Grandpakai | 19.12.2013 13:49 | Hatte ich erst so habe aber dann das mit dem Archivieren gesehen weil die Texte zu lang waren.
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-12-2013 05
Ran by Kai (administrator) on KAI-PC on 19-12-2013 11:48:14
Running from E:\Users\Kai\Downloads
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) E:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) E:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) E:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Just Develop It) E:\Program Files\MyPC Backup\BackupStack.exe
() E:\Program Files\DivX\DivX Update\DivXUpdate.exe
(APN) E:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() E:\Windows\System32\PnkBstrA.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) E:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Mozilla Corporation) E:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) E:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) E:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) E:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Microsoft Corporation) E:\Windows\System32\wuauclt.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [DivXMediaServer] - E:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] - E:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [ApnTBMon] - E:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)
HKLM\...\Run: [Nvtmru] - E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [avgnt] - E:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ShadowPlay] - E:\Windows\system32\rundll32.exe E:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Adobe ARM] - E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
MountPoints2: F - F:\LaunchU3.exe -a
MountPoints2: {720aaa0f-3d63-11e3-8a43-806e6f6e6963} - D:\setup.exe
MountPoints2: {8468eced-40ce-11e3-b37b-0019664221ef} - F:\LaunchU3.exe -a
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3FCEDE4E71D1CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: E:\Users\Kai\AppData\Roaming\Mozilla\Firefox\Profiles\2dvsrxks.default
FF Plugin: @adobe.com/FlashPlayer - E:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - E:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - E:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @nvidia.com/3DVision - E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader - E:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; E:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; E:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; E:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 APNMCP; E:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
R2 BackupStack; E:\Program Files\MyPC Backup\BackupStack.exe [38440 2013-09-19] (Just Develop It)
R2 NvStreamSvc; E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14652704 2013-11-14] (NVIDIA Corporation)
R2 PnkBstrA; E:\Windows\system32\PnkBstrA.exe [66872 2013-12-16] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; E:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; E:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; E:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; E:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-12] (Avira Operations GmbH & Co. KG)
R3 nvvad_WaveExtensible; E:\Windows\System32\drivers\nvvad32v.sys [33568 2013-09-28] (NVIDIA Corporation)
R1 ssmdrv; E:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-31] (Avira GmbH)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-19 11:48 - 2013-12-19 11:48 - 00008493 _____ E:\Users\Kai\Downloads\FRST.txt
2013-12-19 11:48 - 2013-12-19 11:48 - 00000000 ____D E:\FRST
2013-12-19 11:47 - 2013-12-19 11:47 - 01325654 _____ (Farbar) E:\Users\Kai\Downloads\FRST.exe
2013-12-19 11:42 - 2013-12-19 11:42 - 00092652 _____ E:\Users\Kai\Desktop\OTL.Txt
2013-12-19 11:42 - 2013-12-19 11:42 - 00053722 _____ E:\Users\Kai\Desktop\Extras.Txt
2013-12-19 11:41 - 2013-12-19 11:41 - 00002972 _____ E:\Users\Kai\Desktop\Ereignisse.txt
2013-12-19 11:31 - 2013-12-19 11:31 - 00602112 _____ (OldTimer Tools) E:\Users\Kai\Downloads\OTL.exe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Common Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Adobe
2013-12-18 22:42 - 2013-12-18 22:43 - 00000000 ____D E:\ProgramData\Adobe
2013-12-18 22:40 - 2013-12-18 22:40 - 00001293 _____ E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
2013-12-18 22:37 - 2013-12-18 22:37 - 00000000 ____D E:\Program Files\1C Company
2013-12-16 17:43 - 2013-12-18 16:09 - 00000000 ____D E:\Users\Kai\Documents\Gothic3ForsakenGods
2013-12-16 17:40 - 2013-12-16 17:40 - 00002399 _____ E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
2013-12-16 14:03 - 2013-12-16 14:03 - 00000682 _____ E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\PunkBuster
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\Activision
2013-12-16 13:32 - 2013-12-16 14:04 - 00138464 _____ E:\Windows\system32\Drivers\PnkBstrK.sys
2013-12-16 13:32 - 2013-12-16 13:32 - 00022328 _____ E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
2013-12-16 13:31 - 2013-12-16 14:04 - 00111928 _____ E:\Windows\system32\PnkBstrB.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00682280 _____ E:\Windows\system32\pbsvc.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00066872 _____ E:\Windows\system32\PnkBstrA.exe
2013-12-16 13:19 - 2013-12-16 13:19 - 00000000 ____D E:\Program Files\Activision
2013-12-16 09:45 - 2013-12-16 13:39 - 1560931305 _____ (JoWooD Entertainment AG ) E:\Users\Kai\Downloads\Gothic_3_FSG_EE_Patch_v2.01_Int_Full.exe
2013-12-14 15:55 - 2013-12-14 16:14 - 00000000 ____D E:\Program Files\Steam
2013-12-14 15:55 - 2013-12-14 16:06 - 00000000 ____D E:\Program Files\Common Files\Steam
2013-12-14 15:54 - 2013-12-14 15:54 - 01133552 _____ E:\Users\Kai\Downloads\SteamSetup.exe
2013-12-14 15:52 - 2013-12-14 15:52 - 00000592 _____ E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
2013-12-14 15:34 - 2013-12-14 15:34 - 00000000 ____D E:\Program Files\THQ
2013-12-14 15:33 - 2013-12-14 15:33 - 00000000 __SHD E:\Windows\ftpcache
2013-12-12 12:31 - 2013-12-12 12:31 - 00000000 ____D E:\Program Files\Mozilla Firefox
2013-12-11 23:59 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.dll
2013-12-11 23:59 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.tlb
2013-12-11 23:59 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollectorres.dll
2013-12-11 23:59 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\iesetup.dll
2013-12-11 23:59 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) E:\Windows\system32\ieetwproxystub.dll
2013-12-11 23:59 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) E:\Windows\system32\iertutil.dll
2013-12-11 23:59 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\jsproxy.dll
2013-12-11 23:59 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) E:\Windows\system32\iernonce.dll
2013-12-11 23:59 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) E:\Windows\system32\ieui.dll
2013-12-11 23:59 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) E:\Windows\system32\ieUnatt.exe
2013-12-11 23:59 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollector.exe
2013-12-11 23:59 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) E:\Windows\system32\jscript9diag.dll
2013-12-11 23:59 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) E:\Windows\system32\jscript9.dll
2013-12-11 23:59 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) E:\Windows\system32\ie4uinit.exe
2013-12-11 23:59 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) E:\Windows\system32\inetcpl.cpl
2013-12-11 23:59 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) E:\Windows\system32\ieframe.dll
2013-12-11 23:59 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dll
2013-12-11 23:59 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) E:\Windows\system32\wininet.dll
2013-12-11 23:59 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) E:\Windows\system32\urlmon.dll
2013-12-11 22:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) E:\Windows\system32\tzres.dll
2013-12-11 22:35 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) E:\Windows\system32\imagehlp.dll
2013-12-11 22:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) E:\Windows\system32\wshom.ocx
2013-12-11 22:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) E:\Windows\system32\scrrun.dll
2013-12-11 22:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) E:\Windows\system32\wscript.exe
2013-12-11 22:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) E:\Windows\system32\cscript.exe
2013-12-11 22:34 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) E:\Windows\system32\win32k.sys
2013-12-11 22:34 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\drmk.sys
2013-12-11 22:34 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\portcls.sys
2013-12-06 20:26 - 2013-12-14 15:35 - 00132467 _____ E:\Windows\DirectX.log
2013-12-06 20:26 - 2013-12-06 20:26 - 00002074 _____ E:\Users\Public\Desktop\Medieval II Total War.lnk
2013-12-06 20:16 - 2013-12-16 13:31 - 00000000 ___HD E:\Program Files\InstallShield Installation Information
2013-12-06 20:16 - 2013-12-06 20:16 - 00000000 ____D E:\Program Files\SEGA
2013-12-06 20:14 - 2013-12-06 20:14 - 00000000 ____D E:\Users\Kai\AppData\Roaming\InstallShield
2013-12-02 19:10 - 2013-11-14 12:57 - 00955168 _____ (NVIDIA Corporation) E:\Windows\system32\nvspcap.dll
2013-12-02 19:08 - 2013-12-02 19:08 - 00000020 ___SH E:\Users\UpdatusUser\ntuser.ini
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Startmenü
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Netzwerkumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Druckumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-02 19:08 - 2009-07-14 05:42 - 00000000 ___RD E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-02 19:08 - 2009-07-14 05:37 - 00000000 ___RD E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-02 19:06 - 2013-11-14 12:57 - 22951200 _____ (NVIDIA Corporation) E:\Windows\system32\nvoglv32.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 17560352 _____ (NVIDIA Corporation) E:\Windows\system32\nvcompiler.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 15218504 _____ (NVIDIA Corporation) E:\Windows\system32\nvd3dum.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 10446112 _____ (NVIDIA Corporation) E:\Windows\system32\Drivers\nvlddmkm.sys
2013-12-02 19:06 - 2013-11-14 12:57 - 09663656 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuda.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 09619872 _____ (NVIDIA Corporation) E:\Windows\system32\nvopencl.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 02947872 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuvid.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 02747680 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuvenc.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 01049888 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispco3233182.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00893728 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispgenco3233182.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00609568 _____ (NVIDIA Corporation) E:\Windows\system32\NvFBC.dll
