Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Rechner sehr langsam nach Virenbefall (https://www.trojaner-board.de/161626-rechner-sehr-langsam-virenbefall.html)

Cyruz09 08.12.2014 11:18
Rechner sehr langsam nach Virenbefall
 
Hallo Community,

nach tagelangem suchen- und googlen bin ich bereits mehrfach auf dieses Forum gestoßen. Da ich bisher leider keine Lösung für mein Problem gefunden habe, wollte ich mich einfach mal direkt an einige Fachleute wenden. :)

Vor ca. einer Woche fiel mir beim Start meines Rechners jedes mal ein merkwürdiger Prozess im Task Manager mit dem Namen "Winsetupt.exe" auf, welcher pausenlos 100% der CPU Leistung für sich beanspruchte. Nach einigem hin- und her habe ich es dann doch geschafft diesen zu entfernen, trotzdem entstehen - gerade beim zocken - extreme Performanceprobleme. Wenn ich angenommen WoW spielen möchte fängt es nach kurzer Zeit extrem zu ruckeln und zu stocken an, was bei meiner Hardware schon mal überhaupt nicht sein kann, zudem hatte ich dieses Problem vorher nicht.

Im entsprechenden Forum von Blizzard habe ich bereits ein Thema eröffnet und um Hilfe zur Entfernung des Schädlings gebeten, dort lief es schließlich darauf hinaus, dass mein Rechner wohl mit folgendem Virus infiziert gewesen ist:

hxxp://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=9240137#none

Ich nutze Avast! und nach einem vollständigen Scan wurde der Virus als Win32:Malware-gen identifiziert. Natürlich habe ich diesen sofort entfernt und auch einige Registry Einträge für diesen gelöscht. Jetzt taucht der Prozess jedenfalls nicht mehr im Task Manager auf, trotzdem ist mein Rechner unter kleinster Belastung bereits stark am ruckeln.

Virenscans durch Avast! bringen keine Ergebnisse mehr, könnte mir möglicherweise jemand ein Programm empfehlen mit dem ich noch ein mal einen ausführlichen Scan durchführen kann?

Ich danke schon mal :)

cosinus 08.12.2014 11:30
Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Cyruz09 08.12.2014 12:23
Hier die FRST.txt:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2014 02
Ran by Christian (administrator) on CHRISTIAN-LP on 08-12-2014 12:18:23
Running from C:\Users\Christian\Downloads
Loaded Profile: Christian (Available profiles: Christian)
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\stacsv64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\AESTSr64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.5325\Battle.net.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2009-09-16] (IDT, Inc.)
HKLM\...\Run: [Connectify Hotspot] => C:\Program Files (x86)\Connectify\Connectify.exe [4305656 2014-10-15] (Connectify)
HKLM\...\Run: [Connectify Dispatch] => C:\Program Files (x86)\Connectify\DispatchUI.exe [2367224 2014-10-15] (Connectify)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-05] (AVAST Software)
Winlogon\Notify\WB: C:\Program Files (x86)\Stardock\MyColors\fast64.dll [X]
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\...\MountPoints2: E - E:\HTC_Sync_Manager_PC.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x93A2E0C001F5CF01
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-05]

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-31]
CHR Extension: (AdBlock) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-11-11]
CHR Extension: (Avast Online Security) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-05]
CHR Extension: (Google Wallet) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-31]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-05]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-05] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-05] (Avast Software)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2014-10-15] (Connectify) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\STacSV64.exe [240640 2009-09-16] (IDT, Inc.)
S2 fc67e7a0; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\DeltaFix\DeltaFix.dll",serv

