Trojaner-Board - ADWARE/bProtect.D unter Quarantäne windows Sicherheitscenter fehlerhaft

Hallo danke für deine Antwort.

hier der log von der FRST txt:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-09-2013

Ran by Jamo (administrator) on JAMO-PC on 09-09-2013 12:25:13

Running from Z:\Downloads

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe

(Adobe Systems Incorporated) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

() C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

() C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Bison Inc.) C:\Program Files (x86)\BisonCam\PID_0361\DeLay.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe

(Authentec) C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(BitTorrent Inc.) C:\Users\Jamo\AppData\Roaming\BitTorrent\BitTorrent.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Razer USA Ltd) C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe

(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe

(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

(SEIKO EPSON CORPORATION) C:\Windows\system32\spool\DRIVERS\x64\3\EBAPIx32.EXE

(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() Z:\Downloads\Defogger.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)

HKLM\...\Run: [DeLay] - C:\Program Files (x86)\BisonCam\PID_0361\DeLay.exe [53248 2008-12-05] (Bison Inc.)

HKLM\...\Run: [BLEServicesCtrl] - C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)

HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp

HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64

HKLM\...\Run: [KeepSafe] - C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe [38728 2011-10-21] (Authentec)

HKLM\...\Run: [] - 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Policies\Explorer: [NoActiveDesktop] 1

HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1

HKCU\...\Run: [Auto] - D:\autorun.exe

HKCU\...\Run: [EPSON SX420W Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Windows\TEMP\E_S1B1E.tmp" /EF "HKCU"

HKCU\...\Run: [Epson Stylus SX420W(Netzwerk)] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Windows\TEMP\E_S83A0.tmp" /EF "HKCU"

HKCU\...\Run: [BitTorrent] - C:\Users\Jamo\AppData\Roaming\BitTorrent\BitTorrent.exe [884576 2013-09-04] (BitTorrent Inc.)

HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation)

HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)

HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Razer Mamba Elite Driver] - C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe [974864 2012-12-21] (Razer USA Ltd)

HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-06-10] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)

HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dell.com

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com

SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 

BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\IEBHO.DLL (AuthenTec Inc.)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll (AuthenTec Inc.)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jamo\AppData\Roaming\Mozilla\Firefox\Profiles\a8fytlpg.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files\AuthenTec TrueSuite\x86\npffwloplugin.dll (AuthenTec, Inc)

FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
 

Chrome: 

=======

CHR RestoreOnStartup: "hxxp://google.de/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File

CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

CHR Plugin: (TrueSuite) - C:\Program Files\AuthenTec TrueSuite\x86\npffwloplugin.dll (AuthenTec, Inc)

CHR Extension: (Google Drive) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0

CHR Extension: (Gmail) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Jamo\AppData\Roaming\BabSolution\CR\delta1.crx

CHR HKLM-x32\...\Chrome\Extension: [oelloajafbopojkjmieelljfkcmdpdhf] - C:\Program Files\AuthenTec TrueSuite\x86\tschrome.crx
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-03] (Avira Operations GmbH & Co. KG)

R2 ArchiCrypt Ultimate RAM-Disk 4; C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe [1580648 2013-04-30] (Softwareentwicklung Remus - ArchiCrypt)

R2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2847696 2013-07-26] ()

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-06-10] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-06-10] (BlueStack Systems, Inc.)

R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [2125160 2012-08-24] (AuthenTec, Inc)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-15] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()

R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)

R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-05-23] ()

R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R1 ACMoFlex64RD4; C:\Windows\system32\drivers\ACMoFlex64RD4.sys [23656 2013-04-30] (Softwareentwicklung Remus - ArchiCrypt.de)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [37472 2013-02-14] (Advanced Micro Devices, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-05-09] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-06-10] (BlueStack Systems)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-06-10] (BlueStack Systems)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-09-03] (DT Soft Ltd)

R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [30112 2013-05-11] (REALiX(tm))

R3 mamba2; C:\Windows\System32\DRIVERS\mamba2.sys [11776 2012-12-10] (Razer USA Ltd)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-09 12:23 - 2013-09-09 12:23 - 00000168 _____ C:\Users\Jamo\defogger_reenable

2013-09-09 11:21 - 2013-09-09 11:21 - 00002003 _____ C:\Users\Public\Desktop\Nitro Reader.lnk

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\FileOpen

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\ProgramData\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\ProgramData\FileOpen

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Program Files\Common Files\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Program Files (x86)\Nitro

2013-09-09 11:21 - 2013-07-26 06:57 - 00029712 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll

2013-09-09 11:21 - 2013-07-26 06:57 - 00017936 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll

2013-09-09 11:20 - 2013-09-09 11:20 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\Downloaded Installations

2013-09-09 09:53 - 2013-09-09 09:53 - 96601965 _____ C:\Windows\SysWOW64\쬀踹腤£

2013-09-07 04:22 - 2013-09-09 09:52 - 00000672 _____ C:\Windows\setupact.log

2013-09-07 04:22 - 2013-09-07 04:22 - 00000000 _____ C:\Windows\setuperr.log

2013-09-05 04:14 - 2013-09-06 04:31 - 00003432 _____ C:\Windows\System32\Tasks\BrowserProtect

2013-09-04 14:15 - 2013-09-04 14:15 - 00000000 ____D Z:\Eigene Dokumente\WB Games

2013-09-04 14:14 - 2013-09-04 14:14 - 00000000 ____D Z:\Eigene Dokumente\Games for Windows - LIVE Demos

2013-09-04 14:13 - 2013-09-04 14:13 - 00000000 ____D C:\Program Files (x86)\AMD

2013-09-04 13:52 - 2013-09-04 13:52 - 00001051 _____ C:\Users\Public\Desktop\Batman - Arkham City.lnk

2013-09-04 10:12 - 2013-09-04 10:12 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-09-04 10:11 - 2013-09-04 10:16 - 00000000 ____D C:\ProgramData\WarThunder

2013-09-04 10:11 - 2013-09-04 10:11 - 00000000 ____D C:\Users\Jamo\AppData\Local\WarThunder

2013-09-04 10:08 - 2013-09-04 10:08 - 00000869 _____ C:\Users\Jamo\Desktop\BitTorrent.lnk

2013-09-04 10:06 - 2013-09-09 12:25 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\BitTorrent

2013-09-04 09:56 - 2013-09-04 10:02 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\FileZilla

2013-09-03 19:33 - 2013-09-03 19:35 - 00000000 ____D Z:\Eigene Dokumente\Command and Conquer Generals Data

2013-09-03 19:30 - 2013-09-06 17:57 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\DAEMON Tools Lite