2013-12-02 19:06 - 2013-11-14 12:57 - 00562464 _____ (NVIDIA Corporation) E:\Windows\system32\NvIFR.dll
2013-12-02 18:11 - 2013-12-02 18:30 - 199358496 _____ (NVIDIA Corporation) E:\Users\Kai\Downloads\331.82-desktop-win8-win7-winvista-32bit-international-whql.exe
2013-12-01 17:45 - 2013-12-01 17:45 - 00000000 ____D E:\Users\Public\Desktop\Gothic 3 Modkit
2013-12-01 17:31 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_7.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) E:\Windows\system32\d3dcsx_43.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_43.dll
2013-12-01 17:31 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) E:\Windows\system32\d3dx11_43.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_6.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_6.dll
2013-12-01 17:31 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_4.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_5.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_5.dll
2013-12-01 17:31 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_3.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) E:\Windows\system32\d3dcsx_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_42.dll
2013-12-01 17:31 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) E:\Windows\system32\d3dx11_42.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_4.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_4.dll
2013-12-01 17:31 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_6.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_41.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_41.dll
2013-12-01 17:31 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_41.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_3.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_3.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_2.dll
2013-12-01 17:31 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_5.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_40.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_40.dll
2013-12-01 17:31 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_40.dll
2013-12-01 17:31 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_2.dll
2013-12-01 17:31 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_1.dll
2013-12-01 17:31 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_2.dll
2013-12-01 17:31 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_39.dll
2013-12-01 17:31 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_39.dll
2013-12-01 17:31 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_39.dll
2013-12-01 17:31 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_1.dll
2013-12-01 17:31 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_1.dll
2013-12-01 17:31 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) E:\Windows\system32\XAPOFX1_0.dll
2013-12-01 17:31 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_4.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_38.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_38.dll
2013-12-01 17:31 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_38.dll
2013-12-01 17:31 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) E:\Windows\system32\XAudio2_0.dll
2013-12-01 17:31 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine3_0.dll
2013-12-01 17:31 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_3.dll
2013-12-01 17:31 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) E:\Windows\system32\D3DX9_37.dll
2013-12-01 17:31 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_37.dll
2013-12-01 17:31 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_37.dll
2013-12-01 17:31 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_10.dll
2013-12-01 17:31 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) E:\Windows\system32\X3DAudio1_2.dll
2013-12-01 17:31 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_36.dll
2013-12-01 17:31 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_36.dll
2013-12-01 17:31 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_36.dll
2013-12-01 17:31 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_9.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_35.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_35.dll
2013-12-01 17:31 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_35.dll
2013-12-01 17:31 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_8.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_34.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_34.dll
2013-12-01 17:31 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_34.dll
2013-12-01 17:31 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_7.dll
2013-12-01 17:31 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10_33.dll
2013-12-01 17:31 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_33.dll
2013-12-01 17:31 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) E:\Windows\system32\D3DCompiler_33.dll
2013-12-01 17:31 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) E:\Windows\system32\x3daudio1_1.dll
2013-12-01 17:31 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_6.dll
2013-12-01 17:31 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_5.dll
2013-12-01 17:31 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_32.dll
2013-12-01 17:31 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) E:\Windows\system32\d3dx10.dll
2013-12-01 17:31 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_31.dll
2013-12-01 17:31 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_4.dll
2013-12-01 17:31 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_3.dll
2013-12-01 17:31 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) E:\Windows\system32\xinput1_2.dll
2013-12-01 17:31 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_2.dll
2013-12-01 17:31 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_30.dll
2013-12-01 17:31 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_1.dll
2013-12-01 17:31 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) E:\Windows\system32\xinput1_1.dll
2013-12-01 17:31 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_29.dll
2013-12-01 17:31 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) E:\Windows\system32\xactengine2_0.dll
2013-12-01 17:31 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) E:\Windows\system32\x3daudio1_0.dll
2013-12-01 17:31 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_28.dll
2013-12-01 17:31 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_27.dll
2013-12-01 17:31 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_26.dll
2013-12-01 17:31 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_25.dll
2013-12-01 17:31 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) E:\Windows\system32\d3dx9_24.dll
2013-12-01 17:29 - 2013-12-14 18:34 - 00000000 ____D E:\Users\Kai\Documents\Gothic3
2013-12-01 17:24 - 2013-12-16 17:34 - 00000000 ____D E:\Program Files\Nordic Games
2013-11-21 20:34 - 2013-11-21 20:34 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Avira
2013-11-21 20:33 - 2013-12-12 10:58 - 00135648 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avipbb.sys
2013-11-21 20:33 - 2013-12-12 10:58 - 00090400 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avgntflt.sys
2013-11-21 20:33 - 2013-12-12 10:58 - 00069240 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avnetflt.sys
2013-11-21 20:33 - 2013-11-21 20:33 - 00002022 _____ E:\Users\Public\Desktop\Avira Control Center.lnk
2013-11-21 20:33 - 2013-11-21 20:33 - 00000000 ____D E:\ProgramData\Avira
2013-11-21 20:33 - 2013-11-21 20:33 - 00000000 ____D E:\Program Files\Avira
2013-11-21 20:33 - 2013-10-31 19:25 - 00037352 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avkmgr.sys
2013-11-21 20:33 - 2013-10-31 19:25 - 00028520 _____ (Avira GmbH) E:\Windows\system32\Drivers\ssmdrv.sys
2013-11-21 17:12 - 2013-11-21 17:12 - 00000000 ____D E:\Windows\pss
2013-11-20 19:06 - 2013-12-01 21:06 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-11-20 18:59 - 2013-11-20 18:59 - 01071224 _____ (Solid State Networks) E:\Users\Kai\Downloads\install_flashplayer11x32au_mssd_aaa_aih.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 01051136 _____ (Microsoft Corporation) E:\Windows\system32\mshtmlmedia.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00646144 _____ (Microsoft Corporation) E:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00645120 _____ (Microsoft Corporation) E:\Windows\system32\jsIntl.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00616104 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dat
2013-11-19 22:20 - 2013-11-19 22:20 - 00610304 _____ (Microsoft Corporation) E:\Windows\system32\jscript.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00523776 _____ (Microsoft Corporation) E:\Windows\system32\msfeeds.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00454656 _____ (Microsoft Corporation) E:\Windows\system32\vbscript.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00367104 _____ (Microsoft Corporation) E:\Windows\system32\dxtmsft.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00337408 _____ (Microsoft Corporation) E:\Windows\system32\html.iec
2013-11-19 22:20 - 2013-11-19 22:20 - 00244736 _____ (Microsoft Corporation) E:\Windows\system32\dxtrans.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00238288 _____ (Microsoft Corporation) E:\Windows\system32\iedkcs32.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00233472 _____ (Microsoft Corporation) E:\Windows\system32\url.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00208384 _____ (Microsoft Corporation) E:\Windows\system32\webcheck.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00194048 _____ (Microsoft Corporation) E:\Windows\system32\elshyph.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00182272 _____ (Microsoft Corporation) E:\Windows\system32\msls31.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00164864 _____ (Microsoft Corporation) E:\Windows\system32\msrating.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00151552 _____ (Microsoft Corporation) E:\Windows\system32\iexpress.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00139264 _____ (Microsoft Corporation) E:\Windows\system32\wextract.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00127488 _____ (Microsoft Corporation) E:\Windows\system32\occache.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00116736 _____ (Microsoft Corporation) E:\Windows\system32\iepeers.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00111616 _____ (Microsoft Corporation) E:\Windows\system32\IEAdvpack.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00086016 _____ (Microsoft Corporation) E:\Windows\system32\iesysprep.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00083456 _____ (Microsoft Corporation) E:\Windows\system32\inseng.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00074240 _____ (Microsoft Corporation) E:\Windows\system32\SetIEInstalledDate.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00071680 _____ (Microsoft Corporation) E:\Windows\system32\RegisterIEPKEYs.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00069632 _____ (Microsoft Corporation) E:\Windows\system32\mshtmled.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00069120 _____ (Microsoft Corporation) E:\Windows\system32\icardie.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00062464 _____ (Microsoft Corporation) E:\Windows\system32\tdc.ocx