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-05] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-05] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-05] ()
R1 cnnctfy3; C:\Windows\System32\DRIVERS\cnnctfy3.sys [42152 2014-12-07] (Connectify)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-05] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-08 12:18 - 2014-12-08 12:18 - 00010160 _____ () C:\Users\Christian\Downloads\FRST.txt
2014-12-08 12:18 - 2014-12-08 12:18 - 00000000 ____D () C:\FRST
2014-12-08 12:17 - 2014-12-08 12:18 - 02119680 _____ (Farbar) C:\Users\Christian\Downloads\FRST64.exe
2014-12-08 09:30 - 2014-12-08 09:30 - 00000197 _____ () C:\Windows\system32\2014-12-08-08-30-15.070-AvastVBoxSVC.exe-3872.log
2014-12-07 21:15 - 2014-12-07 21:15 - 00000197 _____ () C:\Windows\system32\2014-12-07-20-15-23.055-AvastVBoxSVC.exe-3792.log
2014-12-07 21:12 - 2014-12-08 09:27 - 00000112 _____ () C:\Windows\setupact.log
2014-12-07 21:12 - 2014-12-07 21:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-07 18:55 - 2014-12-07 18:58 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\JAM Software
2014-12-07 18:52 - 2014-12-07 18:54 - 14865289 _____ () C:\Users\Christian\Downloads\HeavyLoad_3.3.1.zip
2014-12-07 14:36 - 2014-12-07 14:37 - 00000197 _____ () C:\Windows\system32\2014-12-07-13-36-52.092-AvastVBoxSVC.exe-3608.log
2014-12-07 04:05 - 2014-12-07 04:05 - 00000197 _____ () C:\Windows\system32\2014-12-07-03-05-13.016-AvastVBoxSVC.exe-3000.log
2014-12-07 03:49 - 2014-12-07 03:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectify
2014-12-07 03:48 - 2014-12-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Connectify
2014-12-07 03:48 - 2014-12-07 03:48 - 00042152 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy3.sys
2014-12-07 03:47 - 2014-12-07 04:03 - 00000000 ____D () C:\ProgramData\Connectify
2014-12-07 03:46 - 2014-12-07 03:46 - 08969944 _____ (Connectify) C:\Users\Christian\Downloads\Connectify922Installer.exe
2014-12-06 21:02 - 2014-12-06 21:02 - 00000247 _____ () C:\Windows\system32\2014-12-06-20-02-30.051-aswFe.exe-1132.log
2014-12-06 20:57 - 2014-12-06 21:02 - 00000247 _____ () C:\Windows\system32\2014-12-06-19-57-37.034-aswFe.exe-5448.log
2014-12-06 20:57 - 2014-12-06 20:57 - 00000197 _____ () C:\Windows\system32\2014-12-06-19-57-34.006-AvastVBoxSVC.exe-4588.log
2014-12-06 14:49 - 2014-12-06 14:49 - 00417064 _____ () C:\Users\Christian\Downloads\DellSystemDetect.exe
2014-12-06 12:17 - 2014-12-06 12:18 - 00000197 _____ () C:\Windows\system32\2014-12-06-11-17-54.004-AvastVBoxSVC.exe-3420.log
2014-12-05 21:56 - 2014-12-05 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D
2014-12-05 21:56 - 2014-12-05 21:56 - 00000000 ____D () C:\Program Files (x86)\Geeks3D
2014-12-05 21:54 - 2014-12-05 21:55 - 05406799 _____ (Geeks3D ) C:\Users\Christian\Downloads\FurMark_1.15.0_Setup.exe
2014-12-05 21:48 - 2014-12-05 21:48 - 05378177 _____ () C:\Users\Christian\Downloads\p95v285.win64.zip
2014-12-05 21:45 - 2014-12-05 21:45 - 04179293 _____ (Lavalys, Inc. ) C:\Users\Christian\Downloads\everesthome220.exe
2014-12-05 21:45 - 2014-12-05 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
2014-12-05 21:45 - 2014-12-05 21:45 - 00000000 ____D () C:\Program Files (x86)\Lavalys
2014-12-05 21:42 - 2014-12-05 21:42 - 00000197 _____ () C:\Windows\system32\2014-12-05-20-42-06.027-AvastVBoxSVC.exe-3036.log
2014-12-05 21:13 - 2014-12-05 21:13 - 00000197 _____ () C:\Windows\system32\2014-12-05-20-13-42.076-AvastVBoxSVC.exe-3336.log
2014-12-05 19:17 - 2014-12-05 19:17 - 00001059 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-12-05 19:17 - 2014-12-05 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-12-05 17:56 - 2014-12-05 17:56 - 00000197 _____ () C:\Windows\system32\2014-12-05-16-56-03.094-AvastVBoxSVC.exe-3312.log
2014-12-05 17:50 - 2014-12-05 17:50 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-12-05 17:50 - 2014-12-05 17:50 - 00000000 ____D () C:\Intel
2014-12-05 17:50 - 2009-06-16 12:05 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-12-05 17:49 - 2014-12-05 17:49 - 02502624 _____ () C:\Users\Christian\Downloads\R232275.exe
2014-12-05 17:48 - 2014-12-05 17:49 - 04093264 _____ () C:\Users\Christian\Downloads\R293649.exe
2014-12-05 14:32 - 2014-12-05 14:32 - 00000247 _____ () C:\Windows\system32\2014-12-05-13-32-14.046-aswFe.exe-4552.log
2014-12-05 14:24 - 2014-12-05 14:32 - 00000247 _____ () C:\Windows\system32\2014-12-05-13-24-13.065-aswFe.exe-3964.log
2014-12-05 14:24 - 2014-12-05 14:24 - 00000197 _____ () C:\Windows\system32\2014-12-05-13-24-08.083-AvastVBoxSVC.exe-3356.log
2014-12-05 14:10 - 2014-12-05 14:10 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-05 14:10 - 2014-12-05 14:10 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-12-05 14:04 - 2014-12-05 14:10 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-12-05 14:04 - 2014-12-05 14:04 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\AVAST Software