2013-09-03 19:30 - 2013-09-03 19:30 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys

2013-09-03 19:30 - 2013-09-03 19:30 - 00001950 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2013-09-03 19:30 - 2013-09-03 19:30 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite

2013-09-03 19:29 - 2013-09-03 19:31 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-09-03 17:49 - 2005-06-07 14:58 - 02032128 _____ C:\Users\Jamo\Desktop\CnC_G.mdf

2013-09-03 17:48 - 2005-06-07 14:43 - 00000486 _____ C:\Users\Jamo\Desktop\CnC_G.mds

2013-09-03 17:35 - 2013-09-03 17:35 - 00000618 _____ C:\Windows\eReg.dat

2013-09-03 17:09 - 2013-09-03 17:09 - 00000471 _____ C:\Users\Public\Desktop\Command & Conquer Generals.lnk

2013-09-03 17:08 - 2013-09-03 17:09 - 00000000 ____D C:\Program Files (x86)\EA Games

2013-08-16 11:56 - 2013-08-16 11:56 - 00000000 ____D Z:\Eigene Dokumente\Paradox Interactive

2013-08-14 22:59 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-14 22:59 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-14 22:59 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-08-14 22:59 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-08-14 22:59 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-14 22:59 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-08-14 22:59 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-08-14 22:59 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-08-14 22:59 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-08-14 22:59 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-08-14 20:21 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-14 20:21 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-08-14 20:21 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 20:21 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-08-14 20:21 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 20:21 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 20:21 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-08-14 20:21 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 20:21 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 20:21 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 20:21 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 20:21 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-14 20:21 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-08-14 20:21 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-08-14 20:21 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-08-14 20:21 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-08-14 20:21 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-08-14 20:21 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-08-14 20:21 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-08-14 20:21 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-08-14 20:21 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-08-14 20:21 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-08-14 20:21 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-08-14 20:21 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-08-14 20:21 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-08-14 20:21 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 20:21 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
 

==================== One Month Modified Files and Folders =======
 

2013-09-09 12:25 - 2013-09-04 10:06 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\BitTorrent

2013-09-09 12:23 - 2013-09-09 12:23 - 00000168 _____ C:\Users\Jamo\defogger_reenable

2013-09-09 12:23 - 2013-05-08 23:04 - 00000000 ____D C:\Users\Jamo

2013-09-09 12:21 - 2013-05-15 18:40 - 00000000 ____D C:\Program Files (x86)\Steam

2013-09-09 11:21 - 2013-09-09 11:21 - 00002003 _____ C:\Users\Public\Desktop\Nitro Reader.lnk

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\FileOpen

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\ProgramData\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\ProgramData\FileOpen

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Program Files\Common Files\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Program Files (x86)\Nitro

2013-09-09 11:20 - 2013-09-09 11:20 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\Downloaded Installations

2013-09-09 11:13 - 2013-05-16 14:01 - 00000000 ____D C:\Users\Jamo\AppData\Local\Windows Live

2013-09-09 09:59 - 2009-07-14 06:45 - 00026704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-09 09:59 - 2009-07-14 06:45 - 00026704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-09 09:56 - 2013-05-09 08:57 - 00629594 _____ C:\Windows\system32\perfh007.dat

2013-09-09 09:56 - 2013-05-09 08:57 - 00120434 _____ C:\Windows\system32\perfc007.dat

2013-09-09 09:56 - 2009-07-14 07:13 - 01434340 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-09 09:53 - 2013-09-09 09:53 - 96601965 _____ C:\Windows\SysWOW64\쬀踹腤£

2013-09-09 09:52 - 2013-09-07 04:22 - 00000672 _____ C:\Windows\setupact.log

2013-09-09 00:26 - 2013-05-08 23:04 - 01896251 _____ C:\Windows\WindowsUpdate.log

2013-09-07 04:22 - 2013-09-07 04:22 - 00000000 _____ C:\Windows\setuperr.log

2013-09-06 17:57 - 2013-09-03 19:30 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\DAEMON Tools Lite

2013-09-06 17:57 - 2013-05-26 23:09 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\uTorrent

2013-09-06 17:57 - 2013-05-09 08:58 - 00000000 ____D C:\Windows\Panther

2013-09-06 17:56 - 2013-06-12 08:32 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-09-06 17:56 - 2013-05-22 22:10 - 00000000 ____D C:\Program Files\CCleaner

2013-09-06 17:55 - 2013-05-09 18:42 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\vlc

2013-09-06 04:31 - 2013-09-05 04:14 - 00003432 _____ C:\Windows\System32\Tasks\BrowserProtect

2013-09-06 04:15 - 2013-05-09 07:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-06 04:13 - 2013-05-09 07:55 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-06 04:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-05 18:36 - 2013-06-30 09:30 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-04 14:15 - 2013-09-04 14:15 - 00000000 ____D Z:\Eigene Dokumente\WB Games

2013-09-04 14:14 - 2013-09-04 14:14 - 00000000 ____D Z:\Eigene Dokumente\Games for Windows - LIVE Demos

2013-09-04 14:13 - 2013-09-04 14:13 - 00000000 ____D C:\Program Files (x86)\AMD

2013-09-04 13:52 - 2013-09-04 13:52 - 00001051 _____ C:\Users\Public\Desktop\Batman - Arkham City.lnk

2013-09-04 13:52 - 2013-06-14 08:59 - 00000000 ____D C:\Users\Jamo\AppData\Local\Downloaded Installations

2013-09-04 10:16 - 2013-09-04 10:11 - 00000000 ____D C:\ProgramData\WarThunder

2013-09-04 10:12 - 2013-09-04 10:12 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-09-04 10:12 - 2013-06-02 12:49 - 00000000 ____D Z:\Eigene Dokumente\My Games

2013-09-04 10:11 - 2013-09-04 10:11 - 00000000 ____D C:\Users\Jamo\AppData\Local\WarThunder

2013-09-04 10:08 - 2013-09-04 10:08 - 00000869 _____ C:\Users\Jamo\Desktop\BitTorrent.lnk

2013-09-04 10:02 - 2013-09-04 09:56 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\FileZilla

2013-09-04 08:31 - 2009-07-14 06:45 - 00316544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-03 23:32 - 2013-05-08 23:55 - 00071216 _____ C:\Users\Jamo\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-03 19:35 - 2013-09-03 19:33 - 00000000 ____D Z:\Eigene Dokumente\Command and Conquer Generals Data

2013-09-03 19:31 - 2013-09-03 19:29 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-09-03 19:30 - 2013-09-03 19:30 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys

2013-09-03 19:30 - 2013-09-03 19:30 - 00001950 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2013-09-03 19:30 - 2013-09-03 19:30 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite

2013-09-03 17:35 - 2013-09-03 17:35 - 00000618 _____ C:\Windows\eReg.dat

2013-09-03 17:35 - 2013-05-08 23:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-09-03 17:09 - 2013-09-03 17:09 - 00000471 _____ C:\Users\Public\Desktop\Command & Conquer Generals.lnk

2013-09-03 17:09 - 2013-09-03 17:08 - 00000000 ____D C:\Program Files (x86)\EA Games

2013-09-03 12:37 - 2013-05-09 07:48 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-03 12:37 - 2013-05-09 00:38 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-03 12:37 - 2013-05-09 00:38 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-24 23:56 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-20 16:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-08-18 14:11 - 2013-07-30 16:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-18 14:11 - 2013-07-30 16:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-16 11:56 - 2013-08-16 11:56 - 00000000 ____D Z:\Eigene Dokumente\Paradox Interactive

2013-08-14 22:58 - 2013-07-13 09:49 - 00000000 ____D C:\Windows\system32\MRT

2013-08-14 22:57 - 2013-05-09 01:34 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

Files to move or delete:

====================

C:\Users\Jamo\AppData\Local\Temp\nitro_reader3_64.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-01 00:49
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---
und hier der log der Addition.txt:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-09-2013

Ran by Jamo at 2013-09-09 12:25:36

Running from Z:\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

   

µTorrent (x32 Version: 3.3.0.29544)

3DMark 11 (x32 Version: 1.0.5)

3DMark06 (x32 Version: 1.2.1)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)

Advanced Archive Password Recovery (x32 Version: 4.54.48.1338)

AIDA64 Extreme Edition v2.85 (x32 Version: 2.85)

AMD Accelerated Video Transcoding (Version: 12.10.100.30328)

AMD Catalyst Install Manager (Version: 8.0.911.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Media Foundation Decoders (Version: 1.0.80328.2204)

AuthenTec Fingerprint Driver (Version: 1.6.1.0342)

AuthenTec TrueSuite (Version: 5.2.500.16)

Avira Free Antivirus (x32 Version: 13.0.0.4052)

Batman - Arkham City (x32 Version: 1.0.0.0)

Battlefield 3™ (x32 Version: 1.0.0.0)

Battlefield: Bad Company 2 (x32)

Battlelog Web Plugins (x32 Version: 2.1.7)

BisonCam (x32 Version: )

BitTorrent (HKCU Version: 7.8.1.30016)

BlueStacks App Player (x32 Version: 0.7.13.899)

BlueStacks Notification Center (x32 Version: 0.7.13.899)

BrowserProtect (x32)

calibre 64bit (Version: 0.9.36)

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center (x32 Version: 2013.0328.2218.38225)

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225)

Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225)

Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225)

CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225)

CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225)

CCC Help Czech (x32 Version: 2013.0328.2217.38225)

CCC Help Danish (x32 Version: 2013.0328.2217.38225)

CCC Help Dutch (x32 Version: 2013.0328.2217.38225)

CCC Help English (x32 Version: 2013.0328.2217.38225)

CCC Help Finnish (x32 Version: 2013.0328.2217.38225)

CCC Help French (x32 Version: 2013.0328.2217.38225)

CCC Help German (x32 Version: 2013.0328.2217.38225)

CCC Help Greek (x32 Version: 2013.0328.2217.38225)

CCC Help Hungarian (x32 Version: 2013.0328.2217.38225)

CCC Help Italian (x32 Version: 2013.0328.2217.38225)

CCC Help Japanese (x32 Version: 2013.0328.2217.38225)

CCC Help Korean (x32 Version: 2013.0328.2217.38225)

CCC Help Norwegian (x32 Version: 2013.0328.2217.38225)

CCC Help Polish (x32 Version: 2013.0328.2217.38225)

CCC Help Portuguese (x32 Version: 2013.0328.2217.38225)

CCC Help Russian (x32 Version: 2013.0328.2217.38225)

CCC Help Spanish (x32 Version: 2013.0328.2217.38225)

CCC Help Swedish (x32 Version: 2013.0328.2217.38225)

CCC Help Thai (x32 Version: 2013.0328.2217.38225)

CCC Help Turkish (x32 Version: 2013.0328.2217.38225)

ccc-utility64 (Version: 2013.0328.2218.38225)

CCleaner (Version: 4.05)

CdCoverCreator 2.5.3 (x32 Version: 2.5.3)

Cheat Engine 6.2 (x32)

Command & Conquer Generals (x32 Version: 0.50.0000)

Command and Conquer 3: Tiberium Wars (x32)

CPUID CPU-Z 1.64.0

D3DX10 (x32 Version: 15.4.2368.0902)

DAEMON Tools Lite (x32 Version: 4.47.1.0333)

Dead Island Riptide (x32)

Delta Chrome Toolbar (x32)

DeSTRoi - Decrypt Samsung TV Recordings (x32 Version: 1.3.1)

Dota 2 (x32)

Dual-Core Optimizer (x32 Version: 1.1.4.0169)

EPSON Scan (x32)

EPSON SX420W Series Handbuch (x32)

EPSON SX420W Series Netzwerk-Handbuch (x32)

EPSON SX420W Series Printer Uninstall

EpsonNet Print (x32 Version: 2.4j)

EpsonNet Setup 3.2 (x32 Version: 3.2a)

ESN Sonar (x32 Version: 0.70.4)

Europa Universalis IV (x32)

Finger Printer (x32 Version: 2.00.0000)

Free Audio CD Burner version 2.0.24.628 (x32 Version: 2.0.24.628)

Full Tilt Poker.Eu (x32 Version: 4.59.12.WIN.FullTilt.EU)

Futuremark SystemInfo (x32 Version: 4.17.0)

Google Chrome (x32 Version: 29.0.1547.66)

Google Update Helper (x32 Version: 1.3.21.153)

Grand Theft Auto IV (x32)

hiCrypt Ultimate RAM-Disk 4 Version 4.0.1.4254 (Version: 4.0.1.4254)

HWiNFO64 Version 4.16 (Version: 4.16)

ImgBurn (x32 Version: 2.5.7.0)

Intel PROSet Wireless

Intel(R) Management Engine Components (x32 Version: 8.0.4.1441)

Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)

Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.1.0.0096)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.1.0.0140)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)

Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.225)

Intel® PROSet/Wireless WiFi-Software (Version: 15.01.0000.0830)

Intel® Trusted Connect Service Client (Version: 1.23.605.1)

Junk Mail filter update (x32 Version: 16.4.3505.0912)