2013-11-19 22:20 - 2013-11-19 22:20 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\MshtmlDac.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00056832 _____ (Microsoft Corporation) E:\Windows\system32\pngfilt.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00048640 _____ (Microsoft Corporation) E:\Windows\system32\mshtmler.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\msfeedsbs.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00036352 _____ (Microsoft Corporation) E:\Windows\system32\imgutil.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00034816 _____ (Microsoft Corporation) E:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00024576 _____ (Microsoft Corporation) E:\Windows\system32\licmgr10.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00013312 _____ (Microsoft Corporation) E:\Windows\system32\mshta.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00012800 _____ (Microsoft Corporation) E:\Windows\system32\msfeedssync.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 03969472 _____ (Microsoft Corporation) E:\Windows\system32\ntkrnlpa.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 03914176 _____ (Microsoft Corporation) E:\Windows\system32\ntoskrnl.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 01294272 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\tcpip.sys
2013-11-19 22:19 - 2013-11-19 22:19 - 01289096 _____ (Microsoft Corporation) E:\Windows\system32\ntdll.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00640512 _____ (Microsoft Corporation) E:\Windows\system32\advapi32.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00619520 _____ (Microsoft Corporation) E:\Windows\system32\tdh.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00338944 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\afd.sys
2013-11-19 22:19 - 2013-11-19 22:19 - 00231424 _____ (Microsoft Corporation) E:\Windows\system32\mswsock.dll
2013-11-19 22:18 - 2013-11-19 22:22 - 00011323 _____ E:\Windows\IE11_main.log
==================== One Month Modified Files and Folders =======
2013-12-19 11:48 - 2013-12-19 11:48 - 00008493 _____ E:\Users\Kai\Downloads\FRST.txt
2013-12-19 11:48 - 2013-12-19 11:48 - 00000000 ____D E:\FRST
2013-12-19 11:47 - 2013-12-19 11:47 - 01325654 _____ (Farbar) E:\Users\Kai\Downloads\FRST.exe
2013-12-19 11:42 - 2013-12-19 11:42 - 00092652 _____ E:\Users\Kai\Desktop\OTL.Txt
2013-12-19 11:42 - 2013-12-19 11:42 - 00053722 _____ E:\Users\Kai\Desktop\Extras.Txt
2013-12-19 11:41 - 2013-12-19 11:41 - 00002972 _____ E:\Users\Kai\Desktop\Ereignisse.txt
2013-12-19 11:31 - 2013-12-19 11:31 - 00602112 _____ (OldTimer Tools) E:\Users\Kai\Downloads\OTL.exe
2013-12-19 11:17 - 2013-10-29 20:37 - 00000884 _____ E:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 11:07 - 2013-10-30 19:02 - 00000109 _____ E:\Users\Kai\AppData\Roaming\WB.CFG
2013-12-19 11:07 - 2013-10-30 19:02 - 00000006 _____ E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
2013-12-19 11:07 - 2013-10-25 14:02 - 00000284 _____ E:\Windows\Tasks\DigitalSite.job
2013-12-19 11:03 - 2013-10-25 14:03 - 00000284 _____ E:\Windows\Tasks\MySearchDial.job
2013-12-19 10:49 - 2009-07-14 05:34 - 00022576 ____H E:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-19 10:49 - 2009-07-14 05:34 - 00022576 ____H E:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-19 10:48 - 2013-10-25 13:15 - 01638780 _____ E:\Windows\system32\PerfStringBackup.INI
2013-12-19 10:45 - 2013-10-25 11:55 - 01810452 _____ E:\Windows\WindowsUpdate.log
2013-12-19 10:41 - 2013-10-30 20:22 - 00000000 ____D E:\ProgramData\NVIDIA
2013-12-19 10:41 - 2009-07-14 05:53 - 00000006 ____H E:\Windows\Tasks\SA.DAT
2013-12-19 10:41 - 2009-07-14 05:39 - 00034907 _____ E:\Windows\setupact.log
2013-12-18 22:53 - 2013-10-30 19:08 - 00000000 ____D E:\Users\Kai\Documents\My Games
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Common Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:43 - 00000000 ____D E:\Program Files\Adobe
2013-12-18 22:43 - 2013-12-18 22:42 - 00000000 ____D E:\ProgramData\Adobe
2013-12-18 22:40 - 2013-12-18 22:40 - 00001293 _____ E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
2013-12-18 22:37 - 2013-12-18 22:37 - 00000000 ____D E:\Program Files\1C Company
2013-12-18 16:09 - 2013-12-16 17:43 - 00000000 ____D E:\Users\Kai\Documents\Gothic3ForsakenGods
2013-12-16 17:43 - 2013-10-29 20:26 - 00000000 ____D E:\Users\Kai\Desktop\DiesDas
2013-12-16 17:40 - 2013-12-16 17:40 - 00002399 _____ E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
2013-12-16 17:34 - 2013-12-01 17:24 - 00000000 ____D E:\Program Files\Nordic Games
2013-12-16 14:04 - 2013-12-16 13:32 - 00138464 _____ E:\Windows\system32\Drivers\PnkBstrK.sys
2013-12-16 14:04 - 2013-12-16 13:31 - 00111928 _____ E:\Windows\system32\PnkBstrB.exe
2013-12-16 14:03 - 2013-12-16 14:03 - 00000682 _____ E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
2013-12-16 13:39 - 2013-12-16 09:45 - 1560931305 _____ (JoWooD Entertainment AG ) E:\Users\Kai\Downloads\Gothic_3_FSG_EE_Patch_v2.01_Int_Full.exe
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\PunkBuster
2013-12-16 13:34 - 2013-12-16 13:34 - 00000000 ____D E:\Users\Kai\AppData\Local\Activision
2013-12-16 13:32 - 2013-12-16 13:32 - 00022328 _____ E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
2013-12-16 13:31 - 2013-12-16 13:31 - 00682280 _____ E:\Windows\system32\pbsvc.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 00066872 _____ E:\Windows\system32\PnkBstrA.exe
2013-12-16 13:31 - 2013-12-06 20:16 - 00000000 ___HD E:\Program Files\InstallShield Installation Information
2013-12-16 13:31 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\system32\LogFiles
2013-12-16 13:19 - 2013-12-16 13:19 - 00000000 ____D E:\Program Files\Activision
2013-12-15 10:09 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\rescache
2013-12-14 18:34 - 2013-12-01 17:29 - 00000000 ____D E:\Users\Kai\Documents\Gothic3
2013-12-14 16:14 - 2013-12-14 15:55 - 00000000 ____D E:\Program Files\Steam
2013-12-14 16:06 - 2013-12-14 15:55 - 00000000 ____D E:\Program Files\Common Files\Steam
2013-12-14 15:54 - 2013-12-14 15:54 - 01133552 _____ E:\Users\Kai\Downloads\SteamSetup.exe
2013-12-14 15:52 - 2013-12-14 15:52 - 00000592 _____ E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
2013-12-14 15:35 - 2013-12-06 20:26 - 00132467 _____ E:\Windows\DirectX.log
2013-12-14 15:34 - 2013-12-14 15:34 - 00000000 ____D E:\Program Files\THQ
2013-12-14 15:33 - 2013-12-14 15:33 - 00000000 __SHD E:\Windows\ftpcache
2013-12-12 21:08 - 2013-10-29 20:29 - 00000000 ____D E:\Program Files\Mozilla Maintenance Service
2013-12-12 12:31 - 2013-12-12 12:31 - 00000000 ____D E:\Program Files\Mozilla Firefox
2013-12-12 10:58 - 2013-11-21 20:33 - 00135648 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avipbb.sys
2013-12-12 10:58 - 2013-11-21 20:33 - 00090400 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avgntflt.sys
2013-12-12 10:58 - 2013-11-21 20:33 - 00069240 _____ (Avira Operations GmbH & Co. KG) E:\Windows\system32\Drivers\avnetflt.sys
2013-12-12 10:48 - 2009-07-14 05:33 - 00278272 _____ E:\Windows\system32\FNTCACHE.DAT
2013-12-12 10:47 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\system32\de-DE
2013-12-11 12:18 - 2013-10-29 20:37 - 00692616 _____ (Adobe Systems Incorporated) E:\Windows\system32\FlashPlayerApp.exe
2013-12-11 12:18 - 2013-10-29 20:37 - 00071048 _____ (Adobe Systems Incorporated) E:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-06 20:26 - 2013-12-06 20:26 - 00002074 _____ E:\Users\Public\Desktop\Medieval II Total War.lnk
2013-12-06 20:16 - 2013-12-06 20:16 - 00000000 ____D E:\Program Files\SEGA
2013-12-06 20:14 - 2013-12-06 20:14 - 00000000 ____D E:\Users\Kai\AppData\Roaming\InstallShield
2013-12-03 21:43 - 2013-10-30 20:21 - 00000000 ____D E:\ProgramData\NVIDIA Corporation
2013-12-02 19:10 - 2013-10-30 20:12 - 00000000 ____D E:\Program Files\NVIDIA Corporation
2013-12-02 19:08 - 2013-12-02 19:08 - 00000020 ___SH E:\Users\UpdatusUser\ntuser.ini
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Startmenü
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Netzwerkumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Druckumgebung
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-02 19:08 - 2013-12-02 19:08 - 00000000 _SHDL E:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-02 18:30 - 2013-12-02 18:11 - 199358496 _____ (NVIDIA Corporation) E:\Users\Kai\Downloads\331.82-desktop-win8-win7-winvista-32bit-international-whql.exe
2013-12-01 21:06 - 2013-11-20 19:06 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-01 21:06 - 2013-10-25 11:58 - 00000000 ____D E:\Users\Kai\AppData\Local\VirtualStore
2013-12-01 17:45 - 2013-12-01 17:45 - 00000000 ____D E:\Users\Public\Desktop\Gothic 3 Modkit
2013-12-01 17:31 - 2009-07-14 03:37 - 00000000 ____D E:\Windows\Microsoft.NET
2013-11-26 11:11 - 2013-12-11 23:59 - 17112576 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-11 23:59 - 02724864 _____ (Microsoft Corporation) E:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-11 23:59 - 00004096 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-11 23:59 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-11 23:59 - 00051200 _____ (Microsoft Corporation) E:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-11 23:59 - 02166784 _____ (Microsoft Corporation) E:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-11 23:59 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-11 23:59 - 00032768 _____ (Microsoft Corporation) E:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-11 23:59 - 00440832 _____ (Microsoft Corporation) E:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-11 23:59 - 00112128 _____ (Microsoft Corporation) E:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-11 23:59 - 00108032 _____ (Microsoft Corporation) E:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-11 23:59 - 00553472 _____ (Microsoft Corporation) E:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-11 23:59 - 04243968 _____ (Microsoft Corporation) E:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-11 23:59 - 00208896 _____ (Microsoft Corporation) E:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-11 23:59 - 01928192 _____ (Microsoft Corporation) E:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-11 23:59 - 11221504 _____ (Microsoft Corporation) E:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-11 23:59 - 00703488 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-11 23:59 - 01820160 _____ (Microsoft Corporation) E:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-11 23:59 - 01157632 _____ (Microsoft Corporation) E:\Windows\system32\urlmon.dll