2014-12-05 14:04 - 2014-12-05 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-05 14:03 - 2014-12-05 14:10 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-12-05 14:03 - 2014-12-05 14:03 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-05 14:02 - 2014-12-05 14:03 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-05 13:51 - 2014-12-05 13:51 - 05040384 _____ (AVAST Software) C:\Users\Christian\Downloads\avastclear.exe
2014-12-05 13:42 - 2014-12-05 13:49 - 131078000 _____ (AVAST Software) C:\Users\Christian\Downloads\avast_free_antivirus_setup.exe
2014-12-05 02:35 - 2014-10-31 23:26 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-05 02:32 - 2014-12-05 02:34 - 32507072 _____ (Microsoft Corporation) C:\Users\Christian\Downloads\Windows-KB890830-x64-V5.18.exe
2014-12-04 17:19 - 2014-12-04 17:35 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-04 17:19 - 2014-12-04 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-04 17:19 - 2014-12-04 17:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-04 17:19 - 2014-12-04 17:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-04 17:19 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-04 17:19 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-04 17:19 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-04 17:17 - 2014-12-04 17:19 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Christian\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-04 17:17 - 2014-12-04 17:17 - 00006338 _____ () C:\Users\Christian\Downloads\hijackthis.log
2014-12-04 11:44 - 2014-12-06 13:06 - 00001430 _____ () C:\Users\Christian\Desktop\World of Warcraft - Burning Crusade.lnk
2014-12-04 11:33 - 2014-12-04 14:19 - 00000000 ____D () C:\Program Files\WoW Burning Crusade
2014-12-04 01:34 - 2014-12-04 01:34 - 00007605 _____ () C:\Users\Christian\AppData\Local\Resmon.ResmonCfg
2014-12-02 21:35 - 2014-12-02 21:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-12-02 18:23 - 2014-12-02 18:52 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2014-12-02 18:23 - 2014-12-02 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2014-11-29 09:46 - 2014-11-29 09:46 - 00603648 ___SH () C:\Users\Christian\AppData\Roaming\winsetupt.exe
2014-11-19 02:45 - 2014-11-19 02:45 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-11-19 02:32 - 2014-11-19 02:32 - 00000000 ____D () C:\Users\Christian\AppData\Local\Avg2014
2014-11-19 02:22 - 2014-11-19 02:27 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-11-19 02:21 - 2014-11-19 02:45 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-11-19 02:19 - 2014-11-19 02:19 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-11-19 02:19 - 2014-11-19 02:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-19 02:19 - 2014-11-19 02:19 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-18 22:47 - 2014-11-18 22:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-18 22:47 - 2014-11-12 21:46 - 00615624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-11-18 22:43 - 2014-11-13 01:20 - 31893136 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 24557712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 19966344 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 18514616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 14032984 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 13213512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-18 22:43 - 2014-11-13 01:20 - 11397744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434475.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 01540424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434475.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 00964928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 00935240 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 00923792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 00900928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 20922512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 13944952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 11336432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 04292416 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 04011208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-17 18:13 - 2014-12-07 18:59 - 00000000 ____D () C:\Windows\Minidump
2014-11-14 15:47 - 2014-11-14 15:47 - 00000000 ____D () C:\Windows\Sun
2014-11-14 15:46 - 2014-11-14 15:46 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-11-14 15:46 - 2014-11-14 15:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-12 11:03 - 2009-07-14 02:28 - 20268032 ____N (Microsoft Corporation) C:\Windows\system32\imageres.dll
2014-11-12 11:02 - 2014-11-12 11:02 - 00000000 ____D () C:\Users\Public\Documents\Stardock
2014-11-12 11:02 - 2014-11-12 11:02 - 00000000 ____D () C:\Users\Christian\AppData\Local\PackageAware
2014-11-12 11:02 - 2014-11-12 11:02 - 00000000 ____D () C:\Program Files (x86)\Stardock
2014-11-12 11:02 - 2010-06-17 17:40 - 00053904 _____ () C:\Windows\system32\wbload.dll
2014-11-12 09:55 - 2014-12-08 11:43 - 00220672 ___SH () C:\Users\Christian\Desktop\Thumbs.db
2014-11-12 06:28 - 2014-11-12 06:28 - 00000000 ____D () C:\Users\Christian\Documents\my games