LibreOffice 4.0.3.3 (x32 Version: 4.0.3.3)

Lucius (x32)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)

Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Mortal Kombat Kollection (x32)

Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 23.0.1)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT_amd64 (x32 Version: 15.4.2862.0708)

MSVCRT110 (x32 Version: 16.4.1108.0727)

MSVCRT110_amd64 (Version: 16.4.1109.0912)

Nitro Reader 3 (Version: 3.5.6.5)

OpenAL (x32)

Origin (x32 Version: 9.1.15.109)

PDF-Viewer (Version: 2.5.211.0)

PKR (x32)

PokerStars.eu (x32)

PunkBuster Services (x32 Version: 0.991)

Razer Mamba (x32 Version: 2.04.00)

Realtek Ethernet Controller Driver (x32 Version: 7.54.309.2012)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6526)

Realtek PCIE Card Reader (x32 Version: 6.1.7601.27020)

Sid Meier's Civilization V (x32)

Steam (x32 Version: 1.0.0.0)

Team Fortress 2 (x32)

TeamSpeak 3 Client (x32 Version: 3.0.10.1)

THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07)

Tomb Raider (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

VLC media player 2.0.7 (Version: 2.0.7)

War Thunder (x32)

Warframe (x32)

WebCam Installer (x32 Version: 4.04)

Windows Live Communications Platform (x32 Version: 16.4.3505.0912)

Windows Live Essentials (x32 Version: 16.4.3505.0912)

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)

Windows Live Installer (x32 Version: 16.4.3505.0912)

Windows Live Mail (x32 Version: 16.4.3505.0912)

Windows Live MIME IFilter (Version: 16.4.3505.0912)

Windows Live Photo Common (x32 Version: 16.4.3505.0912)

Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)

Windows Live SOXE (x32 Version: 16.4.3505.0912)

Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)

Windows Live UX Platform (x32 Version: 16.4.3505.0912)

Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)

Windows Live Writer (x32 Version: 16.4.3505.0912)

Windows Live Writer Resources (x32 Version: 16.4.3505.0912)

WinRAR 4.20 (64-Bit) (Version: 4.20.0)
 

==================== Restore Points  =========================
 
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started

Task: {139AFF91-6954-4113-A9E1-622365077786} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)

Task: {2BBF2F1D-DC5A-484F-89B1-ECB09B23E6E3} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe

Task: {3C313BB5-8915-43C3-8582-95DEB3353B4A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {485C5EEE-A990-4BE4-BCCC-22C5558F0FD0} - System32\Tasks\EPUpdater => C:\Users\Jamo\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] ()

Task: {4DD9046D-19F8-4A2B-94C4-03EC824EA66B} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task

Task: {584EBA0A-E0ED-4B21-94BA-1E8877E6C58E} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe [2013-05-28] (Adobe Systems Incorporated)

Task: {7B67D6D6-7443-47EE-B6F2-FEA29DD0EB2F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-09] (Google Inc.)

Task: {804DF7F0-16E5-4D7A-A4E3-9668615B3B78} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe [2013-05-28] (Adobe Systems Incorporated)

Task: {8B190D65-E21F-4C58-BFED-F67C6A096021} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect

Task: {98E6A941-07AC-479F-915B-5BF8FEC449EF} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)

Task: {A3E2458B-E9ED-4111-B266-CEC6EA88BEC9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-09] (Google Inc.)

Task: {A89EC791-41C0-4EC5-BB2D-99142576318B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-28] (Adobe Systems Incorporated)

Task: {EBDD4E38-8C04-438D-9EA8-68B8576AB66B} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2012-08-24 03:37 - 2012-08-24 03:37 - 02492264 _____ (AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\biolayer.dll

2012-08-24 03:37 - 2012-08-24 03:37 - 00171880 _____ (AuthenTec) C:\Program Files\AuthenTec TrueSuite\TSLog.dll

2012-08-24 03:38 - 2012-08-24 03:38 - 03953000 _____ (HP) C:\Program Files\AuthenTec TrueSuite\TrueSuiteDlg.dll

2012-08-24 03:37 - 2012-08-24 03:37 - 02388840 _____ (AuthenTec, Inc.) C:\Program Files\AuthenTec TrueSuite\EnumWindowsUsers.dll

2012-08-24 03:37 - 2012-08-24 03:37 - 01136488 _____ () C:\Program Files\AuthenTec TrueSuite\DataManager.dll

2012-07-16 06:59 - 2012-07-16 06:59 - 06593384 _____ (AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueAPI.dll

2012-08-24 03:38 - 2012-08-24 03:38 - 00087400 _____ () C:\Program Files\AuthenTec TrueSuite\ssutil.dll

2012-08-24 03:37 - 2012-08-24 03:37 - 00449384 _____ (Authentec Inc.) C:\Program Files\AuthenTec TrueSuite\TokenMachine.dll

2011-10-21 14:00 - 2011-10-21 14:00 - 04014408 _____ (Authentec) C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvns.dll

2011-10-21 13:49 - 2011-10-21 13:49 - 00829256 _____ (Authentec) C:\Program Files\AuthenTec TrueSuite\KeepSafe\inffv1.dll

2011-10-21 13:56 - 2011-10-21 13:56 - 02992968 _____ (Authentec) C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvcore.dll

2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm

2013-05-10 20:33 - 2012-06-09 19:20 - 00196096 _____ (Alexander Roshal) C:\Program Files\WinRAR\rarext.dll

2013-06-18 12:54 - 2013-06-17 02:50 - 07252544 _____ (Tracker Software Products (Canada) Ltd.) C:\Program Files\Tracker Software\Shell Extensions\XCShInfo.dll

2013-05-08 23:53 - 2010-09-14 13:53 - 00025600 ____N (Creative Technology Ltd.) C:\Windows\system32\THXCfg64.dll

2013-05-08 23:53 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL

2013-05-08 23:48 - 2011-12-12 10:24 - 00626264 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll

2012-12-14 02:42 - 2012-12-14 02:42 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc

2013-05-08 23:43 - 2012-10-22 11:39 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2013-03-28 22:14 - 2013-03-28 22:14 - 00217088 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll

2013-03-28 22:14 - 2013-03-28 22:14 - 00335872 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll

2013-03-28 22:17 - 2013-03-28 22:17 - 00028672 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll

2013-05-08 23:53 - 2009-08-31 16:55 - 00197632 ____N (Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXLgcy.dll

2013-05-08 23:53 - 2009-09-08 10:01 - 00237056 ____N (Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\CTLoadRs.dll