2013-11-21 21:33 - 2013-10-25 15:10 - 00295640 _____ E:\Windows\PFRO.log
2013-11-21 20:34 - 2013-11-21 20:34 - 00000000 ____D E:\Users\Kai\AppData\Roaming\Avira
2013-11-21 20:33 - 2013-11-21 20:33 - 00002022 _____ E:\Users\Public\Desktop\Avira Control Center.lnk
2013-11-21 20:33 - 2013-11-21 20:33 - 00000000 ____D E:\ProgramData\Avira
2013-11-21 20:33 - 2013-11-21 20:33 - 00000000 ____D E:\Program Files\Avira
2013-11-21 17:12 - 2013-11-21 17:12 - 00000000 ____D E:\Windows\pss
2013-11-20 18:59 - 2013-11-20 18:59 - 01071224 _____ (Solid State Networks) E:\Users\Kai\Downloads\install_flashplayer11x32au_mssd_aaa_aih.exe
2013-11-19 22:22 - 2013-11-19 22:18 - 00011323 _____ E:\Windows\IE11_main.log
2013-11-19 22:20 - 2013-11-19 22:20 - 01051136 _____ (Microsoft Corporation) E:\Windows\system32\mshtmlmedia.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00646144 _____ (Microsoft Corporation) E:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00645120 _____ (Microsoft Corporation) E:\Windows\system32\jsIntl.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00616104 _____ (Microsoft Corporation) E:\Windows\system32\ieapfltr.dat
2013-11-19 22:20 - 2013-11-19 22:20 - 00610304 _____ (Microsoft Corporation) E:\Windows\system32\jscript.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00523776 _____ (Microsoft Corporation) E:\Windows\system32\msfeeds.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00454656 _____ (Microsoft Corporation) E:\Windows\system32\vbscript.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00367104 _____ (Microsoft Corporation) E:\Windows\system32\dxtmsft.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00337408 _____ (Microsoft Corporation) E:\Windows\system32\html.iec
2013-11-19 22:20 - 2013-11-19 22:20 - 00244736 _____ (Microsoft Corporation) E:\Windows\system32\dxtrans.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00238288 _____ (Microsoft Corporation) E:\Windows\system32\iedkcs32.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00233472 _____ (Microsoft Corporation) E:\Windows\system32\url.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00208384 _____ (Microsoft Corporation) E:\Windows\system32\webcheck.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00194048 _____ (Microsoft Corporation) E:\Windows\system32\elshyph.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00182272 _____ (Microsoft Corporation) E:\Windows\system32\msls31.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00164864 _____ (Microsoft Corporation) E:\Windows\system32\msrating.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00151552 _____ (Microsoft Corporation) E:\Windows\system32\iexpress.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00139264 _____ (Microsoft Corporation) E:\Windows\system32\wextract.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00127488 _____ (Microsoft Corporation) E:\Windows\system32\occache.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00116736 _____ (Microsoft Corporation) E:\Windows\system32\iepeers.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00111616 _____ (Microsoft Corporation) E:\Windows\system32\IEAdvpack.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00086016 _____ (Microsoft Corporation) E:\Windows\system32\iesysprep.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00083456 _____ (Microsoft Corporation) E:\Windows\system32\inseng.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00074240 _____ (Microsoft Corporation) E:\Windows\system32\SetIEInstalledDate.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00071680 _____ (Microsoft Corporation) E:\Windows\system32\RegisterIEPKEYs.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00069632 _____ (Microsoft Corporation) E:\Windows\system32\mshtmled.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00069120 _____ (Microsoft Corporation) E:\Windows\system32\icardie.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00062464 _____ (Microsoft Corporation) E:\Windows\system32\tdc.ocx
2013-11-19 22:20 - 2013-11-19 22:20 - 00061952 _____ (Microsoft Corporation) E:\Windows\system32\MshtmlDac.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00056832 _____ (Microsoft Corporation) E:\Windows\system32\pngfilt.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00048640 _____ (Microsoft Corporation) E:\Windows\system32\mshtmler.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00043008 _____ (Microsoft Corporation) E:\Windows\system32\msfeedsbs.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00036352 _____ (Microsoft Corporation) E:\Windows\system32\imgutil.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00034816 _____ (Microsoft Corporation) E:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00024576 _____ (Microsoft Corporation) E:\Windows\system32\licmgr10.dll
2013-11-19 22:20 - 2013-11-19 22:20 - 00013312 _____ (Microsoft Corporation) E:\Windows\system32\mshta.exe
2013-11-19 22:20 - 2013-11-19 22:20 - 00012800 _____ (Microsoft Corporation) E:\Windows\system32\msfeedssync.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 03969472 _____ (Microsoft Corporation) E:\Windows\system32\ntkrnlpa.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 03914176 _____ (Microsoft Corporation) E:\Windows\system32\ntoskrnl.exe
2013-11-19 22:19 - 2013-11-19 22:19 - 01294272 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\tcpip.sys
2013-11-19 22:19 - 2013-11-19 22:19 - 01289096 _____ (Microsoft Corporation) E:\Windows\system32\ntdll.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00640512 _____ (Microsoft Corporation) E:\Windows\system32\advapi32.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00619520 _____ (Microsoft Corporation) E:\Windows\system32\tdh.dll
2013-11-19 22:19 - 2013-11-19 22:19 - 00338944 _____ (Microsoft Corporation) E:\Windows\system32\Drivers\afd.sys
2013-11-19 22:19 - 2013-11-19 22:19 - 00231424 _____ (Microsoft Corporation) E:\Windows\system32\mswsock.dll
Some content of TEMP:
====================
E:\Users\Kai\AppData\Local\Temp\36260uninstall.exe
E:\Users\Kai\AppData\Local\Temp\avgnt.exe
E:\Users\Kai\AppData\Local\Temp\BackupSetup.exe
E:\Users\Kai\AppData\Local\Temp\drm_dyndata_7350008.dll
E:\Users\Kai\AppData\Local\Temp\nv3DVStreaming.dll
E:\Users\Kai\AppData\Local\Temp\nvSCPAPI.dll
E:\Users\Kai\AppData\Local\Temp\nvStereoApiI.dll
E:\Users\Kai\AppData\Local\Temp\nvStInst.exe
E:\Users\Kai\AppData\Local\Temp\Sqlite3.dll
E:\Users\Kai\AppData\Local\Temp\vcredist_x86.exe
E:\Users\Kai\AppData\Local\Temp\_is4E14.exe
E:\Users\Kai\AppData\Local\Temp\_is795.exe
==================== Bamital & volsnap Check =================
E:\Windows\explorer.exe => MD5 is legit
E:\Windows\System32\winlogon.exe => MD5 is legit
E:\Windows\System32\wininit.exe => MD5 is legit
E:\Windows\System32\svchost.exe => MD5 is legit
E:\Windows\System32\services.exe => MD5 is legit
E:\Windows\System32\User32.dll => MD5 is legit
E:\Windows\System32\userinit.exe => MD5 is legit
E:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-15 10:01
==================== End Of Log ============================ --- --- --- Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-12-19 12:25:02
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\00000058 WDC_WD50 rev.12.0 465,76GB
Running: gmer_2.1.19163.exe; Driver: E:\Users\Kai\AppData\Local\Temp\kfldqpow.sys
---- System - GMER 2.1 ----
SSDT 9705398E ZwCreateSection
SSDT 97053998 ZwRequestWaitReplyPort
SSDT 97053993 ZwSetContextThread
SSDT 9705399D ZwSetSecurityObject
SSDT 970539A2 ZwSystemDebugControl
SSDT 9705392F ZwTerminateProcess
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 142D 8284AA15 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82884212 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 11F7 8288B58C 4 Bytes [8E, 39, 05, 97]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1553 8288B8E8 4 Bytes [98, 39, 05, 97]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1597 8288B92C 4 Bytes [93, 39, 05, 97]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1613 8288B9A8 4 Bytes [9D, 39, 05, 97]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1667 8288B9FC 4 Bytes [A2, 39, 05, 97]
.text ...
---- EOF - GMER 2.1 ---- Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-12-2013 05
Ran by Kai at 2013-12-19 11:48:37
Running from E:\Users\Kai\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Adobe Reader X (10.1.2) - Deutsch (Version: 10.1.2)
Avira Free Antivirus (Version: 14.0.2.286)
Avira SearchFree Toolbar (Version: 12.6.0.1898)
Call of Duty(R) - World at War(TM) (Version: 1.0)
Codec Pack Packages
Company of Heroes - FAKEMSI (Version: 2.0.0.0)
Company of Heroes (Version: 2.0.0.1)
CPUID CPU-Z 1.67
Diccuric (Version: 1.1e)
DirectVobSub 2.40.4209 (Version: 2.40.4209)
DivX-Setup (Version: 2.6.1.8)
ffdshow v1.1.4399 [2012-03-22] (Version: 1.1.4399.0)
GeForce Experience NvStream Client Components (Version: 1.6.28)
Gothic 3 Enhanced Edition
Gothic 3 Götterdämmerung Enhanced Edition
Gothic 3 Modkit v1.75.14 (Version: v1.75.14)
Haali Media Splitter
Lagarith Lossless Codec (1.3.27)
LAME v3.99.3 (for Windows)
Landwirtschafts Simulator 2013 (Version: 1.0)
Medieval II Total War (Version: 1.03.000)
Men of War Condemned Heroes (Nur entfernen) (Version: 1.0.0.1)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0)
Mozilla Maintenance Service (Version: 26.0)
MyPC Backup (Version: ) <==== ATTENTION
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA Install Application (Version: 2.1002.140.952)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA PhysX (Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 9.3.21 (Version: 9.3.21)
NVIDIA Update Components (Version: 9.3.21)
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9)
OpenSource Flash Video Splitter 1.0.0.5 (Version: 1.0.0.5)
PunkBuster Services (Version: 0.986)
SHIELD Streaming (Version: 1.6.53)
Steam
Update for Codec Pack
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
WinRAR 5.00 (32-bit) (Version: 5.00.0)
Xvid Video Codec (Version: 1.3.2)
==================== Restore Points =========================
18-12-2013 21:40:57 DirectX wurde installiert
18-12-2013 21:42:53 Installed Adobe Reader X (10.1.0) - Deutsch.
