Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam. (https://www.trojaner-board.de/153879-win7-einige-wenige-programme-funktionieren-mehr-laptop-langsam.html)

NeonReflexe 14.05.2014 18:48
Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam.
 
Hallo, seit kurzer Zeit ich mein Laptop echt ziemlich langsam. Ich weiß nicht woran das liegt ob er alt wird oder was auch immer.
Spiele die ich sonst so lagg frei gespielt habe ruckeln seit neustem.
Wenn ihr mir helfen wollt könnt ich dieses Thema behandeln.

Aber nun zu meinem HAUPTHEMA:
Einige meine Programme funktionieren einfach nicht mehr. Ich kann fast alle Programme starten nur bei manchen bekomm ich name.exe funktioniert nicht mehr. Neuinstallieren funktioniert nicht.
Bitte helft mir.

schrauber 14.05.2014 18:56
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


NeonReflexe 14.05.2014 18:59
Defogger:
Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 19:55 on 14/05/2014 (CodeX)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
FRST

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-05-2014
Ran by CodeX (administrator) on USER-PC on 14-05-2014 19:56:08
Running from C:\Users\CodeX\Downloads
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(IV/Anthrax) C:\Users\CodeX\Desktop\PAWN\Pawnfox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found
AppInit_DLLs-x32: c:\progra~2\sn0310~1.boo => "c:\progra~2\sn0310~1.boo" File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
SearchScopes: HKCU - DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]

Chrome:
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-31]
CHR Extension: (YouTube) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-31]
CHR Extension: (Google-Suche) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-31]
CHR Extension: (AdBlock) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (Google Wallet) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-31]
CHR Extension: (YouTube Unblocker) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-14]
CHR Extension: (Google Mail) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-31]
CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\CodeX\AppData\Local\mysearchdial-speeddial.crx [2014-01-01]
CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\CodeX\AppData\Local\mysearchdial-speeddial.crx [2014-01-01]
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-01]
CHR HKLM-x32\...\Chrome\Extension: [logekkkdbdidmmcgkonmmonclldogceg] - C:\Program Files (x86)\Show-Password\150.crx [2014-01-01]
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\CodeX\AppData\Local\mysearchdial-speeddial.crx [2014-01-01]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S2 1a34a8e0; C:\Program Files (x86)\SNSvc.dll [174928 2014-05-06] ()
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-12-31] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()
S2 70e6ca8c; "c:\progra~2\optimi~1\OptProCrash.exe" [X]
S2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe run options=01110010010000000000000000000000 sourceguid=F59A0002-F007-46FB-97D3-3BC5D2551041 [X]
S2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [X]

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-02] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-04-12] (<Turtle Entertainment>)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-14] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-11-13] (Anchorfree Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 DfSdkS;
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-14 19:56 - 2014-05-14 19:56 - 00018606 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-14 19:56 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-14 19:55 - 2014-05-14 19:55 - 02066944 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-14 19:55 - 2014-05-14 19:55 - 00000472 _____ () C:\Users\CodeX\Downloads\defogger_disable.log
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:54 - 2014-05-14 19:54 - 00050477 _____ () C:\Users\CodeX\Downloads\Defogger.exe
2014-05-14 19:52 - 2014-05-14 19:52 - 00291985 _____ () C:\Users\CodeX\Downloads\Keygen-MBAM.rar
2014-05-14 19:44 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 19:43 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 19:43 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 19:42 - 2014-05-14 19:43 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\CodeX\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-14 19:36 - 2014-05-14 19:36 - 04522644 _____ () C:\Users\CodeX\Downloads\1246446932Setup.rar
2014-05-14 19:29 - 2014-05-14 19:29 - 00790066 _____ () C:\Users\CodeX\Downloads\Pawnfox_131.rar
2014-05-14 18:46 - 2014-05-14 18:46 - 00282775 _____ () C:\Users\CodeX\Downloads\YouTube-Unblocker-055.crx
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:37 - 2014-05-10 20:38 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:13 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 19:03 - 2014-05-10 19:03 - 00452608 _____ (ForFree) C:\Users\CodeX\Downloads\Inuria CS GO Full 3.0 CRACKED.exe
2014-05-10 18:40 - 2014-05-10 18:40 - 00087528 _____ () C:\Users\CodeX\Downloads\CSGO Recoil Reducer_mpgh.net.rar
2014-05-10 18:23 - 2014-05-10 18:23 - 00105332 _____ () C:\Users\CodeX\Downloads\DerpRadar CSGO Plugin v1.1.2_[www.unknowncheats.me]_.rar
2014-05-10 18:09 - 2014-05-10 18:09 - 00393120 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_ColdsoupCheats.zip
2014-05-10 17:47 - 2014-05-10 17:47 - 02189048 _____ (Skillbrains ) C:\Users\CodeX\Downloads\setup-lightshot.exe
2014-05-10 17:00 - 2014-05-10 17:01 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-14 18:58 - 00000280 _____ () C:\Windows\setupact.log
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:45 - 2014-05-10 16:45 - 00001084 _____ () C:\Windows\PFRO.log
2014-05-10 14:25 - 2014-05-10 14:25 - 00342510 _____ () C:\Users\CodeX\Downloads\OptiFine-HD-Standard-D5-1.4.7.zip
2014-05-10 14:17 - 2014-05-10 14:17 - 00000000 _____ () C:\Users\CodeX\Downloads\server.log
2014-05-10 14:13 - 2014-05-10 20:16 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 14:13 - 2014-05-10 14:15 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 14:13 - 2014-05-10 14:13 - 04588972 _____ () C:\Users\CodeX\Downloads\launcher^FTB_Launcher.exe
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:20 - 2014-05-10 09:20 - 00543000 _____ () C:\Users\CodeX\Downloads\TunaticSetup.exe
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 09:03 - 2014-05-10 09:03 - 02367646 _____ () C:\Users\CodeX\Downloads\mysql-r38-win.zip
2014-05-10 09:01 - 2014-05-10 09:01 - 02522928 _____ () C:\Users\CodeX\Downloads\includesplugins.rar
2014-05-10 09:01 - 2014-05-10 09:01 - 00236928 _____ () C:\Users\CodeX\Downloads\includesplugins_downloader-auXYI9NV.exe
2014-05-10 08:45 - 2014-05-14 19:30 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-10 08:45 - 2014-05-10 08:45 - 01975133 _____ () C:\Users\CodeX\Downloads\samp03z_svr_R1_win32.zip
2014-05-09 18:08 - 2014-05-09 18:08 - 00396833 _____ () C:\Users\CodeX\Downloads\CSGOsoupbear_mpgh.net.zip
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-07 17:05 - 2014-05-07 17:05 - 01035176 _____ () C:\Users\CodeX\Downloads\R3CLIENT.zip
2014-05-06 18:58 - 2014-05-06 18:58 - 00174928 _____ () C:\Program Files (x86)\SNSvc.dll
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\savee net
2014-05-06 18:57 - 2014-05-06 18:57 - 00335720 _____ (AppReady Software) C:\Users\CodeX\Downloads\Peter Maffay - So bist du (1).exe
2014-05-06 18:56 - 2014-05-06 18:56 - 00335736 _____ (AppReady Software) C:\Users\CodeX\Downloads\Peter Maffay - So bist du.exe
2014-05-06 18:29 - 2014-05-06 18:29 - 625206398 _____ () C:\Windows\MEMORY.DMP
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:38 - 2014-05-06 17:38 - 00000000 ____D () C:\ProgramData\sAve  net
2014-05-06 17:36 - 2014-05-06 17:36 - 04471576 _____ () C:\Users\CodeX\Downloads\installer_dojotech_spotify_recorder_English.exe
2014-05-06 17:32 - 2014-05-06 17:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\SearchProtect
2014-05-06 17:32 - 2014-05-06 17:32 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-06 17:31 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 17:31 - 2014-05-06 17:55 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-05-06 17:31 - 2014-05-06 17:32 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\savve net
2014-05-06 17:30 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:30 - 2014-05-06 17:30 - 00342264 _____ (AppReady Software) C:\Users\CodeX\Downloads\Dojotech Spotify Recorder 3.3.exe
2014-05-06 17:29 - 2014-05-06 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:25 - 2014-05-06 17:25 - 00824106 _____ () C:\Users\CodeX\Downloads\SpotifyRecorderSetup15.exe
2014-05-06 17:01 - 2014-05-06 17:01 - 00347816 _____ (Microsoft Corporation) C:\Users\CodeX\Downloads\MicrosoftFixit.dvd.RNP.111322819196153843.2.1.Run.exe
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-01 18:27 - 2014-05-01 18:27 - 13084896 _____ (Microsoft Corporation) C:\Users\CodeX\Downloads\Silverlight_x64.exe
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:08 - 2014-04-28 19:42 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-27 15:15 - 2014-04-27 15:15 - 00254645 _____ () C:\Users\CodeX\Downloads\[1.7.2]ReiMinimap_v3.4_03beta.zip
2014-04-27 15:13 - 2014-04-27 15:13 - 00216910 _____ () C:\Users\CodeX\Downloads\InventoryTweaks-1.57-116.jar
2014-04-25 19:18 - 2014-04-25 19:18 - 00356321 _____ () C:\Users\CodeX\Downloads\OneDrive-2014-04-25.zip
2014-04-25 12:30 - 2014-04-25 12:30 - 00710922 _____ () C:\Users\CodeX\Downloads\mod_sa.v4.3.3.3.SA-MP.v0.3z R1.Setup.7z
2014-04-25 12:24 - 2014-04-25 12:24 - 00450622 _____ () C:\Users\CodeX\Downloads\mod_sa0.3z.rar
2014-04-25 12:22 - 2014-04-25 12:22 - 09692601 _____ () C:\Users\CodeX\Downloads\[mod_sa]25GHz Project(BETA - v0.1)(0.3z-RC).7z
2014-04-25 11:57 - 2014-04-25 11:59 - 00000000 ____D () C:\Minecraft_Backup
2014-04-25 11:57 - 2014-04-25 11:57 - 00462336 _____ (Dino Chiesa) C:\Users\CodeX\Downloads\Ionic.Zip.dll
2014-04-25 11:55 - 2014-04-25 11:55 - 06699520 _____ (Minecraft Installers) C:\Users\CodeX\Downloads\thehen101's Xray Mod Installer 1.7.9.exe
2014-04-25 11:47 - 2014-04-25 11:47 - 05127324 _____ () C:\Users\CodeX\Downloads\Faithful_3.zip
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:40 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 17:50 - 2014-04-23 17:50 - 11990847 _____ () C:\Users\CodeX\Downloads\sa-mp-0.3z-R1-install.exe
2014-04-23 15:18 - 2014-04-23 15:18 - 00675988 _____ () C:\Users\CodeX\Downloads\Minecraft.exe
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:20 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-04-23 14:20 - 2014-04-23 14:21 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-23 14:20 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-23 14:20 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-21 22:15 - 2014-04-23 14:27 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-04-21 22:15 - 2014-04-21 22:16 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-04-21 22:15 - 2014-04-21 22:15 - 01473129 _____ () C:\Users\CodeX\Downloads\PSC Generator.zip
2014-04-21 22:10 - 2014-04-21 22:10 - 01344600 _____ (ZICO LTD) C:\Users\CodeX\Downloads\TF2HatGenerator__6857_il2865932.exe
2014-04-21 21:56 - 2014-04-21 21:56 - 00000122 _____ () C:\Users\CodeX\Documents\PASSWPRD HERE!!.url
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ESET
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\Program Files\ESET
2014-04-21 21:10 - 2014-04-21 21:10 - 01581384 _____ (ESET) C:\Users\CodeX\Downloads\eset_smart_security_live_installer_.exe
2014-04-21 21:09 - 2014-04-21 21:09 - 00866735 _____ () C:\Users\CodeX\Downloads\DCRemoverV1_setup.zip
2014-04-21 21:09 - 2014-04-21 21:09 - 00001178 _____ () C:\Users\Public\Desktop\DarkComet Remover.lnk
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\Program Files (x86)\PhrozenSoft
2014-04-21 19:50 - 2014-04-21 19:50 - 00527423 _____ ( ) C:\Users\CodeX\Downloads\Lame_v3.99.3_for_Windows.exe
2014-04-21 19:50 - 2014-04-21 19:50 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-04-21 16:36 - 2014-04-21 16:36 - 00613200 _____ (Chip Digital GmbH) C:\Users\CodeX\Downloads\MorphVOX Pro - CHIP-Downloader.exe
2014-04-21 14:44 - 2013-08-01 02:06 - 00000000 ____D () C:\Users\CodeX\Desktop\upload
2014-04-21 14:37 - 2014-04-21 14:38 - 08238263 _____ () C:\Users\CodeX\Downloads\WBB3.1.8_FULL+UPDATE.ZIP
2014-04-20 15:15 - 2014-04-20 15:15 - 00001211 _____ () C:\Users\CodeX\Desktop\Driver Genius.lnk
2014-04-20 15:15 - 2014-04-20 15:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Genius
2014-04-20 15:10 - 2014-04-20 15:14 - 13910880 _____ () C:\Users\CodeX\Downloads\090.rar
2014-04-17 07:53 - 2014-04-17 07:53 - 00201590 _____ () C:\Users\CodeX\Downloads\ImprovedBhop.zip
2014-04-16 08:47 - 2014-04-16 08:47 - 06555942 _____ () C:\Users\CodeX\Downloads\xulrunner-1.8.1.3.en-US.win32.zip
2014-04-16 08:47 - 2014-04-16 08:47 - 06502113 _____ () C:\Users\CodeX\Downloads\xulrunner-1.8.1.3.en-US.win32-20080128.zip
2014-04-15 21:28 - 2010-08-28 22:36 - 00096256 _____ () C:\Users\CodeX\Desktop\WebKitBrowser.dll
2014-04-15 21:28 - 2010-08-28 15:41 - 08002048 _____ (Apple Inc.) C:\Users\CodeX\Desktop\WebKit.dll
2014-04-15 21:28 - 2009-09-08 16:58 - 00192512 _____ (Skybound Software (hxxp://www.skybound.ca)) C:\Users\CodeX\Desktop\Skybound.Gecko.dll
2014-04-15 21:27 - 2014-04-15 21:27 - 00000000 ____D () C:\Program Files (x86)\XUL Runner
2014-04-15 21:26 - 2014-04-15 21:26 - 26415458 _____ () C:\Users\CodeX\Downloads\xulrunner-28.0.en-US.win32.zip
2014-04-15 21:24 - 2014-04-15 21:24 - 00090559 _____ () C:\Users\CodeX\Downloads\Skybound.GeckoFX.bin.v1.9.1.0.zip
2014-04-15 21:23 - 2014-04-15 21:24 - 13911017 _____ () C:\Users\CodeX\Downloads\WebKit.NET-0.5-bin-cairo.zip
2014-04-15 20:57 - 2014-04-15 20:57 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft Corporation
2014-04-15 17:45 - 2014-04-22 21:39 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-04-15 17:29 - 2014-04-15 17:29 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Avnex
2014-04-15 17:27 - 2014-04-22 21:38 - 00000000 ____D () C:\Program Files (x86)\AV Voice Changer 8.0 Diamond
2014-04-15 17:27 - 2008-12-26 12:56 - 00021504 _____ (Avnex) C:\Windows\system32\Drivers\vcsvad.sys
2014-04-15 17:16 - 2009-11-18 13:14 - 05180288 _____ () C:\Users\CodeX\Desktop\MorphVOXPro4_Install-1.exe
2014-04-15 17:15 - 2014-04-15 17:15 - 00000000 ____D () C:\Program Files (x86)\Screaming Bee