2013-05-08 23:53 - 2010-11-01 17:34 - 00159744 ____N () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00055352 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\cfglib.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00349752 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccguard.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00029240 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccgrdrc.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00229432 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccgrdw.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00419384 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccwgrd.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00807992 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccgen.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00049720 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccgenrc.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00220216 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccupdate.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00028728 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccupdrc.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00083000 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\cclic.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00009784 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\cclicrc.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00237624 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccmsg.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00010296 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccmsgrc.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00014392 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccmainrc.dll

2013-05-09 00:38 - 2013-09-03 12:37 - 00218168 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gpipc.dll

2012-12-21 12:10 - 2012-12-21 12:10 - 00766976 _____ (Razer USA Ltd) C:\Windows\SysWOW64\RzMwApi.dll

2013-08-15 11:13 - 2013-08-15 11:13 - 00650752 _____ (BlueStack Systems, Inc.) C:\Windows\assembly\NativeImages_v2.0.50727_32\HD-Agent\c727188e32f8e011d76b0acd288bf1f4\HD-Agent.ni.exe

2013-08-15 11:13 - 2013-08-15 11:13 - 00155136 _____ (CodeTitans) C:\Windows\assembly\NativeImages_v2.0.50727_32\JSON\a9178c79b5d44bbf0d5c4dfe4bd78726\JSON.ni.dll

2012-09-12 15:57 - 2012-09-12 15:57 - 00282112 _____ () C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll

2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm

2013-05-16 14:02 - 2013-05-16 14:02 - 00109568 _____ (Microsoft Corporation) C:\Users\Jamo\AppData\Local\Microsoft\Windows Live\Installer\Catalog\wlsres.dll.mui

2007-05-23 07:14 - 2007-05-23 07:14 - 00172032 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\spool\DRIVERS\x64\3\EBAPI4.DLL

2006-11-22 03:05 - 2006-11-22 03:05 - 00094208 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\spool\DRIVERS\x64\3\EBPSHRE4.DLL

2013-09-04 09:18 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\icudt.dll

2013-09-04 09:18 - 2013-09-02 22:35 - 00709584 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libglesv2.dll

2013-09-04 09:18 - 2013-09-02 22:35 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libegl.dll

2013-09-04 09:18 - 2013-09-02 22:35 - 04053456 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll

2013-09-04 09:18 - 2013-09-02 22:35 - 00410576 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll

2013-09-04 09:18 - 2013-09-02 22:35 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll

2013-09-04 09:18 - 2013-09-02 22:35 - 13599184 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/09/2013 11:21:24 AM) (Source: Application Hang) (User: )

Description: Programm E_IARNGCE.EXE, Version 7.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1144
 

Startzeit: 01cead3d4adfd224
 

Endzeit: 4
 

Anwendungspfad: C:\Windows\system32\spool\DRIVERS\x64\3\E_IARNGCE.EXE
 

Berichts-ID: 2ecfe4e9-1931-11e3-9b6f-0090f5e4c9e7
 

Error: (09/09/2013 09:52:37 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/09/2013 09:52:36 AM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (09/08/2013 05:59:41 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/08/2013 05:59:41 PM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (09/08/2013 01:00:57 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/08/2013 01:00:57 PM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (09/08/2013 10:07:26 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/08/2013 10:07:26 AM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (09/07/2013 06:35:12 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (09/09/2013 09:52:36 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (09/08/2013 05:59:41 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (09/08/2013 01:56:16 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (09/08/2013 01:00:57 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (09/08/2013 10:07:26 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (09/07/2013 06:35:12 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (09/07/2013 03:55:55 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (09/07/2013 04:42:59 AM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (09/07/2013 04:22:54 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (09/06/2013 03:58:04 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 
 

Microsoft Office Sessions:

=========================

Error: (09/09/2013 11:21:24 AM) (Source: Application Hang)(User: )

Description: E_IARNGCE.EXE7.0.0.0114401cead3d4adfd2244C:\Windows\system32\spool\DRIVERS\x64\3\E_IARNGCE.EXE2ecfe4e9-1931-11e3-9b6f-0090f5e4c9e7
 

Error: (09/09/2013 09:52:37 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/09/2013 09:52:36 AM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (09/08/2013 05:59:41 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/08/2013 05:59:41 PM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (09/08/2013 01:00:57 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/08/2013 01:00:57 PM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (09/08/2013 10:07:26 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/08/2013 10:07:26 AM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (09/07/2013 06:35:12 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 17%

Total physical RAM: 16275.72 MB

Available physical RAM: 13397.97 MB

Total Pagefile: 32549.63 MB

Available Pagefile: 29420.71 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:119.24 GB) (Free:59.28 GB) NTFS

Drive e: (TOSHIBA EXT) (Fixed) (Total:698.64 GB) (Free:426.71 GB) NTFS

Drive f: (batmanArkhamCity) (CDROM) (Total:16.49 GB) (Free:0 GB) CDFS

Drive z: (Volume) (Fixed) (Total:698.54 GB) (Free:466.92 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 15EF7AAE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=699 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 15EF7A96)

Partition 1: (Not Active) - (Size=119 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: 070CB58A)

Partition 1: (Not Active) - (Size=699 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

und hier log der gmer.txt:

Code:

GMER 2.1.19163 - hxxp://www.gmer.net

Rootkit scan 2013-09-09 12:40:00

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP3T0L0-3 SAMSUNG_MZMTD128HAFV-00000 rev.DXT4200Q 119,24GB

Running: gmer_2.1.19163.exe; Driver: C:\Users\Jamo\AppData\Local\Temp\kxldypog.sys
 
 

---- User code sections - GMER 2.1 ----
 

.text  C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe[2416] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000076c11465 2 bytes [C1, 76]

.text  C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe[2416] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000076c114bb 2 bytes [C1, 76]

.text  ...                                                                                                                                                                  * 2

.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[2700] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                 0000000076c11465 2 bytes [C1, 76]

.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[2700] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                0000000076c114bb 2 bytes [C1, 76]

.text  ...                                                                                                                                                                  * 2

.text  C:\Windows\SysWOW64\PnkBstrA.exe[2780] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                                                              0000000073291a22 2 bytes [29, 73]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[2780] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                                                              0000000073291ad0 2 bytes [29, 73]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[2780] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                                                              0000000073291b08 2 bytes [29, 73]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[2780] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                                                              0000000073291bba 2 bytes [29, 73]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[2780] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                                                              0000000073291bda 2 bytes [29, 73]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[2780] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                       0000000076c11465 2 bytes [C1, 76]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[2780] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                      0000000076c114bb 2 bytes [C1, 76]

.text  ...                                                                                                                                                                  * 2

.text  C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                    0000000076c11465 2 bytes [C1, 76]