2014-11-12 06:28 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-11-12 06:28 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-11-12 06:28 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-11-12 06:28 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-11-12 06:28 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-11-12 06:27 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-11-12 06:27 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-11-12 06:27 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-11-12 06:27 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-11-12 06:27 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-11-12 06:27 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-11-12 06:27 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-11-12 06:27 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-11-12 06:27 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-11-12 06:27 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-11-12 06:27 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-11-12 06:27 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-11-12 06:27 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-11-12 06:27 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-11-12 06:27 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-11-12 06:27 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-11-12 06:27 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-11-12 06:27 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-11-12 06:27 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-11-12 06:27 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-11-12 06:27 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-11-12 06:27 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-11-12 06:27 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-11-12 06:27 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-11-12 06:27 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-11-12 06:27 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-11-12 06:27 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-11-12 06:27 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-11-12 06:27 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-11-12 06:27 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-11-12 06:27 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-11-12 06:27 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-11-12 06:27 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-11-12 06:27 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-11-12 06:27 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-11-12 06:27 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-11-12 06:27 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-11-12 06:27 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-11-12 06:27 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-11-12 06:27 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-11-12 06:27 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-11-12 06:27 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-11-12 06:27 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-11-12 06:27 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-11-12 06:27 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-11-12 06:27 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-11-12 06:27 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-11-12 06:27 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-11-12 06:27 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-11-12 06:27 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-11-12 06:27 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-11-12 06:27 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-11-12 06:27 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-11-12 06:27 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-11-12 06:27 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-11-12 06:27 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-11-12 06:27 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-11-12 06:27 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-11-12 06:27 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-11-12 06:27 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-11-12 06:27 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-11-12 06:27 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-11-12 06:27 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-11-12 06:27 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-11-12 06:27 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-11-12 06:27 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-11-12 06:27 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-11-12 06:27 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-11-12 06:27 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-11-12 06:27 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-11-12 06:27 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-11-12 06:27 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-11-12 06:27 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-11-12 