==================== Hosts content: ==========================
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A E:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {93D15B29-1113-43FD-91C1-E1A5BDE9EC89} - System32\Tasks\Adobe Flash Player Updater => E:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {E04E00F7-35E8-4E89-A01A-865728BDE37E} - System32\Tasks\MySearchDial => E:\Users\Kai\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {F65FF708-241D-4706-8747-138F2A0BB4DE} - System32\Tasks\DigitalSite => E:\Users\Kai\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: E:\Windows\Tasks\Adobe Flash Player Updater.job => E:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: E:\Windows\Tasks\DigitalSite.job => E:\Users\Kai\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: E:\Windows\Tasks\MySearchDial.job => E:\Users\Kai\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE
==================== Loaded Modules (whitelisted) =============
2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () E:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-12-12 12:31 - 2013-12-12 12:31 - 03559024 _____ () E:\Program Files\Mozilla Firefox\mozjs.dll
2013-12-11 12:18 - 2013-12-11 12:18 - 16242056 _____ () E:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/18/2013 11:45:49 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Condemned Heroes.exe, Version: 1.0.0.0, Zeitstempel: 0x4f6c1012
Name des fehlerhaften Moduls: Condemned Heroes.exe, Version: 1.0.0.0, Zeitstempel: 0x4f6c1012
Ausnahmecode: 0xc000000d
Fehleroffset: 0x00524e84
ID des fehlerhaften Prozesses: 0xf3c
Startzeit der fehlerhaften Anwendung: 0xCondemned Heroes.exe0
Pfad der fehlerhaften Anwendung: Condemned Heroes.exe1
Pfad des fehlerhaften Moduls: Condemned Heroes.exe2
Berichtskennung: Condemned Heroes.exe3
Error: (12/18/2013 10:40:54 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {9f8e4004-8b75-44fd-aaf9-b87ed82960b4}
Error: (12/16/2013 02:13:23 PM) (Source: ) (User: )
Description: 7
Error: (12/16/2013 02:13:23 PM) (Source: ) (User: )
Description: 6
Error: (12/16/2013 02:13:18 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CoDWaW.exe, Version: 1.0.0.1, Zeitstempel: 0x48f7898c
Name des fehlerhaften Moduls: CoDWaW.exe, Version: 1.0.0.1, Zeitstempel: 0x48f7898c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f25e7
ID des fehlerhaften Prozesses: 0x17e4
Startzeit der fehlerhaften Anwendung: 0xCoDWaW.exe0
Pfad der fehlerhaften Anwendung: CoDWaW.exe1
Pfad des fehlerhaften Moduls: CoDWaW.exe2
Berichtskennung: CoDWaW.exe3
Error: (12/16/2013 01:18:41 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {f8671ea3-7a7f-4c23-8f1f-e3d3710d7be5}
Error: (12/15/2013 11:59:50 PM) (Source: Application Hang) (User: )
Description: Programm RelicCOH.exe, Version 2.500.0.127 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: ea4
Startzeit: 01cef9e237294ab3
Endzeit: 671
Anwendungspfad: E:\Program Files\THQ\Company of Heroes\RelicCOH.exe
Berichts-ID:
Error: (12/15/2013 11:00:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00004b85
ID des fehlerhaften Prozesses: 0x5e4
Startzeit der fehlerhaften Anwendung: 0xde_100_2101_patch.exe0
Pfad der fehlerhaften Anwendung: de_100_2101_patch.exe1
Pfad des fehlerhaften Moduls: de_100_2101_patch.exe2
Berichtskennung: de_100_2101_patch.exe3
Error: (12/15/2013 10:48:39 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00004b85
ID des fehlerhaften Prozesses: 0x68c
Startzeit der fehlerhaften Anwendung: 0xde_100_2101_patch.exe0
Pfad der fehlerhaften Anwendung: de_100_2101_patch.exe1
Pfad des fehlerhaften Moduls: de_100_2101_patch.exe2
Berichtskennung: de_100_2101_patch.exe3
Error: (12/15/2013 10:42:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Name des fehlerhaften Moduls: de_100_2101_patch.exe, Version: 0.0.0.0, Zeitstempel: 0x46f5e102
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00004b85
ID des fehlerhaften Prozesses: 0xfb8
Startzeit der fehlerhaften Anwendung: 0xde_100_2101_patch.exe0
Pfad der fehlerhaften Anwendung: de_100_2101_patch.exe1
Pfad des fehlerhaften Moduls: de_100_2101_patch.exe2
Berichtskennung: de_100_2101_patch.exe3
System errors:
=============
Error: (12/19/2013 10:42:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/19/2013 10:42:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/19/2013 10:42:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/19/2013 10:42:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/19/2013 10:42:15 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/19/2013 10:42:15 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/19/2013 10:42:06 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/19/2013 10:42:06 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/19/2013 10:42:06 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/19/2013 10:41:04 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.
Microsoft Office Sessions:
=========================
Error: (12/18/2013 11:45:49 PM) (Source: Application Error)(User: )
Description: Condemned Heroes.exe1.0.0.04f6c1012Condemned Heroes.exe1.0.0.04f6c1012c000000d00524e84f3c01cefc3cec7c33a6E:\Program Files\1C Company\Men of War Condemned Heroes\Condemned Heroes.exeE:\Program Files\1C Company\Men of War Condemned Heroes\Condemned Heroes.exe23c2d38a-6836-11e3-812b-0019664221ef
Error: (12/18/2013 10:40:54 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {9f8e4004-8b75-44fd-aaf9-b87ed82960b4}
Error: (12/16/2013 02:13:23 PM) (Source: )(User: )
Description: 7
Error: (12/16/2013 02:13:23 PM) (Source: )(User: )
Description: 6
Error: (12/16/2013 02:13:18 PM) (Source: Application Error)(User: )
Description: CoDWaW.exe1.0.0.148f7898cCoDWaW.exe1.0.0.148f7898cc0000005002f25e717e401cefa5f3feca0f4E:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exeE:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exed40d2d3a-6653-11e3-82b4-0019664221ef
Error: (12/16/2013 01:18:41 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {f8671ea3-7a7f-4c23-8f1f-e3d3710d7be5}
Error: (12/15/2013 11:59:50 PM) (Source: Application Hang)(User: )
Description: RelicCOH.exe2.500.0.127ea401cef9e237294ab3671E:\Program Files\THQ\Company of Heroes\RelicCOH.exe
Error: (12/15/2013 11:00:41 PM) (Source: Application Error)(User: )
Description: de_100_2101_patch.exe0.0.0.046f5e102de_100_2101_patch.exe0.0.0.046f5e102c000000500004b855e401cef9e11783080cE:\Users\Kai\Desktop\de_100_2101_patch.exeE:\Users\Kai\Desktop\de_100_2101_patch.exe563111de-65d4-11e3-89dc-0019664221ef
Error: (12/15/2013 10:48:39 PM) (Source: Application Error)(User: )
Description: de_100_2101_patch.exe0.0.0.046f5e102de_100_2101_patch.exe0.0.0.046f5e102c000000500004b8568c01cef9df69ccd91aE:\Users\Kai\Downloads\de_100_2101_patch.exeE:\Users\Kai\Downloads\de_100_2101_patch.exea7e9bfc5-65d2-11e3-89dc-0019664221ef
Error: (12/15/2013 10:42:45 PM) (Source: Application Error)(User: )
Description: de_100_2101_patch.exe0.0.0.046f5e102de_100_2101_patch.exe0.0.0.046f5e102c000000500004b85fb801cef9de95ade32eE:\Users\Kai\Downloads\de_100_2101_patch.exeE:\Users\Kai\Downloads\de_100_2101_patch.exed4d7e748-65d1-11e3-89dc-0019664221ef
==================== Memory info ===========================
Percentage of memory in use: 45%
Total physical RAM: 3071.3 MB
Available physical RAM: 1665.52 MB
Total Pagefile: 6140.9 MB
Available Pagefile: 4318.88 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898.66 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:146.48 GB) (Free:142.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (MoWCH _Ger) (CDROM) (Total:1.88 GB) (Free:0 GB) CDFS
Drive e: (Volume) (Fixed) (Total:78.13 GB) (Free:9.09 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000AD2BE)
Partition 1: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=78 GB) - (Type=07 NTFS)
==================== End Of Log ============================ Code:
OTL logfile created on: 19.12.2013 11:32:08 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = E:\Users\Kai\Downloads
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16476)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 1,82 Gb Available Physical Memory | 60,67% Memory free
6,00 Gb Paging File | 4,31 Gb Available in Paging File | 71,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = E: | %SystemRoot% = E:\Windows | %ProgramFiles% = E:\Program Files
Drive C: | 146,48 Gb Total Space | 142,12 Gb Free Space | 97,03% Space Free | Partition Type: NTFS
Drive D: | 1,88 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 78,13 Gb Total Space | 8,07 Gb Free Space | 10,33% Space Free | Partition Type: NTFS
Computer Name: KAI-PC | User Name: Kai | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - E:\Users\Kai\Downloads\OTL.exe (OldTimer Tools)
PRC - E:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.)