==================== One Month Modified Files and Folders =======

2014-05-14 19:56 - 2014-05-14 19:56 - 00018606 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-14 19:56 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-14 19:56 - 2013-12-31 18:54 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Skype
2014-05-14 19:55 - 2014-05-14 19:55 - 02066944 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-14 19:55 - 2014-05-14 19:55 - 00000472 _____ () C:\Users\CodeX\Downloads\defogger_disable.log
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:55 - 2013-12-31 17:18 - 00000000 ____D () C:\Users\CodeX
2014-05-14 19:54 - 2014-05-14 19:54 - 00050477 _____ () C:\Users\CodeX\Downloads\Defogger.exe
2014-05-14 19:52 - 2014-05-14 19:52 - 00291985 _____ () C:\Users\CodeX\Downloads\Keygen-MBAM.rar
2014-05-14 19:49 - 2014-01-02 12:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:49 - 2014-01-02 12:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 19:49 - 2014-01-02 12:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:49 - 2014-01-02 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-14 19:48 - 2013-12-31 17:09 - 01152336 _____ () C:\Windows\WindowsUpdate.log
2014-05-14 19:44 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:42 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\CodeX\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:39 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Spotify
2014-05-14 19:39 - 2013-12-31 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-14 19:36 - 2014-05-14 19:36 - 04522644 _____ () C:\Users\CodeX\Downloads\1246446932Setup.rar
2014-05-14 19:35 - 2014-04-12 11:30 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-14 19:30 - 2014-05-10 08:45 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-14 19:29 - 2014-05-14 19:29 - 00790066 _____ () C:\Users\CodeX\Downloads\Pawnfox_131.rar
2014-05-14 18:58 - 2014-05-10 16:46 - 00000280 _____ () C:\Windows\setupact.log
2014-05-14 18:51 - 2014-02-22 19:55 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\TS3Client
2014-05-14 18:46 - 2014-05-14 18:46 - 00282775 _____ () C:\Users\CodeX\Downloads\YouTube-Unblocker-055.crx
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 18:10 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-11 18:10 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-11 15:02 - 2014-04-12 11:04 - 00000276 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-05-11 11:35 - 2014-04-12 11:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-11 09:11 - 2014-01-02 11:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\CrashDumps
2014-05-10 20:38 - 2014-05-10 20:37 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 20:16 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 19:13 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 19:12 - 2014-01-01 19:25 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\UseNeXT
2014-05-10 19:03 - 2014-05-10 19:03 - 00452608 _____ (ForFree) C:\Users\CodeX\Downloads\Inuria CS GO Full 3.0 CRACKED.exe
2014-05-10 18:40 - 2014-05-10 18:40 - 00087528 _____ () C:\Users\CodeX\Downloads\CSGO Recoil Reducer_mpgh.net.rar
2014-05-10 18:23 - 2014-05-10 18:23 - 00105332 _____ () C:\Users\CodeX\Downloads\DerpRadar CSGO Plugin v1.1.2_[www.unknowncheats.me]_.rar
2014-05-10 18:09 - 2014-05-10 18:09 - 00393120 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_ColdsoupCheats.zip
2014-05-10 17:57 - 2014-03-29 09:32 - 00000000 ____D () C:\Users\CodeX\Desktop\Steuerklopfer
2014-05-10 17:47 - 2014-05-10 17:47 - 02189048 _____ (Skillbrains ) C:\Users\CodeX\Downloads\setup-lightshot.exe
2014-05-10 17:01 - 2014-05-10 17:00 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:46 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-10 16:45 - 2014-05-10 16:45 - 00001084 _____ () C:\Windows\PFRO.log
2014-05-10 14:25 - 2014-05-10 14:25 - 00342510 _____ () C:\Users\CodeX\Downloads\OptiFine-HD-Standard-D5-1.4.7.zip
2014-05-10 14:18 - 2013-12-31 20:36 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\.minecraft
2014-05-10 14:17 - 2014-05-10 14:17 - 00000000 _____ () C:\Users\CodeX\Downloads\server.log
2014-05-10 14:15 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 14:13 - 2014-05-10 14:13 - 04588972 _____ () C:\Users\CodeX\Downloads\launcher^FTB_Launcher.exe
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:35 - 2014-04-12 11:35 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-10 09:35 - 2014-04-12 11:35 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-10 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-10 09:20 - 2014-05-10 09:20 - 00543000 _____ () C:\Users\CodeX\Downloads\TunaticSetup.exe
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 09:03 - 2014-05-10 09:03 - 02367646 _____ () C:\Users\CodeX\Downloads\mysql-r38-win.zip
2014-05-10 09:01 - 2014-05-10 09:01 - 02522928 _____ () C:\Users\CodeX\Downloads\includesplugins.rar
2014-05-10 09:01 - 2014-05-10 09:01 - 00236928 _____ () C:\Users\CodeX\Downloads\includesplugins_downloader-auXYI9NV.exe
2014-05-10 08:45 - 2014-05-10 08:45 - 01975133 _____ () C:\Users\CodeX\Downloads\samp03z_svr_R1_win32.zip
2014-05-09 18:08 - 2014-05-09 18:08 - 00396833 _____ () C:\Users\CodeX\Downloads\CSGOsoupbear_mpgh.net.zip
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-08 21:29 - 2014-01-01 13:19 - 00000000 ____D () C:\Users\CodeX\Documents\Camtasia Studio
2014-05-08 15:15 - 2014-03-11 15:31 - 00000000 ____D () C:\Program Files (x86)\GTA
2014-05-07 20:06 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Spotify
2014-05-07 17:05 - 2014-05-07 17:05 - 01035176 _____ () C:\Users\CodeX\Downloads\R3CLIENT.zip
2014-05-06 18:58 - 2014-05-06 18:58 - 00174928 _____ () C:\Program Files (x86)\SNSvc.dll
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\savee net
2014-05-06 18:58 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 18:58 - 2014-05-06 17:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 18:57 - 2014-05-06 18:57 - 00335720 _____ (AppReady Software) C:\Users\CodeX\Downloads\Peter Maffay - So bist du (1).exe
2014-05-06 18:56 - 2014-05-06 18:56 - 00335736 _____ (AppReady Software) C:\Users\CodeX\Downloads\Peter Maffay - So bist du.exe
2014-05-06 18:29 - 2014-05-06 18:29 - 625206398 _____ () C:\Windows\MEMORY.DMP
2014-05-06 18:29 - 2014-01-03 19:34 - 00000000 ____D () C:\Windows\Minidump
2014-05-06 17:55 - 2014-05-06 17:31 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:41 - 2014-05-06 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:38 - 2014-05-06 17:38 - 00000000 ____D () C:\ProgramData\sAve  net
2014-05-06 17:36 - 2014-05-06 17:36 - 04471576 _____ () C:\Users\CodeX\Downloads\installer_dojotech_spotify_recorder_English.exe
2014-05-06 17:32 - 2014-05-06 17:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\SearchProtect
2014-05-06 17:32 - 2014-05-06 17:32 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-06 17:32 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\savve net
2014-05-06 17:31 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-05-06 17:31 - 2013-12-31 17:52 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Google
2014-05-06 17:30 - 2014-05-06 17:30 - 00342264 _____ (AppReady Software) C:\Users\CodeX\Downloads\Dojotech Spotify Recorder 3.3.exe
2014-05-06 17:25 - 2014-05-06 17:25 - 00824106 _____ () C:\Users\CodeX\Downloads\SpotifyRecorderSetup15.exe
2014-05-06 17:01 - 2014-05-06 17:01 - 00347816 _____ (Microsoft Corporation) C:\Users\CodeX\Downloads\MicrosoftFixit.dvd.RNP.111322819196153843.2.1.Run.exe
2014-05-05 13:23 - 2014-01-15 17:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-01 18:27 - 2014-05-01 18:27 - 13084896 _____ (Microsoft Corporation) C:\Users\CodeX\Downloads\Silverlight_x64.exe
2014-05-01 18:23 - 2011-04-12 10:06 - 00765514 _____ () C:\Windows\system32\perfh007.dat
2014-05-01 18:23 - 2011-04-12 10:06 - 00174712 _____ () C:\Windows\system32\perfc007.dat
2014-05-01 18:23 - 2009-07-14 07:13 - 01806010 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:42 - 2014-04-28 19:08 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-27 15:15 - 2014-04-27 15:15 - 00254645 _____ () C:\Users\CodeX\Downloads\[1.7.2]ReiMinimap_v3.4_03beta.zip
2014-04-27 15:13 - 2014-04-27 15:13 - 00216910 _____ () C:\Users\CodeX\Downloads\InventoryTweaks-1.57-116.jar
2014-04-26 14:18 - 2014-04-12 11:30 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-25 19:18 - 2014-04-25 19:18 - 00356321 _____ () C:\Users\CodeX\Downloads\OneDrive-2014-04-25.zip
2014-04-25 12:30 - 2014-04-25 12:30 - 00710922 _____ () C:\Users\CodeX\Downloads\mod_sa.v4.3.3.3.SA-MP.v0.3z R1.Setup.7z
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-25 12:24 - 2014-04-25 12:24 - 00450622 _____ () C:\Users\CodeX\Downloads\mod_sa0.3z.rar
2014-04-25 12:22 - 2014-04-25 12:22 - 09692601 _____ () C:\Users\CodeX\Downloads\[mod_sa]25GHz Project(BETA - v0.1)(0.3z-RC).7z
2014-04-25 11:59 - 2014-04-25 11:57 - 00000000 ____D () C:\Minecraft_Backup
2014-04-25 11:57 - 2014-04-25 11:57 - 00462336 _____ (Dino Chiesa) C:\Users\CodeX\Downloads\Ionic.Zip.dll
2014-04-25 11:55 - 2014-04-25 11:55 - 06699520 _____ (Minecraft Installers) C:\Users\CodeX\Downloads\thehen101's Xray Mod Installer 1.7.9.exe
2014-04-25 11:47 - 2014-04-25 11:47 - 05127324 _____ () C:\Users\CodeX\Downloads\Faithful_3.zip
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:42 - 2014-04-23 20:40 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 17:50 - 2014-04-23 17:50 - 11990847 _____ () C:\Users\CodeX\Downloads\sa-mp-0.3z-R1-install.exe
2014-04-23 15:18 - 2014-04-23 15:18 - 00675988 _____ () C:\Users\CodeX\Downloads\Minecraft.exe
2014-04-23 14:27 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-04-23 14:27 - 2014-04-08 19:25 - 00000000 __SHD () C:\Users\CodeX\Documents\MSDCSC
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:21 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-23 11:04 - 2014-04-12 11:04 - 00000284 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-04-22 21:46 - 2014-02-27 22:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-04-22 21:46 - 2014-01-15 20:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
2014-04-22 21:44 - 2014-04-12 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\psynetic
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Users\CodeX\AppData\Local\PokerStars.NET
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Program Files (x86)\PokerStars.NET
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Local\No23 Recorder
2014-04-22 21:41 - 2014-01-15 20:19 - 00000000 ____D () C:\Users\CodeX\Desktop\Nützliche Programme
2014-04-22 21:41 - 2014-01-01 17:19 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Mobogenie
2014-04-22 21:39 - 2014-04-15 17:45 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-04-22 21:38 - 2014-04-15 17:27 - 00000000 ____D () C:\Program Files (x86)\AV Voice Changer 8.0 Diamond
2014-04-22 21:38 - 2014-04-12 11:04 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\systweak
2014-04-22 21:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-22 21:37 - 2014-01-02 11:31 - 00000000 ____D () C:\Program Files (x86)\Mirillis
2014-04-22 21:37 - 2014-01-02 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-04-22 21:36 - 2014-01-01 17:13 - 00000000 ____D () C:\ProgramData\WPM
2014-04-22 21:29 - 2013-12-31 17:21 - 00000000 ___RD () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-22 12:39 - 2014-01-15 20:40 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-04-22 12:39 - 2014-01-01 17:19 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\newnext.me
2014-04-22 12:38 - 2013-12-31 21:09 - 00000000 __RSD () C:\Windows\SysWOW64\Flashplayer
2014-04-22 09:33 - 2005-03-31 18:59 - 05188397 ____H () C:\Users\CodeX\AppData\Roaming\CodeXlog.dat
2014-04-22 08:35 - 2014-04-11 21:35 - 00000000 ____D () C:\ProgramData\Origin
2014-04-21 22:16 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-04-21 22:15 - 2014-04-21 22:15 - 01473129 _____ () C:\Users\CodeX\Downloads\PSC Generator.zip
2014-04-21 22:10 - 2014-04-21 22:10 - 01344600 _____ (ZICO LTD) C:\Users\CodeX\Downloads\TF2HatGenerator__6857_il2865932.exe
2014-04-21 21:56 - 2014-04-21 21:56 - 00000122 _____ () C:\Users\CodeX\Documents\PASSWPRD HERE!!.url
2014-04-21 21:55 - 2014-01-15 20:39 - 00000000 ____D () C:\Program Files (x86)\Show-Password
2014-04-21 21:17 - 2005-04-19 16:13 - 00000000 _RSHD () C:\Users\CodeX\AppData\Roaming\WinDir
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ESET
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\Program Files\ESET
2014-04-21 21:10 - 2014-04-21 21:10 - 01581384 _____ (ESET) C:\Users\CodeX\Downloads\eset_smart_security_live_installer_.exe
2014-04-21 21:09 - 2014-04-21 21:09 - 00866735 _____ () C:\Users\CodeX\Downloads\DCRemoverV1_setup.zip
2014-04-21 21:09 - 2014-04-21 21:09 - 00001178 _____ () C:\Users\Public\Desktop\DarkComet Remover.lnk
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\Program Files (x86)\PhrozenSoft
2014-04-21 21:06 - 2009-07-14 07:08 - 00011214 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 20:37 - 2014-01-02 11:38 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Audacity
2014-04-21 19:50 - 2014-04-21 19:50 - 00527423 _____ ( ) C:\Users\CodeX\Downloads\Lame_v3.99.3_for_Windows.exe
2014-04-21 19:50 - 2014-04-21 19:50 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-04-21 16:48 - 2013-12-31 17:36 - 01780290 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-21 16:36 - 2014-04-21 16:36 - 00613200 _____ (Chip Digital GmbH) C:\Users\CodeX\Downloads\MorphVOX Pro - CHIP-Downloader.exe
2014-04-21 14:38 - 2014-04-21 14:37 - 08238263 _____ () C:\Users\CodeX\Downloads\WBB3.1.8_FULL+UPDATE.ZIP
2014-04-20 15:24 - 2014-04-12 23:18 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESL Wire Game Client
2014-04-20 15:23 - 2014-04-11 21:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-04-20 15:16 - 2013-12-31 19:38 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-04-20 15:15 - 2014-04-20 15:15 - 00001211 _____ () C:\Users\CodeX\Desktop\Driver Genius.lnk
2014-04-20 15:15 - 2014-04-20 15:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Genius
2014-04-20 15:14 - 2014-04-20 15:10 - 13910880 _____ () C:\Users\CodeX\Downloads\090.rar
2014-04-17 07:53 - 2014-04-17 07:53 - 00201590 _____ () C:\Users\CodeX\Downloads\ImprovedBhop.zip
2014-04-16 08:47 - 2014-04-16 08:47 - 06555942 _____ () C:\Users\CodeX\Downloads\xulrunner-1.8.1.3.en-US.win32.zip
2014-04-16 08:47 - 2014-04-16 08:47 - 06502113 _____ () C:\Users\CodeX\Downloads\xulrunner-1.8.1.3.en-US.win32-20080128.zip
2014-04-15 21:27 - 2014-04-15 21:27 - 00000000 ____D () C:\Program Files (x86)\XUL Runner
2014-04-15 21:26 - 2014-04-15 21:26 - 26415458 _____ () C:\Users\CodeX\Downloads\xulrunner-28.0.en-US.win32.zip
2014-04-15 21:24 - 2014-04-15 21:24 - 00090559 _____ () C:\Users\CodeX\Downloads\Skybound.GeckoFX.bin.v1.9.1.0.zip
2014-04-15 21:24 - 2014-04-15 21:23 - 13911017 _____ () C:\Users\CodeX\Downloads\WebKit.NET-0.5-bin-cairo.zip
2014-04-15 20:57 - 2014-04-15 20:57 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft Corporation
2014-04-15 17:29 - 2014-04-15 17:29 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Avnex
2014-04-15 17:15 - 2014-04-15 17:15 - 00000000 ____D () C:\Program Files (x86)\Screaming Bee
2014-04-14 08:20 - 2009-07-14 06:45 - 00392336 _____ () C:\Windows\system32\FNTCACHE.DAT

