

Von Malwarebytes habe ich die Premium-Version gekauft
Bitte nur ein vollständiges Antivirenprogramm auf dem Rechner, zwei können sich in der Erkennung behindern.

Zitat:
Was ich ebenfalls nicht verstehe ist, dass ich bei meinem PC keine Recovery-CD erstellen kann.
Und was ist zudem auch besser dafür, CD oder Speichermedium wie USB Stick?
War das ne vorinstallierte Windowsversion?
Zitat:
Und was ist mit Java?
Immer wenn ich Java auf dem PC hatte, war er von Viren befallen.
Ist Java wirklich vertrauenswürdig und wofür brauche ich es wirklich?
Java ist an sich vertrauenswürdig, du brauchst Java für einige Seiten, bzw Programme die JavaScript basiert sind, OpenOffice braucht das auch zum Vorlagen erstellen, JavaScript ist eine Programmiersprache und die läuft eben nur im JavaRuntimeEnvironment.


Zitat:
"Für ein besseres Nutzererlebnis auf Facebook aktiviere JavaScript in deinem Browser oder wechsle zu unserer Webseite für Mobilgeräte."
Folge hierzu bitte dieser Anleitung

Falls du noch weitere Fragen hast, immer her damit

Alt 18.11.2014, 07:40   #13
Horncrowned
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Zitat:
Hast du Cookies in den Browsern deaktiviert?
Ich weiß von nichts, wo sieht man das? :?

Zitat:
Bitte nur ein vollständiges Antivirenprogramm auf dem Rechner, zwei können sich in der Erkennung behindern.
Also nicht Malwarebyte und Avast auf dem Rechner lassen?

Zitat:
War das ne vorinstallierte Windowsversion?
Ja war sie

Wegen Java, das rät mir jeder ab, weil das nur mit Vieren in Verbindung hängen soll.
und ich selbst hatte auch schon Java Probleme auf dem alten Pc

Alt 18.11.2014, 20:52   #14
Bootsektor
/// TB-Ausbilder
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Hallo,

Zitat:
Ich weiß von nichts, wo sieht man das? :?
Firefox
https://support.mozilla.org/de/kb/co...n-und-ablehnen

Chrome
https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer
Löschen und Verwalten von Cookies in Internet Explorer - Windows-Hilfe

Zitat:
Also nicht Malwarebyte und Avast auf dem Rechner lassen?
Nein, da du jetzt ja die Malwarebytes Antimalware in Pro hast, hat diese ja einen Hintergrundwächter, da brauchst du nur eines.

Zitat:
Wegen Java, das rät mir jeder ab, weil das nur mit Vieren in Verbindung hängen soll.
und ich selbst hatte auch schon Java Probleme auf dem alten Pc
Jein, da musst du differenzieren. Manche Programme und Internetseiten benötigen Java, weil sie JavaScript verwenden, Java selbst hat keine Malware es ist das Script, (also die Programmiersprache) mit der man diese schreiben und über das Script dann aufs System bringen kann. Wenn ein Programm oder eine Seite Java benötigen sollte, wird es dich das wissen lassen, Aber ! Mittlerweile gibt es auch Fakes, in denen dir mitgeteilt wird, dass dieses jenes oder welches Java benötigt oder Java veraltet ist ! Hier musst du dann genau hinschauen, und wenn du meinst, diese Mitteilung stimmt, bitte direkt von Oracle.com herunterladen und nie auf diese Links klicken. Genau dieselben Meldungen gibt es noch für diverse andere Software wie zB die Programme von Adobe... also Augen auf.

Alt 22.11.2014, 16:41   #15
Horncrowned
 
Avast Schädliche Datei Blockade Mozilla Firefox - Standard

Avast Schädliche Datei Blockade Mozilla Firefox



Ok, alles bereinigt und Mozilla speichert wieder ab, vielen Dank!
Wie sieht es nun aus mit der Recovery CD?

Wie schon geschrieben, weitere Tipps nehme ich gern an.