06:27 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-11-12 06:27 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-11-12 06:27 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-11-12 06:27 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-11-12 06:27 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-11-12 06:27 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-11-12 06:27 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-11-12 06:27 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-11-12 06:27 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-11-12 06:27 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-11-12 06:27 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-11-12 06:27 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-11-12 06:27 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-11-12 06:27 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-11-12 06:27 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-11-12 06:27 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-11-12 06:27 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-11-12 06:27 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-11-12 06:27 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-11-12 06:27 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-11-12 06:27 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-11-12 06:27 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-11-11 19:54 - 2014-11-11 19:54 - 00000222 _____ () C:\Users\Christian\Desktop\Men of War Assault Squad 2.url
2014-11-11 18:23 - 2014-12-07 18:58 - 00000000 ____D () C:\Users\Christian\Desktop\Kram
2014-11-11 18:18 - 2014-11-11 18:18 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\WinRAR
2014-11-11 18:18 - 2014-11-11 18:18 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-11 18:18 - 2014-11-11 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-11 18:18 - 2014-11-11 18:18 - 00000000 ____D () C:\Program Files\WinRAR
2014-11-11 17:37 - 2014-11-11 17:37 - 00000000 ____D () C:\Program Files\Intel
2014-11-11 17:37 - 2009-06-29 15:31 - 00342552 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-11-11 17:37 - 2006-01-12 14:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din
2014-11-11 17:35 - 2009-06-22 11:05 - 00273072 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1k62x64.sys
2014-11-11 17:35 - 2009-06-03 17:38 - 00078016 _____ (Intel Corporation) C:\Windows\system32\NicInstK.dll
2014-11-11 17:35 - 2009-05-26 10:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-11-11 17:35 - 2009-04-21 17:39 - 00072288 _____ (Intel Corporation) C:\Windows\system32\e1kmsg.dll
2014-11-11 17:35 - 2009-03-07 02:08 - 00003127 _____ () C:\Windows\system32\e1k62x64.din
2014-11-11 17:24 - 2014-11-11 17:24 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-11-11 17:24 - 2009-09-16 03:49 - 12383232 _____ (IDT, Inc.) C:\Windows\system32\idtcpl64.cpl
2014-11-11 17:24 - 2009-09-16 03:49 - 03038720 _____ (IDT, Inc.) C:\Windows\system32\stlang64.dll
2014-11-11 17:24 - 2009-09-16 03:49 - 00605696 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
2014-11-11 17:24 - 2009-09-16 03:49 - 00564224 _____ (IDT, Inc.) C:\Windows\system32\idt64mp1.exe
2014-11-11 17:24 - 2009-08-11 19:35 - 00444928 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTEC64.dll
2014-11-11 17:24 - 2009-07-20 19:32 - 00162304 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTAC64.dll
2014-11-11 17:24 - 2009-05-13 03:28 - 00057856 _____ (Creative Technology Ltd.) C:\Windows\system32\ctppld64.dll
2014-11-11 17:24 - 2009-05-13 03:27 - 00652288 _____ (Creative Technology Ltd.) C:\Windows\system32\ctapo64.dll
2014-11-11 17:24 - 2009-05-13 03:25 - 00511488 _____ (Creative Technology Ltd.) C:\Windows\system32\ctapo32.dll
2014-11-11 17:24 - 2009-03-03 01:58 - 00068608 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTAR64.dll
2014-11-11 17:24 - 2009-03-03 01:47 - 00090624 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTCo64.dll
2014-11-11 17:23 - 2009-09-16 03:49 - 01433088 _____ (IDT, Inc.) C:\Windows\system32\stapo64.dll
2014-11-11 17:23 - 2009-09-16 03:49 - 00499712 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt64.sys
2014-11-11 17:23 - 2009-09-16 03:49 - 00431616 _____ (IDT, Inc.) C:\Windows\system32\stcplx64.dll
2014-11-11 17:23 - 2009-09-16 03:49 - 00209920 _____ (IDT, Inc.) C:\Windows\system32\st646241.dll
2014-11-11 17:22 - 2014-11-11 17:24 - 00000000 ____D () C:\Program Files\IDT
2014-11-11 17:22 - 2014-11-11 17:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-11 17:22 - 2014-11-11 17:22 - 00000000 ____D () C:\dell
2014-11-11 17:22 - 2009-05-13 03:25 - 00511488 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\ctapo32.dll
2014-11-11 17:05 - 2014-11-11 17:10 - 00000000 ____D () C:\AdwCleaner
2014-11-11 17:01 - 2014-11-11 17:01 - 00000000 ____D () C:\Program Files\AlienAutopsy
2014-11-11 14:07 - 2014-11-11 14:07 - 00001890 _____ () C:\Windows\diagwrn.xml
2014-11-11 14:07 - 2014-11-11 14:07 - 00001890 _____ () C:\Windows\diagerr.xml
2014-11-11 14:07 - 2014-11-11 14:07 - 00000000 ____D () C:\$WINDOWS.~BT