Some content of TEMP:
====================
C:\Users\CodeX\AppData\Local\Temp\TsuDB8CB768.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2013-03-02 19:39] - [2013-03-02 19:39] - 0391680 ____A (Microsoft Corporation) 13CD6BA1F798A61AEE985E78D3644A1E

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2871296 ____A (Microsoft Corporation) 70D758D2DBE79757421017EE68143763

C:\Windows\SysWOW64\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2616320 ____A (Microsoft Corporation) B0846DB5BDAB92131529A58E627FCEB7

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 1008128 ____A (Microsoft Corporation) 7FB4D54B502C6CF2E35B8188FA4CC08C

C:\Windows\SysWOW64\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 0833024 ____A (Microsoft Corporation) 9B836EE76E3A99052EF6DEA52B41D1BE

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2013-03-02 20:07] - [2013-03-02 20:07] - 0512512 ____A (Microsoft Corporation) 83D5AD7CFDB1F9D42C3CD102B20FFA0A

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2013-03-02 19:56] - [2013-03-02 19:56] - 0296304 ____A (Microsoft Corporation) A56F2326CE33646CDA95E7A9E7163FFA



LastRegBack: 2014-05-11 12:39

==================== End Of Log ============================
--- --- ---


FRST Addition
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-05-2014
Ran by CodeX at 2014-05-14 19:57:19
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET Smart Security 7.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{C7A772A4-73CF-EB06-172F-75C5F6C80AAC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.06.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Craften Terminal 3.4.5 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DarkComet RAT Remover version 1.0 (HKLM-x32\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Deponia (HKLM-x32\...\Steam App 214340) (Version:  - Daedalic Entertainment)
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dojotech Spotify Recorder (HKLM-x32\...\{D149DB2E-392E-48CC-8036-88BECC09C50A}) (Version: 3.2 - Dojotech Software)
Driver Genius (HKLM-x32\...\Driver Genius_is1) (Version: 14.0 - Driver-Soft Inc.)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.1 - Daedalic Entertainment)
Edna Bricht Aus 6.3 (HKLM-x32\...\{0D00CD3F-AEDC-45F1-A2DD-DADF74407D7B}_is1) (Version:  - )
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version:  - Turtle Entertainment GmbH)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.007 - HTC Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Lollipop (HKCU\...\lollipop_04101237) (Version:  - Lollipop Network, S.L.) <==== ATTENTION
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{F6E484FB-BC48-4A63-8186-E25DF4607B3B}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
RegClean Pro (HKLM-x32\...\RegClean Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
savee net (HKLM-x32\...\{7DD5E91C-3864-77EC-7635-D14910C2A03E}) (Version: 2.1.0.1195 - ssave net)
SavingsbullFilter (Version: 1.0.0.0 - SavingsBull Filter) Hidden <==== ATTENTION
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.12.20.154 - Conduit) <==== ATTENTION
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SN.Booster (HKLM-x32\...\S-014941198) (Version: 2.3.0.1056 - PremiumSoft)
SN.Sustainer 1.80 (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{1a34a8e0}) (Version:  - Certified Publisher) <==== ATTENTION
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Tunatic (HKLM-x32\...\Tunatic) (Version:  - )
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Youtube Downloader HD v. 2.9.9.13 (HKLM-x32\...\Youtube Downloader HD_is1) (Version:  - YoutubeDownloaderHD.com) <==== ATTENTION
YoutubeAdblocker (HKLM-x32\...\{4820778D-AB0D-6D18-C316-52A6A0E1D507}) (Version: 2.1.0.1195 - YoutubeAdblocker) <==== ATTENTION

==================== Restore Points  =========================

21-04-2014 14:54:37 MorphVOX Pro wird installiert
22-04-2014 19:35:41 Supprimé (EMCO EVALUATION PACKAGE) - DG
22-04-2014 19:36:59 TrueCrypt uninstallation
22-04-2014 19:37:38 Removed Advanced Archive Password Recovery
22-04-2014 19:39:23 Entfernt CrazyTalk
22-04-2014 19:43:02 No23 Recorder wird entfernt
06-05-2014 15:25:30 Installed Dojotech Spotify Recorder
06-05-2014 15:28:20 Removed Dojotech Spotify Recorder
06-05-2014 15:28:59 Installed Dojotech Spotify Recorder
06-05-2014 15:40:46 Installed Dojotech Spotify Recorder
14-05-2014 17:37:30 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde installiert.

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05F4A343-9592-4156-A891-8A6074A0FB15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1F824E18-E1C1-4E5F-AE92-4E7A710B3F60} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {6991998A-AE4E-464A-A184-2C64254F2647} - System32\Tasks\{7A680034-4A98-48D7-81A9-FF3A869593C9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {735C8257-D086-4586-8E54-15FD2EBA3C7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: {793F1221-A7AE-404F-BE05-E96108756E24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {91392D79-87F8-4D01-BE2A-48002413C522} - System32\Tasks\SN.Booster-S-014941198 => c:\programdata\appready software\sn.booster\SN.Booster.exe
Task: {9ECA6AE5-B08B-4854-A4B6-49F8A1731DED} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {BB71E53C-A859-47CA-87B9-4136ABAFDFD6} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\CodeX\AppData\Local\FilesFrog Update Checker\update_checker.exe <==== ATTENTION
Task: {D8F2F778-777E-4266-8C01-8633FE30BEB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F5C04EAB-1A3C-4478-A06F-65CE541348B8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-12-06 17:06 - 2013-12-06 17:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 23:18 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe
2014-04-12 23:18 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll
2011-03-31 17:08 - 2011-03-31 17:08 - 00080896 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2013-10-23 14:15 - 2014-03-11 13:59 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2013-10-23 14:15 - 2014-03-11 13:59 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2013-10-23 14:15 - 2014-03-11 13:59 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-10-23 14:15 - 2014-03-11 13:59 - 00577480 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-22 18:22 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-02-15 21:43 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-02-15 21:43 - 2014-04-29 02:37 - 00754688 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 02198720 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-02-15 21:43 - 2014-05-10 04:29 - 01145536 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-02-15 21:43 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 13692232 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94057340

Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94057340

Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94056232

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94056232

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94055234

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94055234

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94054204


System errors:
=============
Error: (05/14/2014 07:41:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dienst "Bonjour"" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/14/2014 07:41:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/14/2014 07:41:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/10/2014 04:47:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/10/2014 04:47:43 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (05/10/2014 04:46:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SavingsbullFilterService64" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/10/2014 04:46:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Level Quality Watcher" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/10/2014 04:44:03 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (05/10/2014 04:44:03 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (05/09/2014 06:39:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "TeamViewer 9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 2000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94057340

Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94057340

Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94056232

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94056232

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94055234

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94055234

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94054204


CodeIntegrity Errors:
===================================
  Date: 2014-05-10 16:45:58.762
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.481
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.870
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.652
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-05 13:24:28.891
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-05 13:24:28.641
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-28 17:35:12.652
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-28 17:35:12.403
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-26 12:20:00.181
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-26 12:19:59.947
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 41%
Total physical RAM: 7654.11 MB
Available physical RAM: 4503.76 MB
Total Pagefile: 15306.41 MB
Available Pagefile: 11347.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.61 GB) (Free:130.03 GB) NTFS
Drive d: () (Fixed) (Total:222.54 GB) (Free:215.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 753715F6)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================