Antwort

Themen zu Avast Schädliche Datei Blockade Mozilla Firefox
fehlercode 0x80000003, fehlercode 0x80070057, fehlercode 0xc0000094, fehlercode windows, js/toolbar.crossrider.a, msil/browsefox.g, msil/browsefox.h, pup.optional.1clickdownload.a, this device cannot start. (code10), win32/adware.yontoo, win32/browsefox.n, win32/browsefox.o, win32/browsefox.q, win32/browsefox.r, win32/installcore.rb, win32/packed.vmprotect.aaa, win32/packed.vmprotect.aad, win64/browsefox.b, win64/browsefox.cg, win64/browsefox.d



Ähnliche Themen: Avast Schädliche Datei Blockade Mozilla Firefox


  1. Avast! Web-Schutz hat eine schädliche Website oder Datei blockiert
    Plagegeister aller Art und deren Bekämpfung - 26.08.2015 (13)
  2. Ständiger Hinweis "Avast! Web-Schutz hat eine schädliche Website oder Datei blockiert"
    Plagegeister aller Art und deren Bekämpfung - 30.07.2015 (7)
  3. Avast meldet "schädliche Webseite blockiert " - svchost
    Plagegeister aller Art und deren Bekämpfung - 19.06.2015 (22)
  4. Avast meldet "schädliche Webseite blockiert " - svchost
    Plagegeister aller Art und deren Bekämpfung - 13.06.2015 (18)
  5. AVAST Free Antivirus findet ständig schädliche Websites, Dateien können nicht überprüft werden
    Log-Analyse und Auswertung - 21.01.2015 (10)
  6. Ständiger Hinweis "Avast! Web-Schutz hat eine schädliche Website oder Datei blockiert"
    Plagegeister aller Art und deren Bekämpfung - 30.08.2014 (7)
  7. Windows 8.1: Avast meldet im Uninetz ständig "schädliche Website blockiert.."
    Log-Analyse und Auswertung - 11.06.2014 (17)
  8. Windows 8: Avast blockiert beim Aufrufen von Internetseiten in Firefox ständig scheinbar schädliche Webseite
    Log-Analyse und Auswertung - 13.05.2014 (11)
  9. Avast blockiert ständig schädliche Website
    Plagegeister aller Art und deren Bekämpfung - 31.03.2014 (11)
  10. Schädliche Datei wurde ohne eigens Zutun '' ge-downloaded''
    Plagegeister aller Art und deren Bekämpfung - 03.09.2013 (7)
  11. 'HTML/IFrame.aho' [virus] in Datei C:\Users\Nana\AppData\Local\Mozilla\Firefox\Profiles\twl50o4s.de
    Plagegeister aller Art und deren Bekämpfung - 03.08.2012 (9)
  12. Trotz spybot search&destroy schädliche Datei gefunden
    Log-Analyse und Auswertung - 06.03.2012 (1)
  13. Ist SafeBoot.sys wirklich eine verdächtige/schädliche Datei?
    Plagegeister aller Art und deren Bekämpfung - 12.05.2011 (7)
  14. Firefox öffnet unaufgefordert schädliche Webseiten
    Plagegeister aller Art und deren Bekämpfung - 12.02.2011 (15)
  15. HJK-Log zeigt eine Schädliche Datei
    Log-Analyse und Auswertung - 06.05.2009 (0)
  16. HijackThis findet schädliche Datei
    Log-Analyse und Auswertung - 29.03.2009 (14)
  17. Habe ewentuell eine Schädliche Datei auf meinem Rechner!
    Plagegeister aller Art und deren Bekämpfung - 07.11.2004 (1)

Zum Thema Avast Schädliche Datei Blockade Mozilla Firefox - Avast findet permanent Schädliche Datein und blockiert sie, sobald ich Mozilla Firefox öffne. Avast findet aber keine Viren, aus diesem Grund bin ich Planlos. Ich habe bemerkt, dass es meine - Avast Schädliche Datei Blockade Mozilla Firefox...
Archiv
Du betrachtest: Avast Schädliche Datei Blockade Mozilla Firefox auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.