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-08 12:15 - 2014-10-31 15:22 - 00000000 ____D () C:\Users\Christian\AppData\Local\Battle.net
2014-12-08 12:13 - 2014-10-31 13:50 - 00351410 _____ () C:\Windows\WindowsUpdate.log
2014-12-08 09:35 - 2009-07-14 05:45 - 00019488 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-08 09:35 - 2009-07-14 05:45 - 00019488 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-08 09:32 - 2009-07-14 18:58 - 00698162 _____ () C:\Windows\system32\perfh007.dat
2014-12-08 09:32 - 2009-07-14 18:58 - 00148826 _____ () C:\Windows\system32\perfc007.dat
2014-12-08 09:32 - 2009-07-14 06:13 - 01616098 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-08 09:27 - 2014-10-31 14:03 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-08 09:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-08 01:12 - 2014-11-02 17:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\TS3Client
2014-12-07 21:30 - 2014-11-02 19:35 - 00000000 ____D () C:\Program Files\World of Warcraft
2014-12-07 19:57 - 2014-11-01 22:50 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Skype
2014-12-07 19:56 - 2014-11-02 16:53 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-07 18:59 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-07 14:36 - 2014-10-31 13:18 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-04 17:31 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-12-02 21:46 - 2014-10-31 15:21 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-11-26 16:03 - 2014-10-31 13:58 - 01589650 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-11-19 02:30 - 2014-10-31 13:46 - 00000000 ____D () C:\Windows\Panther
2014-11-18 22:47 - 2014-11-03 03:26 - 00000000 ____D () C:\temp
2014-11-18 22:47 - 2014-10-31 14:02 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-18 22:46 - 2014-10-31 13:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-18 22:43 - 2014-10-31 12:54 - 00000000 ____D () C:\Users\Christian\AppData\Local\VirtualStore
2014-11-13 01:20 - 2014-10-31 14:01 - 00074056 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-11-13 01:20 - 2014-10-31 14:01 - 00059592 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 20986592 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 16884632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 03262784 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 02874456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 00027094 _____ () C:\Windows\system32\nvinfo.pb
2014-11-12 22:56 - 2014-10-31 14:02 - 06897352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-12 22:56 - 2014-10-31 14:02 - 03534152 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-12 22:56 - 2014-10-31 14:02 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-12 22:56 - 2014-10-31 14:02 - 00934032 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-12 22:56 - 2014-10-31 14:02 - 00386368 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-12 22:56 - 2014-10-31 14:02 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-11 17:14 - 2014-10-31 12:57 - 00000000 ____D () C:\Users\Christian\AppData\Local\Deployment
2014-11-11 17:01 - 2014-11-03 03:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alienware
2014-11-11 11:29 - 2014-10-31 14:02 - 04100776 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-09 20:43 - 2014-10-31 12:54 - 00000000 ____D () C:\Users\Christian
2014-11-09 20:39 - 2014-10-31 14:06 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA
2014-11-09 20:37 - 2014-10-31 14:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-06 18:03