NeonReflexe 14.05.2014 19:04
Malwarebytes Anti Malware LOG
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 14.05.2014
Scan Time: 20:02:39
Logfile: Malware log.txt
Administrator: No

Version: 2.00.1.1004
Malware Database: v2014.05.14.08
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: CodeX

Scan Type: Hyper Scan
Result: Completed
Objects Scanned: 252389
Time Elapsed: 12 min, 29 sec

Memory: Enabled
Startup: Enabled
Filesystem: Disabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 25
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean Pro_is1, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SavingsBull.A, HKLM\SOFTWARE\Savings Bull, , [60f0024f6e0dce6868c99401f30f26da],
PUP.Optional.SavingsBull.A, HKLM\SOFTWARE\SavingsBull Filter, , [87c96ce587f4fc3af1414a4b39c9629e],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [0c44d47d4833b0867e5ef5a6b151f50b],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [00508ac70c6fb77f94a97546f80bb14f],
PUP.Optional.AdPeak.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{813BA625-B0FA-48D8-9B75-59759C88C219}, , [de72fa57b0cbf640da39a6dc788a7a86],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [113fdb767803043270e27129ed159967],
PUP.Optional.SavingsBull.A, HKLM\SOFTWARE\WOW6432NODE\SavingsbullFilter, , [56fa4809f78478be3bf8e9ac010157a9],
PUP.Optional.SNBoost.A, HKLM\SOFTWARE\WOW6432NODE\SN.Booster, , [87c9d879f883b77fc55be79d51b156aa],
PUP.Optional.Aartemis.A, HKLM\SOFTWARE\WOW6432NODE\AARTEMISSOFTWARE\aartemishp, , [d57b88c9bbc00135a6eb445742c0768a],
PUP.Optional.Elex.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\ifohbjbgfchkkfhphahclmkpgejiplfo, , [68e878d9dd9ec076ef644f647c873dc3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\logekkkdbdidmmcgkonmmonclldogceg, , [014f89c8a2d965d1426e6064fb08926e],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [9bb5a5acd0abd264ecf057441be722de],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [153b3819d5a660d66cd19f1c5fa4bb45],
PUP.Optional.BundleInstaller.A, HKLM\SOFTWARE\WOW6432NODE\VITTALIA\AxtanInstaller, , [a0b073de32492b0b43a03b5b4eb4ed13],
PUP.Optional.AdPeak.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Level Quality Watcher, , [361ad87924578caa46e2771e709250b0],
Malware.Trace, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DC3_FEXEC, , [d67ae46d601b62d4b9038ead34cf8c74],
PUP.Optional.SavingsBull.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Savings Bull, , [62ee470a0972ab8b50e043522ad87c84],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [29274b065724f0463aa1b1ea24de35cb],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [6ce4e17052299b9b68f3bddcd62cff01],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [123e01503d3eb581d4a4b1feab58f40c],
PUP.Optional.Qone8, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [2e2291c03843c76f94a8befdcb38b34d],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\RegClean Pro, , [3f11cd84a1da57df1b172f8647bc01ff],
PUP.Optional.YoutubeAdblocker.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, , [7cd43819dba066d0df9e4132be44f010],

Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0X2O1C0R2R1R, , [123e01503d3eb581d4a4b1feab58f40c]

Registry Data: 11
PUP.Optional.Aartemis, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[034db39ea7d42412c8787cccc341ab55]
PUP.Optional.Aartemis.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (hxxp://www.google.com), Bad: (hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[7dd32d247ffc9e984ffa460224e06997]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=, Good: (hxxp://www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=),,[82cef061611a54e24456b29507fd15eb]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[9ab6361bb9c2ab8bf73890b8b84cd22e]
PUP.Optional.Aartemis, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[133d5ff2cfac7fb7b68a66e238ccd52b]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, hxxp://start.mysearchdial.com/?f=2&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=, Good: (www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=2&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=),,[7bd55ef35f1cf2448bc0ce7026ded828]
PUP.Optional.Aartemis.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (hxxp://www.google.com), Bad: (hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[3818afa2df9c59ddd079a1a7e02441bf]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=, Good: (hxxp://www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=),,[5ff100513f3c1f1786146ed91ce8659b]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[9ab6b0a1116a9b9bbf7049ff35cfa55b]
PUP.Optional.Aartemis, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (hxxp://www.google.com), Bad: (hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[fb55222fe8938aac1e20ff4937cd7789]
PUP.Optional.Conduit.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=, Good: (hxxp://www.google.com), Bad: (hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=),,[e868f859b2c9af874d4d7ec0d4306d93]

Folders: 34
Stolen.Data, C:\Users\CodeX\AppData\Roaming\imlgs, , [ff5184cd47342313c469cec322e0b34d],
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs, , [c789f25f572485b1a9d7caa005fec937],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\rep, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\bin, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\rep, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\voice, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\voice\de, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.NextLive.A, C:\Users\CodeX\AppData\Roaming\newnext.me, , [96baafa280fbe74f16e1d59b2cd627d9],
PUP.Optional.NextLive.A, C:\Users\CodeX\AppData\Roaming\newnext.me\cache, , [96baafa280fbe74f16e1d59b2cd627d9],
PUP.Optional.Adpeak, C:\Program Files\Level Quality Watcher\v1.01, , [52fe1d341d5e4aec76afb9b8b54d44bc],
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker, , [82ce84cd81fa7abcbcafc2af61a1c53b],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService, , [76da5bf63744b3835cae94de857d9868],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update, , [76da5bf63744b3835cae94de857d9868],
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker, , [7cd43819dba066d0df9e4132be44f010],
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff, , [ba966ae7d5a6f93dccac4636ed15ee12],

Files: 179
PUP.Optional.Superfish.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, , [ba961140b2c90432ee18255b45bd619f],
PUP.Optional.Superfish.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, , [77d992bfb4c7ef47877f8ff1bd458c74],
PUP.Optional.Conduit.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage, , [fd53dd74ceadb185c2347d0325dd9f61],
PUP.Optional.Conduit.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage-journal, , [da7678d94a31a29454a2dea24eb45ca4],
PUP.Optional.Iminent.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, , [f25e6de48bf057dfb426c2bf8b772dd3],
PUP.Optional.QuickStart.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx, , [b49cb899b1cab58179e6a1ea7c869967],
Stolen.Data, C:\Users\CodeX\AppData\Roaming\imlgs\08-04-2014, , [ff5184cd47342313c469cec322e0b34d],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, , [153b08490378241282ad573c8d7531cf],
PUP.Optional.NewTab.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx, , [7cd4153cc6b52e0844d0395d887ab050],
PUP.Optional.MySearchDial.A, C:\Users\CodeX\AppData\Local\mysearchdial-speeddial.crx, , [b39dbb96fc7faf874914a6f4da28d729],
PUP.Optional.RegCleanerPro.J, C:\Windows\Tasks\RegClean Pro_UPDATES.job, , [56faaca5f685ca6c46702576748e2ad6],
Trojan.Downloader, C:\Windows\SysWOW64\winupdate.exe, , [3c14d57ce09b979f4bfced01ac567888],
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-08-3.dc, , [c789f25f572485b1a9d7caa005fec937],
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-09-4.dc, , [c789f25f572485b1a9d7caa005fec937],
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-10-5.dc, , [c789f25f572485b1a9d7caa005fec937],
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-21-2.dc, , [c789f25f572485b1a9d7caa005fec937],
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-22-3.dc, , [c789f25f572485b1a9d7caa005fec937],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\TraditionalCn_rcp_zh-tw.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Finnish_rcp_fi.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Chinese_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Chinese_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\CleanSchedule.exe, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Danish_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Danish_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Dutch_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Dutch_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\eng_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\eng_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Japanese_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Japanese_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\korean_rcp_ko.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\korean_uninst_ko.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Norwegian_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Norwegian_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\polish_rcp_pl.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\polish_uninst_pl.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\portugese_rcp_pt.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\portugese_uninst_pt.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Portuguese_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Portuguese_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RCPUninstall.exe, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RegCleanPro.dll, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Finnish_uninst_fi.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\French_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\French_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\German_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\German_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\greek_rcp_el.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\greek_uninst_el.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\install_left_image.bmp, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\isxdl.dll, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Italian_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Italian_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\russian_rcp_ru.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\russian_uninst_ru.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Spanish_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\spanish_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\SSDPTstub.exe, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Swedish_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\swedish_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\systweakasp.exe, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\TPS.ico, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\traditionalcn_uninst_zh-tw.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\turkish_rcp_tr.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Turkish_uninst_tr.ini, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.dat, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.exe, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.msg, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\xmllite.dll, , [bf91e26fcfacd561ea289d11a360fc04],
PUP.Optional.RegCleanPro.A, C:\Windows\Tasks\RegClean Pro_DEFAULT.job, , [27292130f18a49edd3409e1032d14db3],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\EULA.txt, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.jpg, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\1397293755.reg, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\ExcludeList.rcp, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\German_rcp.dat, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_04-25-2014.log, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_04-26-2014.log, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_04-27-2014.log, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_05-02-2014.log, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_05-10-2014.log, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_05-11-2014.log, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\rcpupdate.ini, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\results.rcp, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\summary2.bin, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\TempHLList.rcp, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rmx, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rxb, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000002.rmx, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000002.rxb, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000003.rmx, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000003.rxb, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000004.rmx, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000004.rxb, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000005.rmx, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000005.rxb, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\voice\de\voice.wav, , [58f8d37e205bac8a81442649b9496997],
PUP.Optional.NextLive.A, C:\Users\CodeX\AppData\Roaming\newnext.me\nengine.cookie, , [96baafa280fbe74f16e1d59b2cd627d9],
PUP.Optional.NextLive.A, C:\Users\CodeX\AppData\Roaming\newnext.me\cache\spark.bin, , [96baafa280fbe74f16e1d59b2cd627d9],
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker\OP3fp6cX.dat, , [82ce84cd81fa7abcbcafc2af61a1c53b],
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker\OP3fp6cX.tlb, , [82ce84cd81fa7abcbcafc2af61a1c53b],
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker\A9A6Zhez5.dat, , [7cd43819dba066d0df9e4132be44f010],
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker\A9A6Zhez5.exe, , [7cd43819dba066d0df9e4132be44f010],
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\000005.ldb, , [ba966ae7d5a6f93dccac4636ed15ee12],
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\CURRENT, , [ba966ae7d5a6f93dccac4636ed15ee12],
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\LOCK, , [ba966ae7d5a6f93dccac4636ed15ee12],
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\LOG.old, , [ba966ae7d5a6f93dccac4636ed15ee12],
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\MANIFEST-000009, , [ba966ae7d5a6f93dccac4636ed15ee12],
PUP.Optional.Conduit.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (  "homepage": "hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=",), ,[2b25e56c02793cfaf6f99bd9c2424ab6]

Physical Sectors: 0
(No malicious items detected)


(end)

schrauber 15.05.2014 12:36
Zitat:
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
:wtf:

NeonReflexe 15.05.2014 12:39
Hatte was getestet soll aber jetzt nicht das problem sein. Schon was gefunden^^? Ich habe Win7 enterprise

schrauber 16.05.2014 11:07
Adware & Co. deinstallieren

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:




Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

NeonReflexe 16.05.2014 12:57
Ok. Also das FRST Addition Log zeigt mir datein die (wie ich jetzt mal vermute) von Malewarebytes schon gelöscht wurden. Trotzdem ComboFix starten?

schrauber 17.05.2014 13:19
ja :)

NeonReflexe 18.05.2014 18:35
Ja nur schön, dass es auf Stufe_48 stehen bleibt. was tun ?

schrauber 19.05.2014 11:36
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

NeonReflexe 19.05.2014 12:32
AdwCleaner
Code:
# AdwCleaner v3.209 - Bericht erstellt am 19/05/2014 um 13:28:32
# Aktualisiert 18/05/2014 von Xplode
# Betriebssystem : Windows 7 Enterprise Service Pack 1 (64 bits)
# Benutzername : CodeX - USER-PC
# Gestartet von : C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Chromatic Browser
Ordner Gelöscht : C:\Users\CodeX\AppData\Local\Chromatic Browser
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Chromatic Browser
Ordner Gelöscht : C:\Users\Udo\AppData\Local\Chromatic Browser

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Google Chrome v34.0.1847.131

[ Datei : C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Homepage] : hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [21593 octets] - [14/05/2014 20:08:58]
AdwCleaner[R1].txt - [290 octets] - [16/05/2014 13:16:55]
AdwCleaner[R2].txt - [1550 octets] - [19/05/2014 13:27:36]
AdwCleaner[S0].txt - [19096 octets] - [14/05/2014 20:10:24]
AdwCleaner[S1].txt - [1471 octets] - [19/05/2014 13:28:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1531 octets] ##########