.text  C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                   0000000076c114bb 2 bytes [C1, 76]

.text  ...                                                                                                                                                                  * 2

.text  C:\Users\Jamo\AppData\Roaming\BitTorrent\BitTorrent.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                0000000076c11465 2 bytes [C1, 76]

.text  C:\Users\Jamo\AppData\Roaming\BitTorrent\BitTorrent.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                               0000000076c114bb 2 bytes [C1, 76]

.text  ...                                                                                                                                                                  * 2

.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                         0000000076c11465 2 bytes [C1, 76]

.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                        0000000076c114bb 2 bytes [C1, 76]

.text  ...                                                                                                                                                                  * 2

.text  C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[4896] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                    0000000076c11465 2 bytes [C1, 76]

.text  C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[4896] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                   0000000076c114bb 2 bytes [C1, 76]

.text  ...                                                                                                                                                                  * 2

.text  C:\Program Files (x86)\Google\Update\GoogleUpdate.exe[6000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                  0000000076c11465 2 bytes [C1, 76]

.text  C:\Program Files (x86)\Google\Update\GoogleUpdate.exe[6000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                 0000000076c114bb 2 bytes [C1, 76]

.text  ...                                                                                                                                                                  * 2
 

---- Registry - GMER 2.1 ----
 

Reg    HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{DFF71EF6-DF3F-4E9D-90A4-F051A8F4E2CA}\Connection@Name                          isatap.{475803F9-074F-4784-9C79-EDE2DB78C0E9}

Reg    HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Bind                             \Device\{A7B41AE0-CAA6-4E30-A718-15C149666949}?\Device\{DFF71EF6-DF3F-4E9D-90A4-F051A8F4E2CA}?\Device\{15D731B8-B3DF-41D4-AA70-D16718AD9447}?

Reg    HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Route                            "{A7B41AE0-CAA6-4E30-A718-15C149666949}"?"{DFF71EF6-DF3F-4E9D-90A4-F051A8F4E2CA}"?"{15D731B8-B3DF-41D4-AA70-D16718AD9447}"?

Reg    HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Export                           \Device\TCPIP6TUNNEL_{A7B41AE0-CAA6-4E30-A718-15C149666949}?\Device\TCPIP6TUNNEL_{DFF71EF6-DF3F-4E9D-90A4-F051A8F4E2CA}?\Device\TCPIP6TUNNEL_{15D731B8-B3DF-41D4-AA70-D16718AD9447}?

Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c8f733b76230                                                                                          

Reg    HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{DFF71EF6-DF3F-4E9D-90A4-F051A8F4E2CA}@InterfaceName                                               isatap.{475803F9-074F-4784-9C79-EDE2DB78C0E9}

Reg    HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{DFF71EF6-DF3F-4E9D-90A4-F051A8F4E2CA}@ReusableType                                                0

Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c8f733b76230 (not active ControlSet)                                                                      
 

---- EOF - GMER 2.1 ----

OK dann mal weiter. Hier der Log der Adwcleaner.txt:
AdwCleaner Logfile:

Code:

# AdwCleaner v3.003 - Bericht erstellt am 12/09/2013 um 00:09:32

# Updated 07/09/2013 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : Jamo - JAMO-PC

# Gestartet von : Z:\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\ProgramData\BrowserProtect

Ordner Gelöscht : C:\Users\Jamo\AppData\Roaming\Babylon

Ordner Gelöscht : C:\Users\Jamo\AppData\Roaming\file scout

Ordner Gelöscht : C:\Users\Jamo\AppData\Roaming\OpenCandy

Datei Gelöscht : C:\Windows\System32\Tasks\BrowserProtect

Datei Gelöscht : C:\Windows\System32\Tasks\EPUpdater
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS

Schlüssel Gelöscht : HKCU\Software\5b68cd9bc39ec13

Schlüssel Gelöscht : HKLM\SOFTWARE\5b68cd9bc39ec13

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}

Schlüssel Gelöscht : HKCU\Software\APN PIP

Schlüssel Gelöscht : HKCU\Software\BabSolution

Schlüssel Gelöscht : HKCU\Software\BabylonToolbar

Schlüssel Gelöscht : HKCU\Software\DataMngr

Schlüssel Gelöscht : HKCU\Software\filescout

Schlüssel Gelöscht : HKLM\Software\Babylon

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\PIP
 

***** [ Browser ] *****
 

-\\ Internet Explorer v0.0.0.0
 
 

-\\ Mozilla Firefox v23.0.1 (de)
 

[ Datei : C:\Users\Jamo\AppData\Roaming\Mozilla\Firefox\Profiles\a8fytlpg.default\prefs.js ]
 
 

-\\ Google Chrome v29.0.1547.66
 

[ Datei : C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [2779 octets] - [10/09/2013 01:12:33]

AdwCleaner[S0].txt - [2235 octets] - [10/09/2013 01:14:32]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2295 octets] ##########

--- --- ---

und hier der 2te Log der FRST.txt:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-09-2013

Ran by Jamo (administrator) on JAMO-PC on 12-09-2013 00:13:06

Running from Z:\Downloads

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Bison Inc.) C:\Program Files (x86)\BisonCam\PID_0361\DeLay.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe

(Authentec) C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Razer USA Ltd) C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe

(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe

(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)

HKLM\...\Run: [DeLay] - C:\Program Files (x86)\BisonCam\PID_0361\DeLay.exe [53248 2008-12-05] (Bison Inc.)

HKLM\...\Run: [BLEServicesCtrl] - C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)

HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp

HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64

HKLM\...\Run: [KeepSafe] - C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe [38728 2011-10-21] (Authentec)

HKLM\...\Run: [] - 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Policies\Explorer: [NoActiveDesktop] 1

HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1

HKCU\...\Run: [Auto] - D:\autorun.exe

HKCU\...\Run: [EPSON SX420W Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Windows\TEMP\E_S1B1E.tmp" /EF "HKCU"

HKCU\...\Run: [Epson Stylus SX420W(Netzwerk)] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Windows\TEMP\E_S83A0.tmp" /EF "HKCU"

HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation)

HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)

HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Razer Mamba Elite Driver] - C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe [974864 2012-12-21] (Razer USA Ltd)

HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-06-10] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)

HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Dell Official Site - The Power To Do More | Dell

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Dell Official Site - The Power To Do More | Dell

BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\IEBHO.DLL (AuthenTec Inc.)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll (AuthenTec Inc.)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jamo\AppData\Roaming\Mozilla\Firefox\Profiles\a8fytlpg.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files\AuthenTec TrueSuite\x86\npffwloplugin.dll (AuthenTec, Inc)

FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
 

Chrome: 

=======

CHR RestoreOnStartup: "hxxp://google.de/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File

CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

CHR Plugin: (TrueSuite) - C:\Program Files\AuthenTec TrueSuite\x86\npffwloplugin.dll (AuthenTec, Inc)

CHR Extension: (Google Drive) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0

CHR Extension: (Gmail) - C:\Users\Jamo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR HKLM-x32\...\Chrome\Extension: [oelloajafbopojkjmieelljfkcmdpdhf] - C:\Program Files\AuthenTec TrueSuite\x86\tschrome.crx
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-03] (Avira Operations GmbH & Co. KG)

R2 ArchiCrypt Ultimate RAM-Disk 4; C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe [1580648 2013-04-30] (Softwareentwicklung Remus - ArchiCrypt)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-06-10] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-06-10] (BlueStack Systems, Inc.)