PRC - E:\Programme\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation)
PRC - E:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - E:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - E:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
PRC - E:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
PRC - E:\Programme\MyPC Backup\BackupStack.exe (Just Develop It)
PRC - E:\Programme\DivX\DivX Update\DivXUpdate.exe ()
PRC - E:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - E:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - E:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - E:\Windows\explorer.exe (Microsoft Corporation)
========== Modules (No Company Name) ==========
MOD - E:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - E:\Windows\System32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
MOD - E:\Programme\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - E:\Programme\DivX\DivX Update\DivXUpdate.exe ()
========== Services (SafeList) ==========
SRV - (MozillaMaintenance) -- E:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AntiVirSchedulerService) -- E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) -- E:\Programme\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
SRV - (Steam Client Service) -- E:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) -- E:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (IEEtwCollectorService) -- E:\Windows\System32\IEEtwCollector.exe (Microsoft Corporation)
SRV - (NvStreamSvc) -- E:\Programme\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation)
SRV - (nvUpdatusService) -- E:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- E:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (AntiVirService) -- E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (APNMCP) -- E:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
SRV - (BackupStack) -- E:\Programme\MyPC Backup\BackupStack.exe (Just Develop It)
SRV - (WinDefend) -- E:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AdobeARMservice) -- E:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (WMPNetworkSvc) -- E:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (SensrSvc) -- E:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (avipbb) -- E:\Windows\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- E:\Windows\System32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avnetflt) -- E:\Windows\System32\drivers\avnetflt.sys (Avira Operations GmbH & Co. KG)
DRV - (nvlddmkm) -- E:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (ssmdrv) -- E:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avkmgr) -- E:\Windows\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (nvvad_WaveExtensible) -- E:\Windows\System32\drivers\nvvad32v.sys (NVIDIA Corporation)
DRV - (TsUsbFlt) -- E:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (NVENETFD) -- E:\Windows\System32\drivers\nvm62x32.sys (NVIDIA Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKLM\..\SearchScopes\{724ADDFC-63B1-C60D-26B0-28119C33B4FC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3F CE DE 4E 71 D1 CE 01 [binary data]
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtCzyyCyCyEtBtBtC0E0FtCtA0FyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=928172869&ir=
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\SearchScopes\{724ADDFC-63B1-C60D-26B0-28119C33B4FC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: E:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: E:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: E:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins
[2013.10.29 20:29:49 | 000,000,000 | ---D | M] (No name found) -- E:\Users\Kai\AppData\Roaming\mozilla\Extensions
[2013.12.12 12:31:09 | 000,000,000 | ---D | M] (No name found) -- E:\Programme\Mozilla Firefox\browser\extensions
[2013.12.12 12:31:16 | 000,000,000 | ---D | M] (Default) -- E:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - E:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKU\S-1-5-21-1724954217-4260448841-1615121279-1001\..\Toolbar\WebBrowser: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - E:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O4 - HKLM..\Run: [ApnTBMon] E:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [avgnt] E:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [DivXMediaServer] E:\Programme\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] E:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Nvtmru] E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [ShadowPlay] E:\Windows\System32\nvspcap.dll (NVIDIA Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] E:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] E:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1724954217-4260448841-1615121279-1004..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CB30BC81-0965-4AFC-B69B-13FAA5116A0E}: DhcpNameServer = 192.168.2.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (E:\Windows\system32\userinit.exe) - E:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - E:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.10.25 10:26:52 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2012.05.09 12:18:40 | 000,000,076 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{720aaa0f-3d63-11e3-8a43-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{720aaa0f-3d63-11e3-8a43-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe -- [2012.05.09 12:50:51 | 001,537,332 | R--- | M] (1C Company. )
O33 - MountPoints2\{8468eced-40ce-11e3-b37b-0019664221ef}\Shell - "" = AutoRun
O33 - MountPoints2\{8468eced-40ce-11e3-b37b-0019664221ef}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013.12.18 22:43:10 | 000,000,000 | ---D | C] -- E:\Program Files\Common Files\Adobe
[2013.12.18 22:43:10 | 000,000,000 | ---D | C] -- E:\Program Files\Adobe
[2013.12.18 22:42:32 | 000,000,000 | ---D | C] -- E:\ProgramData\Adobe
[2013.12.18 22:40:46 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C Company
[2013.12.18 22:37:58 | 000,000,000 | ---D | C] -- E:\Program Files\1C Company
[2013.12.16 17:43:54 | 000,000,000 | ---D | C] -- E:\Users\Kai\Documents\Gothic3ForsakenGods
[2013.12.16 17:40:29 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Götterdämmerung Enhanced Edition
[2013.12.16 13:34:16 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Local\PunkBuster
[2013.12.16 13:34:10 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Local\Activision
[2013.12.16 13:19:53 | 000,000,000 | ---D | C] -- E:\Program Files\Activision
[2013.12.14 15:55:11 | 000,000,000 | ---D | C] -- E:\Program Files\Common Files\Steam
[2013.12.14 15:55:10 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2013.12.14 15:55:10 | 000,000,000 | ---D | C] -- E:\Program Files\Steam
[2013.12.14 15:48:32 | 000,000,000 | ---D | C] -- E:\ProgramData\Media Center Programs
[2013.12.14 15:34:57 | 000,000,000 | ---D | C] -- E:\Program Files\THQ
[2013.12.14 15:33:39 | 000,000,000 | -HSD | C] -- E:\Windows\ftpcache
[2013.12.12 12:31:09 | 000,000,000 | ---D | C] -- E:\Program Files\Mozilla Firefox
[2013.12.11 23:59:51 | 002,724,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtml.tlb
[2013.12.11 23:59:51 | 000,208,896 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ie4uinit.exe
[2013.12.11 23:59:50 | 000,043,008 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jsproxy.dll
[2013.12.11 23:59:49 | 000,703,488 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dll
[2013.12.11 23:59:49 | 000,553,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript9diag.dll
[2013.12.11 23:59:49 | 000,440,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieui.dll
[2013.12.11 23:59:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iesetup.dll
[2013.12.11 23:59:49 | 000,032,768 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iernonce.dll
[2013.12.11 23:59:49 | 000,004,096 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollectorres.dll
[2013.12.11 23:59:48 | 000,112,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieUnatt.exe
[2013.12.11 23:59:48 | 000,108,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollector.exe
[2013.12.11 23:59:48 | 000,051,200 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieetwproxystub.dll
[2013.12.11 23:59:46 | 001,928,192 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\inetcpl.cpl
[2013.12.11 23:59:44 | 004,243,968 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript9.dll
[2013.12.11 22:35:05 | 000,126,976 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\cscript.exe
[2013.12.11 22:35:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\tzres.dll
[2013.12.11 22:34:52 | 002,349,056 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\win32k.sys
[2013.12.11 22:34:52 | 000,177,152 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\drivers\portcls.sys
[2013.12.11 22:34:52 | 000,081,408 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\drivers\drmk.sys
[2013.12.06 20:16:40 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEGA
[2013.12.06 20:16:40 | 000,000,000 | ---D | C] -- E:\Program Files\SEGA
[2013.12.06 20:16:34 | 000,000,000 | -H-D | C] -- E:\Program Files\InstallShield Installation Information
[2013.12.06 20:14:57 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\InstallShield
[2013.12.02 19:10:06 | 000,955,168 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvspcap.dll
[2013.12.02 19:06:20 | 022,951,200 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvoglv32.dll
[2013.12.02 19:06:20 | 015,218,504 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvd3dum.dll
[2013.12.02 19:06:20 | 010,446,112 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\drivers\nvlddmkm.sys
[2013.12.02 19:06:20 | 009,663,656 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuda.dll
[2013.12.02 19:06:20 | 009,619,872 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvopencl.dll
[2013.12.02 19:06:20 | 002,947,872 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuvid.dll
[2013.12.02 19:06:20 | 002,747,680 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcuvenc.dll
[2013.12.02 19:06:20 | 001,049,888 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvdispco3233182.dll
[2013.12.02 19:06:20 | 000,893,728 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvdispgenco3233182.dll
[2013.12.02 19:06:20 | 000,609,568 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\NvFBC.dll
[2013.12.02 19:06:20 | 000,562,464 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\NvIFR.dll
[2013.12.02 19:06:19 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- E:\Windows\System32\nvcompiler.dll
[2013.12.01 17:45:31 | 000,000,000 | ---D | C] -- E:\Users\Public\Desktop\Gothic 3 Modkit
[2013.12.01 17:45:31 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Modkit
[2013.12.01 17:31:51 | 000,239,960 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_7.dll
[2013.12.01 17:31:50 | 001,868,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dcsx_43.dll
[2013.12.01 17:31:50 | 000,470,880 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_43.dll
[2013.12.01 17:31:50 | 000,248,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx11_43.dll