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Enterprise x64
Ran by CodeX on 19.05.2014 at 13:33:52,47
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\driver genius"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.05.2014 at 13:46:11,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Frst:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by CodeX (administrator) on USER-PC on 19-05-2014 13:48:20
Running from C:\Users\CodeX\Downloads
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Spotify Ltd) C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]

Chrome:
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-31]
CHR Extension: (YouTube) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-31]
CHR Extension: (Google-Suche) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-31]
CHR Extension: (AdBlock) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (Google Wallet) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-31]
CHR Extension: (YouTube Unblocker) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-14]
CHR Extension: (Google Mail) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-31]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-12-31] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-02] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-04-12] (<Turtle Entertainment>)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-19] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-11-13] (Anchorfree Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 DfSdkS;
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-19 13:48 - 2014-05-19 13:48 - 00012236 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-19 13:47 - 2014-05-19 13:48 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:32 - 2014-05-18 19:34 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-18 19:03 - 2014-05-18 19:36 - 00000000 ___SD () C:\ComboFix
2014-05-16 13:18 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-16 13:18 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-16 13:18 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:15 - 2014-05-16 13:16 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-14 20:08 - 2014-05-19 13:28 - 00000000 ____D () C:\AdwCleaner
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:56 - 2014-05-19 13:48 - 00000000 ____D () C:\FRST
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:44 - 2014-05-19 13:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 19:43 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 19:43 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:37 - 2014-05-10 20:38 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:13 - 2014-05-18 18:50 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-18 18:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-18 18:50 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 17:00 - 2014-05-10 17:01 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-19 13:30 - 00000616 _____ () C:\Windows\setupact.log
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:45 - 2014-05-19 13:29 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-10 14:13 - 2014-05-10 20:16 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 14:13 - 2014-05-10 14:15 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 08:45 - 2014-05-18 19:37 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:29 - 2014-05-16 13:02 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:31 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 17:31 - 2014-05-06 17:32 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:30 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:29 - 2014-05-06 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:08 - 2014-04-28 19:42 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-25 11:57 - 2014-04-25 11:59 - 00000000 ____D () C:\Minecraft_Backup
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:40 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:20 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-04-23 14:20 - 2014-04-23 14:21 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-23 14:20 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-23 14:20 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-21 22:15 - 2014-05-14 20:47 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-04-21 22:15 - 2014-05-14 20:47 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-04-21 21:56 - 2014-04-21 21:56 - 00000122 _____ () C:\Users\CodeX\Documents\PASSWPRD HERE!!.url
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ESET
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\Program Files\ESET
2014-04-21 21:09 - 2014-04-21 21:09 - 00001178 _____ () C:\Users\Public\Desktop\DarkComet Remover.lnk
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\Program Files (x86)\PhrozenSoft
2014-04-21 19:50 - 2014-04-21 19:50 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-04-21 14:44 - 2013-08-01 02:06 - 00000000 ____D () C:\Users\CodeX\Desktop\upload
2014-04-20 15:15 - 2014-04-20 15:15 - 00001211 _____ () C:\Users\CodeX\Desktop\Driver Genius.lnk

==================== One Month Modified Files and Folders =======

2014-05-19 13:49 - 2014-01-02 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-19 13:48 - 2014-05-19 13:48 - 00012236 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-19 13:48 - 2014-05-19 13:47 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:48 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:35 - 2014-04-12 11:30 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-19 13:34 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:31 - 2014-04-12 11:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-19 13:30 - 2014-05-10 16:46 - 00000616 _____ () C:\Windows\setupact.log
2014-05-19 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-19 13:29 - 2014-05-10 16:45 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-19 13:28 - 2014-05-14 20:08 - 00000000 ____D () C:\AdwCleaner
2014-05-19 13:28 - 2013-12-31 17:09 - 01226530 _____ () C:\Windows\WindowsUpdate.log
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-19 13:26 - 2014-02-22 19:55 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\TS3Client
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:48 - 2014-03-11 15:31 - 00000000 ____D () C:\Program Files (x86)\GTA
2014-05-18 19:37 - 2014-05-10 08:45 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:36 - 2014-05-18 19:03 - 00000000 ___SD () C:\ComboFix
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:34 - 2014-05-18 19:32 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-18 18:50 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-18 18:50 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-18 18:50 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-18 18:46 - 2013-12-31 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:16 - 2014-05-16 13:15 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:10 - 2014-01-02 17:11 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-16 13:02 - 2014-05-06 18:29 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-16 13:02 - 2014-01-03 19:34 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 13:01 - 2011-04-12 10:21 - 00000000 ____D () C:\Windows\CSC
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:10 - 2013-12-31 17:21 - 00000995 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-14 20:10 - 2013-12-31 17:18 - 00000000 ____D () C:\Users\CodeX
2014-05-14 20:09 - 2013-12-31 18:54 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Skype
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 20:03 - 2014-01-02 11:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\CrashDumps
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:49 - 2014-01-02 12:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:49 - 2014-01-02 12:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 19:49 - 2014-01-02 12:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:39 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Spotify
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:38 - 2014-05-10 20:37 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 20:16 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 19:12 - 2014-01-01 19:25 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\UseNeXT
2014-05-10 17:57 - 2014-03-29 09:32 - 00000000 ____D () C:\Users\CodeX\Desktop\Steuerklopfer
2014-05-10 17:01 - 2014-05-10 17:00 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 14:18 - 2013-12-31 20:36 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\.minecraft
2014-05-10 14:15 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:35 - 2014-04-12 11:35 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-10 09:35 - 2014-04-12 11:35 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-10 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-08 21:29 - 2014-01-01 13:19 - 00000000 ____D () C:\Users\CodeX\Documents\Camtasia Studio
2014-05-07 20:06 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Spotify
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 18:58 - 2014-05-06 17:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:41 - 2014-05-06 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:32 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-05-06 17:31 - 2013-12-31 17:52 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Google
2014-05-05 13:23 - 2014-01-15 17:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-01 18:23 - 2011-04-12 10:06 - 00765514 _____ () C:\Windows\system32\perfh007.dat
2014-05-01 18:23 - 2011-04-12 10:06 - 00174712 _____ () C:\Windows\system32\perfc007.dat
2014-05-01 18:23 - 2009-07-14 07:13 - 01806010 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:42 - 2014-04-28 19:08 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-26 14:18 - 2014-04-12 11:30 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-25 11:59 - 2014-04-25 11:57 - 00000000 ____D () C:\Minecraft_Backup
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:42 - 2014-04-23 20:40 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 14:27 - 2014-04-08 19:25 - 00000000 __SHD () C:\Users\CodeX\Documents\MSDCSC
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:21 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-22 21:44 - 2014-04-12 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\psynetic
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Users\CodeX\AppData\Local\PokerStars.NET
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Program Files (x86)\PokerStars.NET
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Local\No23 Recorder
2014-04-22 21:41 - 2014-01-15 20:19 - 00000000 ____D () C:\Users\CodeX\Desktop\Nützliche Programme
2014-04-22 21:39 - 2014-04-15 17:45 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-04-22 21:38 - 2014-04-15 17:27 - 00000000 ____D () C:\Program Files (x86)\AV Voice Changer 8.0 Diamond
2014-04-22 21:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-22 21:37 - 2014-01-02 11:31 - 00000000 ____D () C:\Program Files (x86)\Mirillis
2014-04-22 21:37 - 2014-01-02 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-04-22 21:29 - 2013-12-31 17:21 - 00000000 ___RD () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-22 12:38 - 2013-12-31 21:09 - 00000000 __RSD () C:\Windows\SysWOW64\Flashplayer
2014-04-22 09:33 - 2005-03-31 18:59 - 05188397 ____H () C:\Users\CodeX\AppData\Roaming\CodeXlog.dat
2014-04-22 08:35 - 2014-04-11 21:35 - 00000000 ____D () C:\ProgramData\Origin
2014-04-21 21:56 - 2014-04-21 21:56 - 00000122 _____ () C:\Users\CodeX\Documents\PASSWPRD HERE!!.url
2014-04-21 21:17 - 2005-04-19 16:13 - 00000000 _RSHD () C:\Users\CodeX\AppData\Roaming\WinDir
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ESET
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\Program Files\ESET
2014-04-21 21:09 - 2014-04-21 21:09 - 00001178 _____ () C:\Users\Public\Desktop\DarkComet Remover.lnk
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\Program Files (x86)\PhrozenSoft
2014-04-21 21:06 - 2009-07-14 07:08 - 00011970 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 20:37 - 2014-01-02 11:38 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Audacity
2014-04-21 19:50 - 2014-04-21 19:50 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-04-21 16:48 - 2013-12-31 17:36 - 01780290 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-20 15:24 - 2014-04-12 23:18 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESL Wire Game Client
2014-04-20 15:23 - 2014-04-11 21:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-04-20 15:15 - 2014-04-20 15:15 - 00001211 _____ () C:\Users\CodeX\Desktop\Driver Genius.lnk

Some content of TEMP:
====================
C:\Users\CodeX\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2013-03-02 19:39] - [2013-03-02 19:39] - 0391680 ____A (Microsoft Corporation) 13CD6BA1F798A61AEE985E78D3644A1E

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2871296 ____A (Microsoft Corporation) 70D758D2DBE79757421017EE68143763

C:\Windows\SysWOW64\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2616320 ____A (Microsoft Corporation) B0846DB5BDAB92131529A58E627FCEB7

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 1008128 ____A (Microsoft Corporation) 7FB4D54B502C6CF2E35B8188FA4CC08C

C:\Windows\SysWOW64\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 0833024 ____A (Microsoft Corporation) 9B836EE76E3A99052EF6DEA52B41D1BE

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2013-03-02 20:07] - [2013-03-02 20:07] - 0512512 ____A (Microsoft Corporation) 83D5AD7CFDB1F9D42C3CD102B20FFA0A

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2013-03-02 19:56] - [2013-03-02 19:56] - 0296304 ____A (Microsoft Corporation) A56F2326CE33646CDA95E7A9E7163FFA



LastRegBack: 2014-05-11 12:39

==================== End Of Log ============================
--- --- ---


Addition
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-19 13:49:13
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{C7A772A4-73CF-EB06-172F-75C5F6C80AAC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.06.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Craften Terminal 3.4.5 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DarkComet RAT Remover version 1.0 (HKLM-x32\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Deponia (HKLM-x32\...\Steam App 214340) (Version:  - Daedalic Entertainment)
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dojotech Spotify Recorder (HKLM-x32\...\{D149DB2E-392E-48CC-8036-88BECC09C50A}) (Version: 3.2 - Dojotech Software)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.1 - Daedalic Entertainment)
Edna Bricht Aus 6.3 (HKLM-x32\...\{0D00CD3F-AEDC-45F1-A2DD-DADF74407D7B}_is1) (Version:  - )
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version:  - Turtle Entertainment GmbH)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.007 - HTC Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Lollipop (HKCU\...\lollipop_04101237) (Version:  - Lollipop Network, S.L.) <==== ATTENTION
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Tunatic (HKLM-x32\...\Tunatic) (Version:  - )
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Restore Points  =========================

22-04-2014 19:35:41 Supprimé (EMCO EVALUATION PACKAGE) - DG
22-04-2014 19:36:59 TrueCrypt uninstallation
22-04-2014 19:37:38 Removed Advanced Archive Password Recovery
22-04-2014 19:39:23 Entfernt CrazyTalk
22-04-2014 19:43:02 No23 Recorder wird entfernt
06-05-2014 15:25:30 Installed Dojotech Spotify Recorder
06-05-2014 15:28:20 Removed Dojotech Spotify Recorder
06-05-2014 15:28:59 Installed Dojotech Spotify Recorder
06-05-2014 15:40:46 Installed Dojotech Spotify Recorder
14-05-2014 17:37:30 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde installiert.
16-05-2014 11:15:14 Revo Uninstaller's restore point - Youtube Downloader HD v. 2.9.9.13
18-05-2014 17:03:33 ComboFix created restore point

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05F4A343-9592-4156-A891-8A6074A0FB15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1F824E18-E1C1-4E5F-AE92-4E7A710B3F60} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {6991998A-AE4E-464A-A184-2C64254F2647} - System32\Tasks\{7A680034-4A98-48D7-81A9-FF3A869593C9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {735C8257-D086-4586-8E54-15FD2EBA3C7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: {793F1221-A7AE-404F-BE05-E96108756E24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {91392D79-87F8-4D01-BE2A-48002413C522} - System32\Tasks\SN.Booster-S-014941198 => c:\programdata\appready software\sn.booster\SN.Booster.exe
Task: {9ECA6AE5-B08B-4854-A4B6-49F8A1731DED} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {BB71E53C-A859-47CA-87B9-4136ABAFDFD6} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {D8F2F778-777E-4266-8C01-8633FE30BEB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F5C04EAB-1A3C-4478-A06F-65CE541348B8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 17:06 - 2013-12-06 17:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 23:18 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe
2014-04-12 23:18 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll
2011-03-31 17:08 - 2011-03-31 17:08 - 00080896 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-12-06 17:06 - 2013-12-06 17:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-05-19 13:30:07.528
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 13:30:07.262
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-16 13:02:21.123
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-16 13:02:20.858
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 20:12:22.450
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 20:12:22.200
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.762
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.481
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.870
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.652
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 22%
Total physical RAM: 7654.11 MB
Available physical RAM: 5933.23 MB
Total Pagefile: 15306.41 MB
Available Pagefile: 13284.47 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.61 GB) (Free:128.83 GB) NTFS
Drive d: () (Fixed) (Total:222.54 GB) (Free:215.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 753715F6)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 20.05.2014 09:18

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

NeonReflexe 20.05.2014 12:15
Ja allerdings. Undzwar spuckt mir mein ESET Smart Security 7 "C:\PROGRAMDATA\InstallMate\{irgendwelchezahlen}\Custom.dll aus.
Nach dem "säubern" hab ich dies immernoch.
Bedrohung: Win32/InstalleRex.M

Werde hier die logs gleich posten

Öhm..