R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [2125160 2012-08-24] (AuthenTec, Inc)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-15] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()

R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)

R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-05-23] ()

R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R1 ACMoFlex64RD4; C:\Windows\system32\drivers\ACMoFlex64RD4.sys [23656 2013-04-30] (Softwareentwicklung Remus - ArchiCrypt.de)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [37472 2013-02-14] (Advanced Micro Devices, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-05-09] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-06-10] (BlueStack Systems)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-06-10] (BlueStack Systems)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-09-03] (DT Soft Ltd)

R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [30112 2013-05-11] (REALiX(tm))

R3 mamba2; C:\Windows\System32\DRIVERS\mamba2.sys [11776 2012-12-10] (Razer USA Ltd)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-10 12:35 - 2013-09-12 00:03 - 00000224 _____ C:\Windows\setupact.log

2013-09-10 12:35 - 2013-09-10 12:35 - 00000000 _____ C:\Windows\setuperr.log

2013-09-10 10:42 - 2013-09-10 10:42 - 00000000 ____D C:\Windows\system32\appmgmt

2013-09-10 10:39 - 2013-09-10 10:39 - 00003312 ____N C:\bootsqm.dat

2013-09-10 10:20 - 2013-09-10 10:20 - 96922344 _____ C:\Windows\SysWOW64\敖芌腤A

2013-09-10 01:11 - 2013-09-10 01:14 - 00000000 ____D C:\AdwCleaner

2013-09-09 12:40 - 2013-09-09 12:40 - 00008097 _____ C:\Users\Jamo\Desktop\gmer.log

2013-09-09 12:25 - 2013-09-09 12:25 - 00000000 ____D C:\FRST

2013-09-09 12:23 - 2013-09-09 12:23 - 00000168 _____ C:\Users\Jamo\defogger_reenable

2013-09-09 11:21 - 2013-09-09 11:21 - 00002003 _____ C:\Users\Public\Desktop\Nitro Reader.lnk

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\FileOpen

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\ProgramData\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\ProgramData\FileOpen

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Program Files\Common Files\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Program Files (x86)\Nitro

2013-09-09 11:21 - 2013-07-26 06:57 - 00029712 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll

2013-09-09 11:21 - 2013-07-26 06:57 - 00017936 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll

2013-09-09 11:20 - 2013-09-09 11:20 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\Downloaded Installations

2013-09-04 14:15 - 2013-09-04 14:15 - 00000000 ____D Z:\Eigene Dokumente\WB Games

2013-09-04 14:14 - 2013-09-04 14:14 - 00000000 ____D Z:\Eigene Dokumente\Games for Windows - LIVE Demos

2013-09-04 14:13 - 2013-09-04 14:13 - 00000000 ____D C:\Program Files (x86)\AMD

2013-09-04 13:52 - 2013-09-04 13:52 - 00001051 _____ C:\Users\Public\Desktop\Batman - Arkham City.lnk

2013-09-04 10:12 - 2013-09-04 10:12 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-09-04 10:11 - 2013-09-04 10:16 - 00000000 ____D C:\ProgramData\WarThunder

2013-09-04 10:11 - 2013-09-04 10:11 - 00000000 ____D C:\Users\Jamo\AppData\Local\WarThunder

2013-09-04 10:06 - 2013-09-10 10:42 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\BitTorrent

2013-09-04 09:56 - 2013-09-04 10:02 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\FileZilla

2013-09-03 19:33 - 2013-09-03 19:35 - 00000000 ____D Z:\Eigene Dokumente\Command and Conquer Generals Data

2013-09-03 19:30 - 2013-09-06 17:57 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\DAEMON Tools Lite

2013-09-03 19:30 - 2013-09-03 19:30 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys

2013-09-03 19:30 - 2013-09-03 19:30 - 00001950 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2013-09-03 19:30 - 2013-09-03 19:30 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite

2013-09-03 19:29 - 2013-09-03 19:31 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-09-03 17:49 - 2005-06-07 14:58 - 02032128 _____ C:\Users\Jamo\Desktop\CnC_G.mdf

2013-09-03 17:48 - 2005-06-07 14:43 - 00000486 _____ C:\Users\Jamo\Desktop\CnC_G.mds

2013-09-03 17:35 - 2013-09-03 17:35 - 00000618 _____ C:\Windows\eReg.dat

2013-09-03 17:09 - 2013-09-03 17:09 - 00000471 _____ C:\Users\Public\Desktop\Command & Conquer Generals.lnk

2013-09-03 17:08 - 2013-09-03 17:09 - 00000000 ____D C:\Program Files (x86)\EA Games

2013-08-16 11:56 - 2013-08-16 11:56 - 00000000 ____D Z:\Eigene Dokumente\Paradox Interactive

2013-08-14 22:59 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-14 22:59 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-14 22:59 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-08-14 22:59 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-14 22:59 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-08-14 22:59 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-14 22:59 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-08-14 22:59 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-08-14 22:59 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-08-14 22:59 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-08-14 22:59 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-08-14 22:59 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-08-14 20:21 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-14 20:21 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-08-14 20:21 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 20:21 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-08-14 20:21 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 20:21 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 20:21 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-08-14 20:21 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 20:21 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 20:21 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 20:21 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 20:21 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-14 20:21 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-08-14 20:21 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-08-14 20:21 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-08-14 20:21 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-08-14 20:21 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-08-14 20:21 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-08-14 20:21 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-08-14 20:21 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-08-14 20:21 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-08-14 20:21 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-08-14 20:21 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-08-14 20:21 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-08-14 20:21 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-08-14 20:21 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 20:21 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
 

==================== One Month Modified Files and Folders =======
 

2013-09-12 00:11 - 2009-07-14 06:45 - 00026704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-12 00:11 - 2009-07-14 06:45 - 00026704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-12 00:08 - 2013-05-09 08:57 - 00629594 _____ C:\Windows\system32\perfh007.dat