[2013.12.01 17:31:49 | 005,501,792 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dcsx_42.dll
[2013.12.01 17:31:49 | 001,974,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_42.dll
[2013.12.01 17:31:49 | 000,528,216 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_6.dll
[2013.12.01 17:31:49 | 000,515,416 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_5.dll
[2013.12.01 17:31:49 | 000,238,936 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_6.dll
[2013.12.01 17:31:49 | 000,238,936 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_5.dll
[2013.12.01 17:31:49 | 000,235,344 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx11_42.dll
[2013.12.01 17:31:49 | 000,074,072 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_4.dll
[2013.12.01 17:31:48 | 004,178,264 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_41.dll
[2013.12.01 17:31:48 | 001,892,184 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_42.dll
[2013.12.01 17:31:48 | 001,846,632 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_41.dll
[2013.12.01 17:31:48 | 000,517,448 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_4.dll
[2013.12.01 17:31:48 | 000,453,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_42.dll
[2013.12.01 17:31:48 | 000,453,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_41.dll
[2013.12.01 17:31:48 | 000,235,352 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_4.dll
[2013.12.01 17:31:48 | 000,069,464 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_3.dll
[2013.12.01 17:31:47 | 004,379,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_40.dll
[2013.12.01 17:31:47 | 002,036,576 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_40.dll
[2013.12.01 17:31:47 | 001,493,528 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_39.dll
[2013.12.01 17:31:47 | 000,514,384 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_3.dll
[2013.12.01 17:31:47 | 000,509,448 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_2.dll
[2013.12.01 17:31:47 | 000,467,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_39.dll
[2013.12.01 17:31:47 | 000,452,440 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_40.dll
[2013.12.01 17:31:47 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_2.dll
[2013.12.01 17:31:47 | 000,235,856 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_3.dll
[2013.12.01 17:31:47 | 000,070,992 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_2.dll
[2013.12.01 17:31:47 | 000,068,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_1.dll
[2013.12.01 17:31:47 | 000,023,376 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_5.dll
[2013.12.01 17:31:47 | 000,022,360 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_6.dll
[2013.12.01 17:31:46 | 003,851,784 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_39.dll
[2013.12.01 17:31:46 | 003,850,760 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_38.dll
[2013.12.01 17:31:46 | 001,491,992 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_38.dll
[2013.12.01 17:31:46 | 000,507,400 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_1.dll
[2013.12.01 17:31:46 | 000,467,984 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_38.dll
[2013.12.01 17:31:46 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_1.dll
[2013.12.01 17:31:46 | 000,065,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAPOFX1_0.dll
[2013.12.01 17:31:46 | 000,025,608 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_4.dll
[2013.12.01 17:31:45 | 003,786,760 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DX9_37.dll
[2013.12.01 17:31:45 | 003,734,536 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_36.dll
[2013.12.01 17:31:45 | 001,420,824 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_37.dll
[2013.12.01 17:31:45 | 001,374,232 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_36.dll
[2013.12.01 17:31:45 | 000,479,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XAudio2_0.dll
[2013.12.01 17:31:45 | 000,462,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_37.dll
[2013.12.01 17:31:45 | 000,444,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_36.dll
[2013.12.01 17:31:45 | 000,267,272 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_10.dll
[2013.12.01 17:31:45 | 000,238,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine3_0.dll
[2013.12.01 17:31:45 | 000,025,608 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_3.dll
[2013.12.01 17:31:44 | 003,727,720 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_35.dll
[2013.12.01 17:31:44 | 001,358,192 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_35.dll
[2013.12.01 17:31:44 | 000,444,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_35.dll
[2013.12.01 17:31:44 | 000,267,112 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_9.dll
[2013.12.01 17:31:44 | 000,266,088 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_8.dll
[2013.12.01 17:31:44 | 000,017,928 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\X3DAudio1_2.dll
[2013.12.01 17:31:43 | 003,497,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_34.dll
[2013.12.01 17:31:43 | 003,495,784 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_33.dll
[2013.12.01 17:31:43 | 001,124,720 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_34.dll
[2013.12.01 17:31:43 | 001,123,696 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\D3DCompiler_33.dll
[2013.12.01 17:31:43 | 000,443,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_34.dll
[2013.12.01 17:31:43 | 000,443,752 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10_33.dll
[2013.12.01 17:31:43 | 000,261,480 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_7.dll
[2013.12.01 17:31:42 | 003,426,072 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_32.dll
[2013.12.01 17:31:42 | 002,414,360 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_31.dll
[2013.12.01 17:31:42 | 000,440,080 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx10.dll
[2013.12.01 17:31:42 | 000,255,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_6.dll
[2013.12.01 17:31:42 | 000,251,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_5.dll
[2013.12.01 17:31:42 | 000,237,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_4.dll
[2013.12.01 17:31:42 | 000,236,824 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_3.dll
[2013.12.01 17:31:42 | 000,062,744 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xinput1_2.dll
[2013.12.01 17:31:42 | 000,015,128 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\x3daudio1_1.dll
[2013.12.01 17:31:41 | 000,230,168 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_2.dll
[2013.12.01 17:31:41 | 000,229,584 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_1.dll
[2013.12.01 17:31:41 | 000,062,672 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xinput1_1.dll
[2013.12.01 17:31:38 | 002,388,176 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_30.dll
[2013.12.01 17:31:38 | 002,332,368 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_29.dll
[2013.12.01 17:31:38 | 002,323,664 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_28.dll
[2013.12.01 17:31:38 | 000,230,096 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\xactengine2_0.dll
[2013.12.01 17:31:38 | 000,014,032 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\x3daudio1_0.dll
[2013.12.01 17:31:37 | 002,337,488 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_25.dll
[2013.12.01 17:31:37 | 002,319,568 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_27.dll
[2013.12.01 17:31:37 | 002,297,552 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_26.dll
[2013.12.01 17:31:37 | 002,222,800 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3dx9_24.dll
[2013.12.01 17:29:47 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic 3 Enhanced Edition
[2013.12.01 17:29:43 | 000,000,000 | ---D | C] -- E:\Users\Kai\Documents\Gothic3
[2013.12.01 17:24:00 | 000,000,000 | ---D | C] -- E:\Program Files\Nordic Games
[2013.11.21 20:34:07 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\Avira
[2013.11.21 20:33:38 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013.11.21 20:33:29 | 000,135,648 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avipbb.sys
[2013.11.21 20:33:29 | 000,090,400 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avgntflt.sys
[2013.11.21 20:33:29 | 000,069,240 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avnetflt.sys
[2013.11.21 20:33:29 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avkmgr.sys
[2013.11.21 20:33:29 | 000,028,520 | ---- | C] (Avira GmbH) -- E:\Windows\System32\drivers\ssmdrv.sys
[2013.11.21 20:33:28 | 000,000,000 | ---D | C] -- E:\ProgramData\Avira
[2013.11.21 20:33:28 | 000,000,000 | ---D | C] -- E:\Program Files\Avira
[2013.11.21 17:12:59 | 000,000,000 | ---D | C] -- E:\Windows\pss
[2013.11.20 19:06:26 | 000,000,000 | ---D | C] -- E:\Users\Kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013.11.19 22:20:14 | 000,646,144 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\MsSpellCheckingFacility.exe
[2013.11.19 22:20:14 | 000,645,120 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jsIntl.dll
[2013.11.19 22:20:14 | 000,194,048 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\elshyph.dll
[2013.11.19 22:20:14 | 000,071,680 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\RegisterIEPKEYs.exe
[2013.11.19 22:20:13 | 001,051,136 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtmlmedia.dll
[2013.11.19 22:20:13 | 000,616,104 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dat
[2013.11.19 22:20:13 | 000,523,776 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeeds.dll
[2013.11.19 22:20:13 | 000,367,104 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\dxtmsft.dll
[2013.11.19 22:20:13 | 000,337,408 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\html.iec
[2013.11.19 22:20:13 | 000,244,736 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\dxtrans.dll
[2013.11.19 22:20:13 | 000,238,288 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iedkcs32.dll
[2013.11.19 22:20:13 | 000,233,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\url.dll
[2013.11.19 22:20:13 | 000,182,272 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msls31.dll
[2013.11.19 22:20:13 | 000,164,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msrating.dll
[2013.11.19 22:20:13 | 000,151,552 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iexpress.exe
[2013.11.19 22:20:13 | 000,139,264 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\wextract.exe
[2013.11.19 22:20:13 | 000,083,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\inseng.dll
[2013.11.19 22:20:13 | 000,034,816 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\JavaScriptCollectionAgent.dll
[2013.11.19 22:20:13 | 000,024,576 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\licmgr10.dll
[2013.11.19 22:20:12 | 000,116,736 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iepeers.dll
[2013.11.19 22:20:12 | 000,111,616 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\IEAdvpack.dll
[2013.11.19 22:20:12 | 000,086,016 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\iesysprep.dll
[2013.11.19 22:20:12 | 000,074,240 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\SetIEInstalledDate.exe