SecurityCheck
Code:
UNSUPPORTED OPERATING SYSTEM! ABORTED!
Habe Win7 Enterprise.

schrauber 21.05.2014 07:47
Securitycheck ignorieren, bitte frisches FRST log.

NeonReflexe 22.05.2014 12:36
Sorry :)
ESET Online hat nichts gefunden.
Was mir auffällt, dass FRST immernoch Lollipop findet obwohl ich es unter CurrenUserver(HKCU?) gelöscht habe.

FRST:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by CodeX (administrator) on USER-PC on 22-05-2014 13:32:31
Running from C:\Users\CodeX\Downloads
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Spotify Ltd) C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Spotify Ltd) C:\Users\CodeX\AppData\Roaming\Spotify\spotify.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\GTA\samp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [109784 2014-05-20] (Siber Systems)
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]

Chrome:
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-31]
CHR Extension: (YouTube) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-31]
CHR Extension: (Google-Suche) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-31]
CHR Extension: (AdBlock) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (Google Wallet) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-31]
CHR Extension: (YouTube Unblocker) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-14]
CHR Extension: (Google Mail) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-31]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-05-20]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-12-31] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] ()
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-02] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-04-12] (<Turtle Entertainment>)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-11-13] (Anchorfree Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 DfSdkS;
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-21 21:16 - 2014-05-21 21:16 - 00375786 _____ () C:\Users\CodeX\Documents\ts3_clientui-win64-1394624943-2014-05-21 21_16_12.896150.dmp
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
2014-05-20 21:22 - 2014-05-20 21:22 - 00074329 _____ () C:\Users\CodeX\Downloads\astgen11.zip
2014-05-20 21:12 - 2014-05-20 21:12 - 00000071 _____ () C:\Users\CodeX\Desktop\GameOverlayUI.exe.log
2014-05-20 21:11 - 2014-05-20 21:11 - 00161381 _____ () C:\Users\CodeX\Downloads\blob2ini2blob.zip
2014-05-20 21:08 - 2014-05-20 21:22 - 00008501 _____ () C:\Users\CodeX\Desktop\blabla.html
2014-05-20 20:05 - 2014-05-20 20:05 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Users\CodeX\Documents\My RoboForm Data
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Siber Systems
2014-05-20 20:02 - 2014-05-20 20:02 - 16619392 _____ (Siber Systems) C:\Users\CodeX\Downloads\RoboForm-Setup.exe
2014-05-20 13:37 - 2014-05-20 13:37 - 00855379 _____ () C:\Users\CodeX\Downloads\SecurityCheck.exe
2014-05-20 13:20 - 2014-05-20 13:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 13:19 - 2014-05-20 13:19 - 02347384 _____ (ESET) C:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
2014-05-20 13:13 - 2014-05-20 13:13 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64 (1).exe
2014-05-19 13:49 - 2014-05-19 13:49 - 00031411 _____ () C:\Users\CodeX\Downloads\Addition.txt
2014-05-19 13:48 - 2014-05-22 13:32 - 00013934 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-19 13:47 - 2014-05-19 13:48 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:32 - 2014-05-18 19:34 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-18 19:03 - 2014-05-18 19:36 - 00000000 ___SD () C:\ComboFix
2014-05-16 13:18 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-16 13:18 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-16 13:18 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:15 - 2014-05-16 13:16 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-14 20:08 - 2014-05-19 13:28 - 00000000 ____D () C:\AdwCleaner
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:56 - 2014-05-22 13:32 - 00000000 ____D () C:\FRST
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:44 - 2014-05-19 13:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 19:43 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 19:43 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:37 - 2014-05-10 20:38 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:13 - 2014-05-21 19:54 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-21 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-21 19:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 17:00 - 2014-05-10 17:01 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-21 18:33 - 00000784 _____ () C:\Windows\setupact.log
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:45 - 2014-05-19 13:29 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-10 14:13 - 2014-05-10 20:16 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 14:13 - 2014-05-10 14:15 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 08:45 - 2014-05-18 19:37 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:29 - 2014-05-16 13:02 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:31 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 17:31 - 2014-05-06 17:32 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:30 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:29 - 2014-05-06 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:08 - 2014-04-28 19:42 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-25 11:57 - 2014-04-25 11:59 - 00000000 ____D () C:\Minecraft_Backup
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:40 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:20 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-04-23 14:20 - 2014-04-23 14:21 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-23 14:20 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-23 14:20 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

2014-05-22 13:32 - 2014-05-19 13:48 - 00013934 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-22 13:32 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-22 13:31 - 2013-12-31 18:54 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Skype
2014-05-22 13:26 - 2013-12-31 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-22 13:21 - 2014-02-22 19:55 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\TS3Client
2014-05-22 13:04 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Spotify
2014-05-22 13:04 - 2014-01-02 11:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\CrashDumps
2014-05-21 21:16 - 2014-05-21 21:16 - 00375786 _____ () C:\Users\CodeX\Documents\ts3_clientui-win64-1394624943-2014-05-21 21_16_12.896150.dmp
2014-05-21 20:49 - 2014-01-02 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-21 20:35 - 2014-04-12 11:30 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-21 19:54 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-21 19:54 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-21 19:54 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-21 19:46 - 2011-04-12 10:06 - 00765514 _____ () C:\Windows\system32\perfh007.dat
2014-05-21 19:46 - 2011-04-12 10:06 - 00174712 _____ () C:\Windows\system32\perfc007.dat
2014-05-21 19:46 - 2009-07-14 07:13 - 01806010 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
2014-05-21 18:35 - 2013-12-31 17:09 - 01270218 _____ () C:\Windows\WindowsUpdate.log
2014-05-21 18:33 - 2014-05-10 16:46 - 00000784 _____ () C:\Windows\setupact.log
2014-05-20 21:22 - 2014-05-20 21:22 - 00074329 _____ () C:\Users\CodeX\Downloads\astgen11.zip
2014-05-20 21:22 - 2014-05-20 21:08 - 00008501 _____ () C:\Users\CodeX\Desktop\blabla.html
2014-05-20 21:12 - 2014-05-20 21:12 - 00000071 _____ () C:\Users\CodeX\Desktop\GameOverlayUI.exe.log
2014-05-20 21:11 - 2014-05-20 21:11 - 00161381 _____ () C:\Users\CodeX\Downloads\blob2ini2blob.zip
2014-05-20 20:20 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Spotify
2014-05-20 20:05 - 2014-05-20 20:05 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Users\CodeX\Documents\My RoboForm Data
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Siber Systems
2014-05-20 20:02 - 2014-05-20 20:02 - 16619392 _____ (Siber Systems) C:\Users\CodeX\Downloads\RoboForm-Setup.exe
2014-05-20 13:37 - 2014-05-20 13:37 - 00855379 _____ () C:\Users\CodeX\Downloads\SecurityCheck.exe
2014-05-20 13:20 - 2014-05-20 13:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 13:19 - 2014-05-20 13:19 - 02347384 _____ (ESET) C:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
2014-05-20 13:13 - 2014-05-20 13:13 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64 (1).exe
2014-05-19 13:49 - 2014-05-19 13:49 - 00031411 _____ () C:\Users\CodeX\Downloads\Addition.txt
2014-05-19 13:48 - 2014-05-19 13:47 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:34 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:31 - 2014-04-12 11:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-19 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-19 13:29 - 2014-05-10 16:45 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-19 13:28 - 2014-05-14 20:08 - 00000000 ____D () C:\AdwCleaner
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:48 - 2014-03-11 15:31 - 00000000 ____D () C:\Program Files (x86)\GTA
2014-05-18 19:37 - 2014-05-10 08:45 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:36 - 2014-05-18 19:03 - 00000000 ___SD () C:\ComboFix
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:34 - 2014-05-18 19:32 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:16 - 2014-05-16 13:15 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:10 - 2014-01-02 17:11 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-16 13:02 - 2014-05-06 18:29 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-16 13:02 - 2014-01-03 19:34 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 13:01 - 2011-04-12 10:21 - 00000000 ____D () C:\Windows\CSC
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:10 - 2013-12-31 17:21 - 00000995 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-14 20:10 - 2013-12-31 17:18 - 00000000 ____D () C:\Users\CodeX
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:49 - 2014-01-02 12:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:49 - 2014-01-02 12:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 19:49 - 2014-01-02 12:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:38 - 2014-05-10 20:37 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 20:16 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 19:12 - 2014-01-01 19:25 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\UseNeXT
2014-05-10 17:57 - 2014-03-29 09:32 - 00000000 ____D () C:\Users\CodeX\Desktop\Steuerklopfer
2014-05-10 17:01 - 2014-05-10 17:00 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 14:18 - 2013-12-31 20:36 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\.minecraft
2014-05-10 14:15 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:35 - 2014-04-12 11:35 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-10 09:35 - 2014-04-12 11:35 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-10 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-08 21:29 - 2014-01-01 13:19 - 00000000 ____D () C:\Users\CodeX\Documents\Camtasia Studio
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 18:58 - 2014-05-06 17:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:41 - 2014-05-06 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:32 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-05-06 17:31 - 2013-12-31 17:52 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Google
2014-05-05 13:23 - 2014-01-15 17:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:42 - 2014-04-28 19:08 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-26 14:18 - 2014-04-12 11:30 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-25 11:59 - 2014-04-25 11:57 - 00000000 ____D () C:\Minecraft_Backup
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:42 - 2014-04-23 20:40 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 14:27 - 2014-04-08 19:25 - 00000000 __SHD () C:\Users\CodeX\Documents\MSDCSC
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:21 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-22 21:44 - 2014-04-12 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\psynetic
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Users\CodeX\AppData\Local\PokerStars.NET
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Program Files (x86)\PokerStars.NET
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Local\No23 Recorder
2014-04-22 21:41 - 2014-01-15 20:19 - 00000000 ____D () C:\Users\CodeX\Desktop\Nützliche Programme
2014-04-22 21:39 - 2014-04-15 17:45 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-04-22 21:38 - 2014-04-15 17:27 - 00000000 ____D () C:\Program Files (x86)\AV Voice Changer 8.0 Diamond
2014-04-22 21:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-22 21:37 - 2014-01-02 11:31 - 00000000 ____D () C:\Program Files (x86)\Mirillis
2014-04-22 21:37 - 2014-01-02 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-04-22 21:29 - 2013-12-31 17:21 - 00000000 ___RD () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-22 12:38 - 2013-12-31 21:09 - 00000000 __RSD () C:\Windows\SysWOW64\Flashplayer
2014-04-22 09:33 - 2005-03-31 18:59 - 05188397 ____H () C:\Users\CodeX\AppData\Roaming\CodeXlog.dat
2014-04-22 08:35 - 2014-04-11 21:35 - 00000000 ____D () C:\ProgramData\Origin

Some content of TEMP:
====================
C:\Users\CodeX\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2013-03-02 19:39] - [2013-03-02 19:39] - 0391680 ____A (Microsoft Corporation) 13CD6BA1F798A61AEE985E78D3644A1E

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2871296 ____A (Microsoft Corporation) 70D758D2DBE79757421017EE68143763

C:\Windows\SysWOW64\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2616320 ____A (Microsoft Corporation) B0846DB5BDAB92131529A58E627FCEB7

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 1008128 ____A (Microsoft Corporation) 7FB4D54B502C6CF2E35B8188FA4CC08C

C:\Windows\SysWOW64\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 0833024 ____A (Microsoft Corporation) 9B836EE76E3A99052EF6DEA52B41D1BE

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2013-03-02 20:07] - [2013-03-02 20:07] - 0512512 ____A (Microsoft Corporation) 83D5AD7CFDB1F9D42C3CD102B20FFA0A

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2013-03-02 19:56] - [2013-03-02 19:56] - 0296304 ____A (Microsoft Corporation) A56F2326CE33646CDA95E7A9E7163FFA