2013-09-12 00:08 - 2013-05-09 08:57 - 00120434 _____ C:\Windows\system32\perfc007.dat

2013-09-12 00:08 - 2009-07-14 07:13 - 01434340 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-12 00:04 - 2013-09-12 00:04 - 97181529 _____ C:\Windows\SysWOW64\乶쵆腤œ

2013-09-12 00:04 - 2013-05-16 14:01 - 00000000 ____D C:\Users\Jamo\AppData\Local\Windows Live

2013-09-12 00:03 - 2013-09-10 12:35 - 00000224 _____ C:\Windows\setupact.log

2013-09-11 12:36 - 2013-05-08 23:04 - 02048343 _____ C:\Windows\WindowsUpdate.log

2013-09-11 11:02 - 2013-05-09 18:42 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\vlc

2013-09-11 10:54 - 2013-05-15 18:40 - 00000000 ____D C:\Program Files (x86)\Steam

2013-09-10 12:35 - 2013-09-10 12:35 - 00000000 _____ C:\Windows\setuperr.log

2013-09-10 10:48 - 2013-06-11 21:43 - 00000000 ____D C:\Windows\Minidump

2013-09-10 10:42 - 2013-09-10 10:42 - 00000000 ____D C:\Windows\system32\appmgmt

2013-09-10 10:42 - 2013-09-04 10:06 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\BitTorrent

2013-09-10 10:39 - 2013-09-10 10:39 - 00003312 ____N C:\bootsqm.dat

2013-09-10 10:20 - 2013-09-10 10:20 - 96922344 _____ C:\Windows\SysWOW64\敖芌腤A

2013-09-10 01:14 - 2013-09-10 01:11 - 00000000 ____D C:\AdwCleaner

2013-09-09 12:40 - 2013-09-09 12:40 - 00008097 _____ C:\Users\Jamo\Desktop\gmer.log

2013-09-09 12:25 - 2013-09-09 12:25 - 00000000 ____D C:\FRST

2013-09-09 12:23 - 2013-09-09 12:23 - 00000168 _____ C:\Users\Jamo\defogger_reenable

2013-09-09 12:23 - 2013-05-08 23:04 - 00000000 ____D C:\Users\Jamo

2013-09-09 11:21 - 2013-09-09 11:21 - 00002003 _____ C:\Users\Public\Desktop\Nitro Reader.lnk

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\FileOpen

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\ProgramData\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\ProgramData\FileOpen

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Program Files\Common Files\Nitro

2013-09-09 11:21 - 2013-09-09 11:21 - 00000000 ____D C:\Program Files (x86)\Nitro

2013-09-09 11:20 - 2013-09-09 11:20 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\Downloaded Installations

2013-09-06 17:57 - 2013-09-03 19:30 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\DAEMON Tools Lite

2013-09-06 17:57 - 2013-05-26 23:09 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\uTorrent

2013-09-06 17:57 - 2013-05-09 08:58 - 00000000 ____D C:\Windows\Panther

2013-09-06 17:56 - 2013-06-12 08:32 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-09-06 17:56 - 2013-05-22 22:10 - 00000000 ____D C:\Program Files\CCleaner

2013-09-06 04:15 - 2013-05-09 07:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-06 04:13 - 2013-05-09 07:55 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-06 04:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-05 18:36 - 2013-06-30 09:30 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-04 14:15 - 2013-09-04 14:15 - 00000000 ____D Z:\Eigene Dokumente\WB Games

2013-09-04 14:14 - 2013-09-04 14:14 - 00000000 ____D Z:\Eigene Dokumente\Games for Windows - LIVE Demos

2013-09-04 14:13 - 2013-09-04 14:13 - 00000000 ____D C:\Program Files (x86)\AMD

2013-09-04 13:52 - 2013-09-04 13:52 - 00001051 _____ C:\Users\Public\Desktop\Batman - Arkham City.lnk

2013-09-04 13:52 - 2013-06-14 08:59 - 00000000 ____D C:\Users\Jamo\AppData\Local\Downloaded Installations

2013-09-04 10:16 - 2013-09-04 10:11 - 00000000 ____D C:\ProgramData\WarThunder

2013-09-04 10:12 - 2013-09-04 10:12 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-09-04 10:12 - 2013-06-02 12:49 - 00000000 ____D Z:\Eigene Dokumente\My Games

2013-09-04 10:11 - 2013-09-04 10:11 - 00000000 ____D C:\Users\Jamo\AppData\Local\WarThunder

2013-09-04 10:02 - 2013-09-04 09:56 - 00000000 ____D C:\Users\Jamo\AppData\Roaming\FileZilla

2013-09-04 08:31 - 2009-07-14 06:45 - 00316544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-03 23:32 - 2013-05-08 23:55 - 00071216 _____ C:\Users\Jamo\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-03 19:35 - 2013-09-03 19:33 - 00000000 ____D Z:\Eigene Dokumente\Command and Conquer Generals Data

2013-09-03 19:31 - 2013-09-03 19:29 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-09-03 19:30 - 2013-09-03 19:30 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys

2013-09-03 19:30 - 2013-09-03 19:30 - 00001950 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2013-09-03 19:30 - 2013-09-03 19:30 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite

2013-09-03 17:35 - 2013-09-03 17:35 - 00000618 _____ C:\Windows\eReg.dat

2013-09-03 17:35 - 2013-05-08 23:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-09-03 17:09 - 2013-09-03 17:09 - 00000471 _____ C:\Users\Public\Desktop\Command & Conquer Generals.lnk

2013-09-03 17:09 - 2013-09-03 17:08 - 00000000 ____D C:\Program Files (x86)\EA Games

2013-09-03 12:37 - 2013-05-09 07:48 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-03 12:37 - 2013-05-09 00:38 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-03 12:37 - 2013-05-09 00:38 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-24 23:56 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-20 16:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-08-18 14:11 - 2013-07-30 16:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-18 14:11 - 2013-07-30 16:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-16 11:56 - 2013-08-16 11:56 - 00000000 ____D Z:\Eigene Dokumente\Paradox Interactive

2013-08-14 22:58 - 2013-07-13 09:49 - 00000000 ____D C:\Windows\system32\MRT

2013-08-14 22:57 - 2013-05-09 01:34 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

Files to move or delete:

====================

C:\Users\Jamo\AppData\Local\Temp\nitro_reader3_64.exe

C:\Users\Jamo\AppData\Local\Temp\Quarantine.exe

C:\Users\Jamo\AppData\Local\Temp\uninst1.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-01 00:49
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

MfG