==================== End Of Log ============================
--- --- ---


Und hier die Addition.txt

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2014 02
Ran by Christian at 2014-12-08 12:19:14
Running from C:\Users\Christian\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Connectify (HKLM\...\Connectify) (Version: 9.2.2.33000 - Connectify)
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CrystalDiskInfo 6.2.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.2.1 - Crystal Dew World)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Geeks3D FurMark 1.15.0.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version:  - Geeks3D)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6241.0 - IDT)
Intel(R) Network Connections 14.2.100.0 (HKLM\...\PROSetDX) (Version: 14.2.100.0 - Intel)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Men of War: Assault Squad 2 (HKLM-x32\...\Steam App 244450) (Version:  - Digitalmindsoft)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
NVIDIA 3D Vision Treiber 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.75 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.75 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.104 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

31-10-2014 12:11:05 Windows Update
31-10-2014 12:14:28 avast! antivirus system restore point
31-10-2014 12:54:03 Windows Update
11-11-2014 16:35:27 Installed Intel(R) Network Connections.
12-11-2014 05:26:50 DirectX wurde installiert
12-11-2014 17:16:35 Installed System Requirements Lab Detection
12-11-2014 17:35:43 DirectX wurde installiert
12-11-2014 17:37:05 Microsoft Visual C++ 2005 Redistributable wird installiert
14-11-2014 14:41:37 Removed Java 8 Update 25
15-11-2014 18:03:36 Gerätetreiber-Paketinstallation: EuMus Design Audio-, Video- und Gamecontroller
19-11-2014 01:22:25 TuneUp Utilities 2014 wird installiert
26-11-2014 15:04:52 Gerätetreiber-Paketinstallation: Connectify Netzwerkdienst
02-12-2014 17:17:25 Removed System Requirements Lab CYRI
02-12-2014 17:18:07 Removed System Requirements Lab Detection
02-12-2014 17:19:50 TuneUp Utilities 2014 wird entfernt
02-12-2014 17:20:41 TuneUp Utilities 2014 (de-DE) wird entfernt
05-12-2014 12:50:22 avast! antivirus system restore point
05-12-2014 13:02:42 avast! antivirus system restore point
05-12-2014 13:08:48 avast! antivirus system restore point
07-12-2014 02:48:38 Gerätetreiber-Paketinstallation: Connectify Netzwerkdienst

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {B5D7B16F-3850-4C47-AC7A-8E23E71FA73A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-05] (AVAST Software)
Task: {C918BCF8-97AF-41E8-B9D2-95A49B7D9163} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation)
Task: {FFCAD33D-C3BD-46ED-A9DC-DF3EDBDC5357} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)

==================== Loaded Modules (whitelisted) =============

2014-10-31 14:02 - 2014-11-12 22:56 - 00118080 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-05 14:09 - 2014-12-05 14:09 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-12-05 14:09 - 2014-12-05 14:09 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-12-07 18:38 - 2014-12-07 18:38 - 02905088 _____ () C:\Program Files\AVAST Software\Avast\defs\14120702\algo.dll
2014-12-05 14:09 - 2014-12-05 14:09 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-12-05 14:09 - 2014-12-05 14:10 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-12-07 03:48 - 2014-10-15 20:44 - 00377080 _____ () C:\Program Files (x86)\Connectify\NativeLibrary.dll
2014-12-07 03:48 - 2014-10-15 20:44 - 00713976 _____ () C:\Program Files (x86)\Connectify\log4cplus.dll
2014-12-07 03:48 - 2014-10-15 20:44 - 03564280 _____ () C:\Program Files (x86)\Connectify\ConnectifyNAT.dll
2014-12-07 03:48 - 2014-10-15 20:44 - 00354040 _____ () C:\Program Files (x86)\Connectify\LibDispatch.dll
2014-10-31 13:02 - 2014-10-22 05:04 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\libglesv2.dll
2014-10-31 13:02 - 2014-10-22 05:04 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\libegl.dll
2014-10-31 13:02 - 2014-10-22 05:04 - 08910664 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\pdf.dll
2014-10-31 13:02 - 2014-10-22 05:04 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\libcef.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\libGLESv2.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00907264 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\platforms\qwindows.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\libEGL.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qgif.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00021504 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qico.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00205312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qjpeg.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00225792 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qmng.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00015872 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qsvg.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00312832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qtiff.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\qml\QtQuick.2\qtquick2plugin.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00054272 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\qml\QtQml\Models.2\modelsplugin.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-4252364099-3653914557-3492531405-500 - Administrator - Disabled)
Christian (S-1-5-21-4252364099-3653914557-3492531405-1001 - Administrator - Enabled) => C:\Users\Christian
Gast (S-1-5-21-4252364099-3653914557-3492531405-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-4252364099-3653914557-3492531405-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Intel(R) WiFi Link 5300 AGN
Description: Intel(R) WiFi Link 5300 AGN
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: NETwNs64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/05/2014 05:52:16 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.


Vorgang:
  Für die Sicherung initialisieren

Error: (12/05/2014 05:52:16 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.