LastRegBack: 2014-05-11 12:39

==================== End Of Log ============================
--- --- ---


Addition:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-22 13:33:40
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET Smart Security 7.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{C7A772A4-73CF-EB06-172F-75C5F6C80AAC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.06.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Craften Terminal 3.4.5 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DarkComet RAT Remover version 1.0 (HKLM-x32\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Deponia (HKLM-x32\...\Steam App 214340) (Version:  - Daedalic Entertainment)
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dojotech Spotify Recorder (HKLM-x32\...\{D149DB2E-392E-48CC-8036-88BECC09C50A}) (Version: 3.2 - Dojotech Software)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.1 - Daedalic Entertainment)
Edna Bricht Aus 6.3 (HKLM-x32\...\{0D00CD3F-AEDC-45F1-A2DD-DADF74407D7B}_is1) (Version:  - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version:  - Turtle Entertainment GmbH)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.007 - HTC Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Lollipop (HKCU\...\lollipop_04101237) (Version:  - Lollipop Network, S.L.) <==== ATTENTION
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RoboForm 7-9-7-5 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-7-5 - Siber Systems)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Tunatic (HKLM-x32\...\Tunatic) (Version:  - )
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Restore Points  =========================

22-04-2014 19:35:41 Supprimé (EMCO EVALUATION PACKAGE) - DG
22-04-2014 19:36:59 TrueCrypt uninstallation
22-04-2014 19:37:38 Removed Advanced Archive Password Recovery
22-04-2014 19:39:23 Entfernt CrazyTalk
22-04-2014 19:43:02 No23 Recorder wird entfernt
06-05-2014 15:25:30 Installed Dojotech Spotify Recorder
06-05-2014 15:28:20 Removed Dojotech Spotify Recorder
06-05-2014 15:28:59 Installed Dojotech Spotify Recorder
06-05-2014 15:40:46 Installed Dojotech Spotify Recorder
14-05-2014 17:37:30 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde installiert.
16-05-2014 11:15:14 Revo Uninstaller's restore point - Youtube Downloader HD v. 2.9.9.13
18-05-2014 17:03:33 ComboFix created restore point

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05F4A343-9592-4156-A891-8A6074A0FB15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1F824E18-E1C1-4E5F-AE92-4E7A710B3F60} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {6991998A-AE4E-464A-A184-2C64254F2647} - System32\Tasks\{7A680034-4A98-48D7-81A9-FF3A869593C9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {735C8257-D086-4586-8E54-15FD2EBA3C7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: {793F1221-A7AE-404F-BE05-E96108756E24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {91392D79-87F8-4D01-BE2A-48002413C522} - System32\Tasks\SN.Booster-S-014941198 => c:\programdata\appready software\sn.booster\SN.Booster.exe
Task: {9ECA6AE5-B08B-4854-A4B6-49F8A1731DED} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {BB71E53C-A859-47CA-87B9-4136ABAFDFD6} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {D8F2F778-777E-4266-8C01-8633FE30BEB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F5C04EAB-1A3C-4478-A06F-65CE541348B8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 17:06 - 2013-12-06 17:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 23:18 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe
2014-04-12 23:18 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll
2011-03-31 17:08 - 2011-03-31 17:08 - 00080896 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-12-06 17:06 - 2013-12-06 17:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-01-10 14:44 - 2014-05-14 19:39 - 00598072 _____ () C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-02-10 13:40 - 2014-02-10 13:40 - 00412672 _____ () C:\Program Files (x86)\GTA\samp.exe
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2014-01-10 14:44 - 2014-05-14 19:39 - 36966968 _____ () C:\Users\CodeX\AppData\Roaming\Spotify\Data\libcef.dll
2014-01-10 14:44 - 2014-05-14 19:39 - 00886840 _____ () C:\Users\CodeX\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-01-10 14:44 - 2014-05-14 19:39 - 00108600 _____ () C:\Users\CodeX\AppData\Roaming\Spotify\Data\libegl.dll
2014-05-14 19:49 - 2014-05-14 19:49 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-22 18:22 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-02-15 21:43 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-02-15 21:43 - 2014-05-17 03:36 - 00756224 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 02198720 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-02-15 21:43 - 2014-05-21 19:39 - 01145536 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-02-15 21:43 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56839089

Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56839089

Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/22/2014 01:03:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ts3client_win64.exe, Version: 3.0.14.0, Zeitstempel: 0x53204a50
Name des fehlerhaften Moduls: Qt5Core.dll, Version: 5.2.1.0, Zeitstempel: 0x530f4ff6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000a5081
ID des fehlerhaften Prozesses: 0x16b0
Startzeit der fehlerhaften Anwendung: 0xts3client_win64.exe0
Pfad der fehlerhaften Anwendung: ts3client_win64.exe1
Pfad des fehlerhaften Moduls: ts3client_win64.exe2
Berichtskennung: ts3client_win64.exe3

Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56835595

Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56835595

Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56834596

Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56834596

Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (05/21/2014 07:05:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (05/21/2014 07:05:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.


Microsoft Office Sessions:
=========================
Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56839089

Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56839089

Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/22/2014 01:03:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ts3client_win64.exe3.0.14.053204a50Qt5Core.dll5.2.1.0530f4ff6c000000500000000000a508116b001cf7516f4f9abc4C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exeC:\Program Files\TeamSpeak 3 Client\Qt5Core.dllb4b30020-e1a0-11e3-b9a1-9b3590fd434f

Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56835595

Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56835595

Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56834596

Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56834596

Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


CodeIntegrity Errors:
===================================
  Date: 2014-05-19 13:30:07.528
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 13:30:07.262
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-16 13:02:21.123
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-16 13:02:20.858
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 20:12:22.450
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 20:12:22.200
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.762
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.481
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.870
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.652
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 37%
Total physical RAM: 7654.11 MB
Available physical RAM: 4805.15 MB
Total Pagefile: 15306.41 MB
Available Pagefile: 11997.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.61 GB) (Free:127.35 GB) NTFS
Drive d: () (Fixed) (Total:222.54 GB) (Free:215.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 753715F6)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Achja. Programme lassen sich nach neu installation immernoch nicht öffnen.

schrauber 23.05.2014 11:02
Zitat:
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
Was soll denn der Käse?......


Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop.
SystemLook (64 bit)
  • Doppelklicke auf die SystemLook_x64.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
    Code:
    :regfind
    Lollipop
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Zitat:
Achja. Programme lassen sich nach neu installation immernoch nicht öffnen.
Geht das genauer? Fehlermeldung?

NeonReflexe 23.05.2014 12:08
Dieser "Käse" ist soweit ich weiß nicht Illegal und wird auch von mir nicht benutzt. Ich habe eine gewisse arbeit bei der ich diese Sachen brauche.

Systemlook:
Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 13:06 on 23/05/2014 by CodeX
Administrator - Elevation successful

========== regfind ==========

Searching for "Lollipop"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\not active]
"lollipop_04101237"=""c:\users\codex\appdata\local\lollipop\lollipop_04101237.exe" lollipop_04101237"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
"DisplayName"="Lollipop"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
"Publisher"="Lollipop Network, S.L."
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Run\not active]
"lollipop_04101237"=""c:\users\codex\appdata\local\lollipop\lollipop_04101237.exe" lollipop_04101237"
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
"DisplayName"="Lollipop"
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
"Publisher"="Lollipop Network, S.L."

-= EOF =-
Fixlog:
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-23 13:07:57 Run:1
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
       
*****************

"C:\PROGRA~2\SN_X64~1.BOO" => Value Data removed successfully.
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV= ==> The Chrome "Settings" can be used to fix the entry.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.

==== End of Fixlog ====
Zu den Programmen..kein error. Einfach nur die nachricht "PROGRAMMNAME.exe funktioniert nicht mehr".

schrauber 24.05.2014 11:04
Zitat:
Dieser "Käse" ist soweit ich weiß nicht Illegal und wird auch von mir nicht benutzt. Ich habe eine gewisse arbeit bei der ich diese Sachen brauche.
Illegal is Grauzone, dass diese DOwnloads in den meisten Fällen verseucht sind ist Fakt.

Kopiere den Text in der Codebox in deinen Editor (z.B. Notepad) und speichere es unter dem Namen regfix.reg (bei Dateityp bitte "alle Dateien" wählen)

Code:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\not active]
"lollipop_04101237"=-
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Run\not active]
"lollipop_04101237"=-
[-HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
Starte die regfix.reg duch Doppelklick.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
c:\users\codex\appdata\local\lollipop

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Sollte jetzt weg sein.



Dann das hier:
http://www.trojaner-board.de/126216-...epair-aio.html

NeonReflexe 24.05.2014 12:45
Fixlog:
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-24 13:41:06 Run:2
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
c:\users\codex\appdata\local\lollipop
*****************

"c:\users\codex\appdata\local\lollipop" => File/Directory not found.

==== End of Fixlog ====
FRST:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by CodeX (administrator) on USER-PC on 24-05-2014 13:42:44
Running from C:\Users\CodeX\Downloads
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Spotify Ltd) C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Siber Systems Inc.) C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome-nm-host.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-05-14] (Google Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [109784 2014-05-20] (Siber Systems)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]

Chrome:
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-31]
CHR Extension: (YouTube) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-31]
CHR Extension: (Google-Suche) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-31]
CHR Extension: (AdBlock) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (Google Wallet) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-31]
CHR Extension: (YouTube Unblocker) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-14]
CHR Extension: (Google Mail) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-31]
CHR Extension: (RoboForm) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2014-05-24]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-05-20]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-12-31] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] ()
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-02] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-04-12] (<Turtle Entertainment>)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-11-13] (Anchorfree Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 DfSdkS;
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-24 13:01 - 2014-05-24 13:01 - 00187207 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_yuno.solutions cracked.rar
2014-05-24 07:38 - 2014-05-24 07:38 - 00375728 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_CSGOsoupbear.zip
2014-05-23 19:33 - 2014-05-23 19:33 - 00005353 _____ () C:\Users\CodeX\Downloads\bibanator-cs_go-gaming-config-2014.rar
2014-05-23 13:06 - 2014-05-23 13:06 - 00165376 _____ () C:\Users\CodeX\Downloads\SystemLook_x64.exe
2014-05-23 13:06 - 2014-05-23 13:06 - 00002776 _____ () C:\Users\CodeX\Downloads\SystemLook.txt
2014-05-22 13:55 - 2014-05-22 13:55 - 00001168 _____ () C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2014-05-22 13:55 - 2014-05-22 13:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-05-22 13:44 - 2014-05-22 13:48 - 256616296 _____ () C:\Users\CodeX\Downloads\camtasiade.exe
2014-05-21 21:16 - 2014-05-21 21:16 - 00375786 _____ () C:\Users\CodeX\Documents\ts3_clientui-win64-1394624943-2014-05-21 21_16_12.896150.dmp
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
2014-05-20 21:22 - 2014-05-20 21:22 - 00074329 _____ () C:\Users\CodeX\Downloads\astgen11.zip
2014-05-20 21:12 - 2014-05-20 21:12 - 00000071 _____ () C:\Users\CodeX\Desktop\GameOverlayUI.exe.log
2014-05-20 21:11 - 2014-05-20 21:11 - 00161381 _____ () C:\Users\CodeX\Downloads\blob2ini2blob.zip
2014-05-20 21:08 - 2014-05-20 21:22 - 00008501 _____ () C:\Users\CodeX\Desktop\blabla.html
2014-05-20 20:05 - 2014-05-20 20:05 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Users\CodeX\Documents\My RoboForm Data
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Siber Systems
2014-05-20 20:02 - 2014-05-20 20:02 - 16619392 _____ (Siber Systems) C:\Users\CodeX\Downloads\RoboForm-Setup.exe
2014-05-20 13:37 - 2014-05-20 13:37 - 00855379 _____ () C:\Users\CodeX\Downloads\SecurityCheck.exe
2014-05-20 13:20 - 2014-05-20 13:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 13:19 - 2014-05-20 13:19 - 02347384 _____ (ESET) C:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
2014-05-20 13:13 - 2014-05-20 13:13 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64 (1).exe
2014-05-19 13:49 - 2014-05-22 13:34 - 00037651 _____ () C:\Users\CodeX\Downloads\Addition.txt
2014-05-19 13:48 - 2014-05-24 13:42 - 00013246 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-19 13:47 - 2014-05-19 13:48 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:32 - 2014-05-18 19:34 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-18 19:03 - 2014-05-18 19:36 - 00000000 ___SD () C:\ComboFix
2014-05-16 13:18 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-16 13:18 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-16 13:18 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:15 - 2014-05-16 13:16 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-14 20:08 - 2014-05-19 13:28 - 00000000 ____D () C:\AdwCleaner
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:56 - 2014-05-24 13:42 - 00000000 ____D () C:\FRST
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:44 - 2014-05-19 13:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 19:43 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 19:43 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:37 - 2014-05-10 20:38 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:13 - 2014-05-21 19:54 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-21 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-21 19:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 17:00 - 2014-05-10 17:01 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-23 13:04 - 00000840 _____ () C:\Windows\setupact.log
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:45 - 2014-05-19 13:29 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-10 14:13 - 2014-05-24 13:03 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 14:13 - 2014-05-10 14:15 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 08:45 - 2014-05-18 19:37 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:29 - 2014-05-16 13:02 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:31 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 17:31 - 2014-05-06 17:32 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:30 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:29 - 2014-05-06 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:08 - 2014-04-28 19:42 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-25 11:57 - 2014-04-25 11:59 - 00000000 ____D () C:\Minecraft_Backup