[2013.11.19 22:20:12 | 000,061,952 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\MshtmlDac.dll
[2013.11.19 22:20:12 | 000,056,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\pngfilt.dll
[2013.11.19 22:20:12 | 000,048,640 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtmler.dll
[2013.11.19 22:20:12 | 000,043,008 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeedsbs.dll
[2013.11.19 22:20:12 | 000,036,352 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\imgutil.dll
[2013.11.19 22:20:12 | 000,012,800 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeedssync.exe
[2013.11.19 22:19:37 | 003,969,472 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ntkrnlpa.exe
[2013.11.19 22:19:37 | 003,914,176 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ntoskrnl.exe
[2013.11.19 22:19:37 | 000,619,520 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\tdh.dll
========== Files - Modified Within 30 Days ==========
[2013.12.19 11:17:00 | 000,000,884 | ---- | M] () -- E:\Windows\tasks\Adobe Flash Player Updater.job
[2013.12.19 11:07:06 | 000,000,284 | ---- | M] () -- E:\Windows\tasks\DigitalSite.job
[2013.12.19 11:07:05 | 000,000,109 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\WB.CFG
[2013.12.19 11:07:05 | 000,000,006 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
[2013.12.19 11:03:01 | 000,000,284 | ---- | M] () -- E:\Windows\tasks\MySearchDial.job
[2013.12.19 10:49:05 | 000,022,576 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.12.19 10:49:05 | 000,022,576 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.12.19 10:48:17 | 000,710,730 | ---- | M] () -- E:\Windows\System32\perfh007.dat
[2013.12.19 10:48:17 | 000,655,758 | ---- | M] () -- E:\Windows\System32\perfh009.dat
[2013.12.19 10:48:17 | 000,152,002 | ---- | M] () -- E:\Windows\System32\perfc007.dat
[2013.12.19 10:48:17 | 000,124,498 | ---- | M] () -- E:\Windows\System32\perfc009.dat
[2013.12.19 10:41:12 | 000,067,584 | --S- | M] () -- E:\Windows\bootstat.dat
[2013.12.19 10:41:05 | 2415,370,240 | -HS- | M] () -- E:\hiberfil.sys
[2013.12.18 22:40:47 | 000,001,293 | ---- | M] () -- E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
[2013.12.16 17:40:30 | 000,002,399 | ---- | M] () -- E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
[2013.12.16 14:04:08 | 000,138,464 | ---- | M] () -- E:\Windows\System32\drivers\PnkBstrK.sys
[2013.12.16 14:03:42 | 000,000,682 | ---- | M] () -- E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
[2013.12.16 13:32:05 | 000,022,328 | ---- | M] () -- E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
[2013.12.16 13:31:47 | 000,682,280 | ---- | M] () -- E:\Windows\System32\pbsvc.exe
[2013.12.14 15:52:38 | 000,000,592 | ---- | M] () -- E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
[2013.12.12 10:58:31 | 000,135,648 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avipbb.sys
[2013.12.12 10:58:31 | 000,090,400 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avgntflt.sys
[2013.12.12 10:58:31 | 000,069,240 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Windows\System32\drivers\avnetflt.sys
[2013.12.12 10:48:58 | 000,278,272 | ---- | M] () -- E:\Windows\System32\FNTCACHE.DAT
[2013.12.11 12:18:01 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerApp.exe
[2013.12.11 12:18:01 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.12.06 20:26:45 | 000,002,074 | ---- | M] () -- E:\Users\Public\Desktop\Medieval II Total War.lnk
[2013.11.26 10:23:02 | 002,724,864 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtml.tlb
[2013.11.26 10:22:11 | 000,004,096 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollectorres.dll
[2013.11.26 09:53:56 | 000,061,952 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iesetup.dll
[2013.11.26 09:52:26 | 000,051,200 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwproxystub.dll
[2013.11.26 09:38:07 | 000,043,008 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jsproxy.dll
[2013.11.26 09:36:52 | 000,032,768 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iernonce.dll
[2013.11.26 09:32:08 | 000,440,832 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieui.dll
[2013.11.26 09:29:55 | 000,112,128 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieUnatt.exe
[2013.11.26 09:29:52 | 000,108,032 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieetwcollector.exe
[2013.11.26 09:28:16 | 000,553,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jscript9diag.dll
[2013.11.26 09:16:12 | 004,243,968 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jscript9.dll
[2013.11.26 09:13:00 | 000,208,896 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ie4uinit.exe
[2013.11.26 08:32:06 | 001,928,192 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\inetcpl.cpl
[2013.11.26 07:34:55 | 000,703,488 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dll
[2013.11.21 20:33:38 | 000,002,022 | ---- | M] () -- E:\Users\Public\Desktop\Avira Control Center.lnk
[2013.11.19 22:20:14 | 000,646,144 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\MsSpellCheckingFacility.exe
[2013.11.19 22:20:14 | 000,645,120 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\jsIntl.dll
[2013.11.19 22:20:14 | 000,194,048 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\elshyph.dll
[2013.11.19 22:20:14 | 000,071,680 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\RegisterIEPKEYs.exe
[2013.11.19 22:20:13 | 001,051,136 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtmlmedia.dll
[2013.11.19 22:20:13 | 000,616,104 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ieapfltr.dat
[2013.11.19 22:20:13 | 000,523,776 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeeds.dll
[2013.11.19 22:20:13 | 000,367,104 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\dxtmsft.dll
[2013.11.19 22:20:13 | 000,337,408 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\html.iec
[2013.11.19 22:20:13 | 000,244,736 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\dxtrans.dll
[2013.11.19 22:20:13 | 000,238,288 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iedkcs32.dll
[2013.11.19 22:20:13 | 000,233,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\url.dll
[2013.11.19 22:20:13 | 000,182,272 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msls31.dll
[2013.11.19 22:20:13 | 000,164,864 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msrating.dll
[2013.11.19 22:20:13 | 000,151,552 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iexpress.exe
[2013.11.19 22:20:13 | 000,139,264 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\wextract.exe
[2013.11.19 22:20:13 | 000,083,456 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\inseng.dll
[2013.11.19 22:20:13 | 000,034,816 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\JavaScriptCollectionAgent.dll
[2013.11.19 22:20:13 | 000,024,576 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\licmgr10.dll
[2013.11.19 22:20:13 | 000,016,284 | ---- | M] () -- E:\Windows\System32\ieuinit.inf
[2013.11.19 22:20:12 | 000,116,736 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iepeers.dll
[2013.11.19 22:20:12 | 000,111,616 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\IEAdvpack.dll
[2013.11.19 22:20:12 | 000,086,016 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\iesysprep.dll
[2013.11.19 22:20:12 | 000,074,240 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\SetIEInstalledDate.exe
[2013.11.19 22:20:12 | 000,061,952 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\MshtmlDac.dll
[2013.11.19 22:20:12 | 000,056,832 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\pngfilt.dll
[2013.11.19 22:20:12 | 000,048,640 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mshtmler.dll
[2013.11.19 22:20:12 | 000,043,008 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeedsbs.dll
[2013.11.19 22:20:12 | 000,036,352 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\imgutil.dll
[2013.11.19 22:20:12 | 000,012,800 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\msfeedssync.exe
[2013.11.19 22:19:37 | 003,969,472 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ntkrnlpa.exe
[2013.11.19 22:19:37 | 003,914,176 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\ntoskrnl.exe
[2013.11.19 22:19:37 | 000,619,520 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\tdh.dll
========== Files Created - No Company Name ==========
[2013.12.18 22:43:29 | 000,002,441 | ---- | C] () -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2013.12.18 22:40:47 | 000,001,293 | ---- | C] () -- E:\Users\Kai\Desktop\Men of War Condemned Heroes.lnk
[2013.12.16 17:40:30 | 000,002,399 | ---- | C] () -- E:\Users\Public\Desktop\Gothic 3 Götterdämmerung Enhanced Edition.lnk
[2013.12.16 14:03:42 | 000,000,682 | ---- | C] () -- E:\Users\Kai\Desktop\Call of Duty® World at War - Verknüpfung.lnk
[2013.12.16 13:32:05 | 000,138,464 | ---- | C] () -- E:\Windows\System32\drivers\PnkBstrK.sys
[2013.12.16 13:32:05 | 000,022,328 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\PnkBstrK.sys
[2013.12.16 13:31:49 | 000,111,928 | ---- | C] () -- E:\Windows\System32\PnkBstrB.exe
[2013.12.16 13:31:47 | 000,066,872 | ---- | C] () -- E:\Windows\System32\PnkBstrA.exe
[2013.12.16 13:31:46 | 000,682,280 | ---- | C] () -- E:\Windows\System32\pbsvc.exe
[2013.12.14 15:52:38 | 000,000,592 | ---- | C] () -- E:\Users\Kai\Desktop\Company of Heroes - Verknüpfung.lnk
[2013.12.06 20:26:45 | 000,002,074 | ---- | C] () -- E:\Users\Public\Desktop\Medieval II Total War.lnk
[2013.11.21 20:33:38 | 000,002,022 | ---- | C] () -- E:\Users\Public\Desktop\Avira Control Center.lnk
[2013.11.19 22:20:13 | 000,016,284 | ---- | C] () -- E:\Windows\System32\ieuinit.inf
[2013.10.30 19:02:16 | 000,000,006 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\WBPU-TTL.DAT
[2013.10.30 19:02:15 | 000,000,109 | ---- | C] () -- E:\Users\Kai\AppData\Roaming\WB.CFG
[2013.10.25 14:03:48 | 000,645,632 | ---- | C] () -- E:\Windows\System32\xvidcore.dll
[2013.10.25 14:03:48 | 000,240,640 | ---- | C] () -- E:\Windows\System32\xvidvfw.dll
[2013.10.25 14:03:48 | 000,178,688 | ---- | C] () -- E:\Windows\System32\unrar.dll
[2013.10.25 14:03:48 | 000,079,360 | ---- | C] () -- E:\Windows\System32\ff_vfw.dll
[2013.10.25 14:03:41 | 000,715,038 | ---- | C] () -- E:\Windows\unins000.exe
[2013.10.25 14:03:41 | 000,216,064 | ---- | C] ( ) -- E:\Windows\System32\lagarith.dll
[2013.10.25 14:03:41 | 000,001,780 | ---- | C] () -- E:\Windows\unins000.dat
========== ZeroAccess Check ==========
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- E:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013.10.25 14:03:48 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
[2013.10.25 14:03:40 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\CDXReader
[2013.10.25 14:02:53 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\DigitalSite
[2013.10.25 14:03:42 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\LavFilters
[2013.10.25 14:03:02 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\mysearchdial
[2013.10.30 22:52:36 | 000,000,000 | ---D | M] -- E:\Users\Kai\AppData\Roaming\Systweak
========== Purity Check ==========
< End of report > |