==================== One Month Modified Files and Folders =======

2014-05-24 13:42 - 2014-05-19 13:48 - 00013246 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-24 13:42 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-24 13:41 - 2014-04-12 11:30 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-24 13:41 - 2014-04-12 11:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-24 13:22 - 2014-02-22 19:55 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\TS3Client
2014-05-24 13:16 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Spotify
2014-05-24 13:04 - 2013-12-31 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-24 13:03 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-24 13:02 - 2014-01-02 11:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\CrashDumps
2014-05-24 13:01 - 2014-05-24 13:01 - 00187207 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_yuno.solutions cracked.rar
2014-05-24 12:49 - 2014-01-02 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-24 07:46 - 2014-04-12 11:30 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-24 07:38 - 2014-05-24 07:38 - 00375728 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_CSGOsoupbear.zip
2014-05-23 19:33 - 2014-05-23 19:33 - 00005353 _____ () C:\Users\CodeX\Downloads\bibanator-cs_go-gaming-config-2014.rar
2014-05-23 18:58 - 2011-04-12 10:06 - 00765514 _____ () C:\Windows\system32\perfh007.dat
2014-05-23 18:58 - 2011-04-12 10:06 - 00174712 _____ () C:\Windows\system32\perfc007.dat
2014-05-23 18:58 - 2009-07-14 07:13 - 01806010 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-23 13:36 - 2014-04-12 11:30 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-23 13:36 - 2014-04-12 11:30 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-23 13:06 - 2014-05-23 13:06 - 00165376 _____ () C:\Users\CodeX\Downloads\SystemLook_x64.exe
2014-05-23 13:06 - 2014-05-23 13:06 - 00002776 _____ () C:\Users\CodeX\Downloads\SystemLook.txt
2014-05-23 13:04 - 2014-05-10 16:46 - 00000840 _____ () C:\Windows\setupact.log
2014-05-22 19:38 - 2013-12-31 17:09 - 01295096 _____ () C:\Windows\WindowsUpdate.log
2014-05-22 19:08 - 2013-12-31 18:54 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Skype
2014-05-22 13:55 - 2014-05-22 13:55 - 00001168 _____ () C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2014-05-22 13:55 - 2014-05-22 13:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-05-22 13:55 - 2014-01-01 13:19 - 00000000 ____D () C:\Users\CodeX\Documents\Camtasia Studio
2014-05-22 13:55 - 2014-01-01 13:19 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith
2014-05-22 13:48 - 2014-05-22 13:44 - 256616296 _____ () C:\Users\CodeX\Downloads\camtasiade.exe
2014-05-22 13:34 - 2014-05-19 13:49 - 00037651 _____ () C:\Users\CodeX\Downloads\Addition.txt
2014-05-21 21:16 - 2014-05-21 21:16 - 00375786 _____ () C:\Users\CodeX\Documents\ts3_clientui-win64-1394624943-2014-05-21 21_16_12.896150.dmp
2014-05-21 19:54 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-21 19:54 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-21 19:54 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
2014-05-20 21:22 - 2014-05-20 21:22 - 00074329 _____ () C:\Users\CodeX\Downloads\astgen11.zip
2014-05-20 21:22 - 2014-05-20 21:08 - 00008501 _____ () C:\Users\CodeX\Desktop\blabla.html
2014-05-20 21:12 - 2014-05-20 21:12 - 00000071 _____ () C:\Users\CodeX\Desktop\GameOverlayUI.exe.log
2014-05-20 21:11 - 2014-05-20 21:11 - 00161381 _____ () C:\Users\CodeX\Downloads\blob2ini2blob.zip
2014-05-20 20:20 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Spotify
2014-05-20 20:05 - 2014-05-20 20:05 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Users\CodeX\Documents\My RoboForm Data
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Siber Systems
2014-05-20 20:02 - 2014-05-20 20:02 - 16619392 _____ (Siber Systems) C:\Users\CodeX\Downloads\RoboForm-Setup.exe
2014-05-20 13:37 - 2014-05-20 13:37 - 00855379 _____ () C:\Users\CodeX\Downloads\SecurityCheck.exe
2014-05-20 13:20 - 2014-05-20 13:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 13:19 - 2014-05-20 13:19 - 02347384 _____ (ESET) C:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
2014-05-20 13:13 - 2014-05-20 13:13 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64 (1).exe
2014-05-19 13:48 - 2014-05-19 13:47 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:34 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-19 13:29 - 2014-05-10 16:45 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-19 13:28 - 2014-05-14 20:08 - 00000000 ____D () C:\AdwCleaner
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:48 - 2014-03-11 15:31 - 00000000 ____D () C:\Program Files (x86)\GTA
2014-05-18 19:37 - 2014-05-10 08:45 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:36 - 2014-05-18 19:03 - 00000000 ___SD () C:\ComboFix
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:34 - 2014-05-18 19:32 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:16 - 2014-05-16 13:15 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:10 - 2014-01-02 17:11 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-16 13:02 - 2014-05-06 18:29 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-16 13:02 - 2014-01-03 19:34 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 13:01 - 2011-04-12 10:21 - 00000000 ____D () C:\Windows\CSC
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:10 - 2013-12-31 17:21 - 00000995 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-14 20:10 - 2013-12-31 17:18 - 00000000 ____D () C:\Users\CodeX
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:49 - 2014-01-02 12:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:49 - 2014-01-02 12:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 19:49 - 2014-01-02 12:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:38 - 2014-05-10 20:37 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:12 - 2014-01-01 19:25 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\UseNeXT
2014-05-10 17:57 - 2014-03-29 09:32 - 00000000 ____D () C:\Users\CodeX\Desktop\Steuerklopfer
2014-05-10 17:01 - 2014-05-10 17:00 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 14:18 - 2013-12-31 20:36 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\.minecraft
2014-05-10 14:15 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:35 - 2014-04-12 11:35 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-10 09:35 - 2014-04-12 11:35 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-10 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 18:58 - 2014-05-06 17:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:41 - 2014-05-06 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:32 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-05-06 17:31 - 2013-12-31 17:52 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Google
2014-05-05 13:23 - 2014-01-15 17:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:42 - 2014-04-28 19:08 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-25 11:59 - 2014-04-25 11:57 - 00000000 ____D () C:\Minecraft_Backup

Some content of TEMP:
====================
C:\Users\CodeX\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2013-03-02 19:39] - [2013-03-02 19:39] - 0391680 ____A (Microsoft Corporation) 13CD6BA1F798A61AEE985E78D3644A1E

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2871296 ____A (Microsoft Corporation) 70D758D2DBE79757421017EE68143763

C:\Windows\SysWOW64\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2616320 ____A (Microsoft Corporation) B0846DB5BDAB92131529A58E627FCEB7

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 1008128 ____A (Microsoft Corporation) 7FB4D54B502C6CF2E35B8188FA4CC08C

C:\Windows\SysWOW64\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 0833024 ____A (Microsoft Corporation) 9B836EE76E3A99052EF6DEA52B41D1BE

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2013-03-02 20:07] - [2013-03-02 20:07] - 0512512 ____A (Microsoft Corporation) 83D5AD7CFDB1F9D42C3CD102B20FFA0A

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2013-03-02 19:56] - [2013-03-02 19:56] - 0296304 ____A (Microsoft Corporation) A56F2326CE33646CDA95E7A9E7163FFA



LastRegBack: 2014-05-23 15:29

==================== End Of Log ============================
--- --- ---


Addition:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-24 13:43:16
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET Smart Security 7.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Disabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{C7A772A4-73CF-EB06-172F-75C5F6C80AAC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.06.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Camtasia Studio 8 (HKLM-x32\...\{419CEBE1-36E9-4AB2-8586-D6213AE28621}) (Version: 8.4.0.1699 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Craften Terminal 3.4.5 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DarkComet RAT Remover version 1.0 (HKLM-x32\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Deponia (HKLM-x32\...\Steam App 214340) (Version:  - Daedalic Entertainment)
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dojotech Spotify Recorder (HKLM-x32\...\{D149DB2E-392E-48CC-8036-88BECC09C50A}) (Version: 3.2 - Dojotech Software)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.1 - Daedalic Entertainment)
Edna Bricht Aus 6.3 (HKLM-x32\...\{0D00CD3F-AEDC-45F1-A2DD-DADF74407D7B}_is1) (Version:  - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version:  - Turtle Entertainment GmbH)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.007 - HTC Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RoboForm 7-9-7-5 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-7-5 - Siber Systems)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Tunatic (HKLM-x32\...\Tunatic) (Version:  - )
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Restore Points  =========================

06-05-2014 15:25:30 Installed Dojotech Spotify Recorder
06-05-2014 15:28:20 Removed Dojotech Spotify Recorder
06-05-2014 15:28:59 Installed Dojotech Spotify Recorder
06-05-2014 15:40:46 Installed Dojotech Spotify Recorder
14-05-2014 17:37:30 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde installiert.
16-05-2014 11:15:14 Revo Uninstaller's restore point - Youtube Downloader HD v. 2.9.9.13
18-05-2014 17:03:33 ComboFix created restore point
22-05-2014 11:53:06 Camtasia Studio 8 wird installiert

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05F4A343-9592-4156-A891-8A6074A0FB15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1F824E18-E1C1-4E5F-AE92-4E7A710B3F60} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {6991998A-AE4E-464A-A184-2C64254F2647} - System32\Tasks\{7A680034-4A98-48D7-81A9-FF3A869593C9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {735C8257-D086-4586-8E54-15FD2EBA3C7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: {793F1221-A7AE-404F-BE05-E96108756E24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {91392D79-87F8-4D01-BE2A-48002413C522} - System32\Tasks\SN.Booster-S-014941198 => c:\programdata\appready software\sn.booster\SN.Booster.exe
Task: {9ECA6AE5-B08B-4854-A4B6-49F8A1731DED} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {BB71E53C-A859-47CA-87B9-4136ABAFDFD6} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {D8F2F778-777E-4266-8C01-8633FE30BEB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F5C04EAB-1A3C-4478-A06F-65CE541348B8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 17:06 - 2013-12-06 17:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 23:18 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe
2014-04-12 23:18 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll
2011-03-31 17:08 - 2011-03-31 17:08 - 00080896 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-12-06 17:06 - 2013-12-06 17:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-22 18:22 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-02-15 21:43 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-02-15 21:43 - 2014-05-17 03:36 - 00756224 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 02198720 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-02-15 21:43 - 2014-05-21 19:39 - 01145536 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-02-15 21:43 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/24/2014 01:02:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: csgo.exe, Version: 0.0.0.0, Zeitstempel: 0x53628ca7
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22379, Zeitstempel: 0x51da487d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e426
ID des fehlerhaften Prozesses: 0x1f44
Startzeit der fehlerhaften Anwendung: 0xcsgo.exe0
Pfad der fehlerhaften Anwendung: csgo.exe1
Pfad des fehlerhaften Moduls: csgo.exe2
Berichtskennung: csgo.exe3

Error: (05/24/2014 08:57:45 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1388

Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1388

Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/24/2014 08:16:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ts3client_win64.exe, Version: 3.0.14.0, Zeitstempel: 0x53204a50
Name des fehlerhaften Moduls: ts3client_win64.exe, Version: 3.0.14.0, Zeitstempel: 0x53204a50
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000002b8972
ID des fehlerhaften Prozesses: 0x1724
Startzeit der fehlerhaften Anwendung: 0xts3client_win64.exe0
Pfad der fehlerhaften Anwendung: ts3client_win64.exe1
Pfad des fehlerhaften Moduls: ts3client_win64.exe2
Berichtskennung: ts3client_win64.exe3

Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1623

Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1623

Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/24/2014 07:35:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 34044597


System errors:
=============
Error: (05/21/2014 07:05:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (05/21/2014 07:05:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.


Microsoft Office Sessions:
=========================
Error: (05/24/2014 01:02:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: csgo.exe0.0.0.053628ca7ntdll.dll6.1.7601.2237951da487dc00000050002e4261f4401cf77263d6f8937C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exeC:\Windows\SysWOW64\ntdll.dllea2adbe7-e332-11e3-b9a1-9b3590fd434f

Error: (05/24/2014 08:57:45 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe

Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1388

Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1388

Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/24/2014 08:16:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: ts3client_win64.exe3.0.14.053204a50ts3client_win64.exe3.0.14.053204a50c000000500000000002b8972172401cf7692f1acca9dC:\Program Files\TeamSpeak 3 Client\ts3client_win64.exeC:\Program Files\TeamSpeak 3 Client\ts3client_win64.exee1f73bdd-e30a-11e3-b9a1-9b3590fd434f

Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1623

Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1623

Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/24/2014 07:35:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 34044597


CodeIntegrity Errors:
===================================
  Date: 2014-05-19 13:30:07.528
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 13:30:07.262
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-16 13:02:21.123
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-16 13:02:20.858
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 20:12:22.450
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 20:12:22.200
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.762
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.481
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.870
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.652
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 26%
Total physical RAM: 7654.11 MB
Available physical RAM: 5643.43 MB
Total Pagefile: 15306.41 MB
Available Pagefile: 12815.06 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.61 GB) (Free:129.17 GB) NTFS
Drive d: () (Fixed) (Total:222.54 GB) (Free:215.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 753715F6)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 25.05.2014 06:50
Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:47 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131