Vorgang:
  Für die Sicherung initialisieren

Error: (12/05/2014 02:08:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary fyrosdwg.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (12/05/2014 02:06:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary fyrosdwg.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (12/05/2014 02:06:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary fyrosdwg.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (12/05/2014 02:02:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary fyrosdwg.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (12/04/2014 07:52:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Wow-64.exe, Version 6.0.3.19243 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1468

Startzeit: 01d00fe95a5dd759

Endzeit: 3395

Anwendungspfad: C:\Program Files\World of Warcraft\Wow-64.exe

Berichts-ID: b1579dbf-7be6-11e4-86db-0026b9639378

Error: (11/26/2014 04:00:37 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070003

Error: (11/26/2014 02:18:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 14.0.1000.143, Zeitstempel: 0x525897a2
Name des fehlerhaften Moduls: TuneUpUtilitiesService64.exe, Version: 14.0.1000.143, Zeitstempel: 0x525897a2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001c076
ID des fehlerhaften Prozesses: 0x4f8
Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0
Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1
Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2
Berichtskennung: TuneUpUtilitiesService64.exe3

Error: (11/19/2014 02:41:21 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (12/08/2014 09:40:25 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MÖMÖ-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2C559D1F-8951-4A81-B727-996A6AB8BBD8}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/08/2014 09:28:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst DeltaFix erreicht.

Error: (12/08/2014 06:15:09 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MÖMÖ-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2C559D1F-8951-4A81-B727-996A6AB8BBD8}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/07/2014 09:13:19 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst DeltaFix erreicht.

Error: (12/07/2014 03:21:19 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MÖMÖ-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2C559D1F-8951-4A81-B727-996A6AB8BBD8}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/07/2014 02:36:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst DeltaFix erreicht.

Error: (12/07/2014 04:03:09 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst DeltaFix erreicht.

Error: (12/06/2014 08:48:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst DeltaFix erreicht.

Error: (12/06/2014 06:53:50 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MÖMÖ-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2C559D1F-8951-4A81-B727-996A6AB8BBD8}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/06/2014 00:17:46 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst DeltaFix erreicht.


Microsoft Office Sessions:
=========================
Error: (12/05/2014 05:52:16 PM) (Source: VSS) (EventID: 8193) (User: )
Description: OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)0x8007045b, Der Computer wird heruntergefahren.


Vorgang:
  Für die Sicherung initialisieren

Error: (12/05/2014 05:52:16 PM) (Source: VSS) (EventID: 8193) (User: )
Description: OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)0x8007045b, Der Computer wird heruntergefahren.


Vorgang:
  Für die Sicherung initialisieren

Error: (12/05/2014 02:08:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary fyrosdwg.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (12/05/2014 02:06:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary fyrosdwg.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (12/05/2014 02:06:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary fyrosdwg.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (12/05/2014 02:02:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary fyrosdwg.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (12/04/2014 07:52:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Wow-64.exe6.0.3.19243146801d00fe95a5dd7593395C:\Program Files\World of Warcraft\Wow-64.exeb1579dbf-7be6-11e4-86db-0026b9639378

Error: (11/26/2014 04:00:37 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070003
mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089

Error: (11/26/2014 02:18:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: TuneUpUtilitiesService64.exe14.0.1000.143525897a2TuneUpUtilitiesService64.exe14.0.1000.143525897a2c0000005000000000001c0764f801d0097b71d9b6a9C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exeC:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exeb18d2d85-756e-11e4-bee2-0026b9639378

Error: (11/19/2014 02:41:21 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description:
Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


CodeIntegrity Errors:
===================================
  Date: 2014-12-05 21:46:06.091
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\CHRIST~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-05 21:46:06.086
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\CHRIST~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-05 21:46:05.794
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-05 21:46:05.789
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz
Percentage of memory in use: 68%
Total physical RAM: 4084.5 MB
Available physical RAM: 1280.54 MB
Total Pagefile: 8167.16 MB
Available Pagefile: 4852.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.79 GB) (Free:98.13 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 7DF6CF8B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus 08.12.2014 12:29
Was ist denn mit meiner Frage nach bisherigen Virenfunden und den Logs dazu?

Zitat:
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Wieso fehlen deinem System sämltiche Updates? :wtf:

Cyruz09 08.12.2014 12:37
Also ich benutze als Virenprogramm derzeit nur Avast!, wie schon erwähnt wird dieses nach einem vollständigen Scan nicht fündig. Den Malwarebytes Scan müsste ich jetzt noch fix durchlaufen lassen. :)

Wieso dem System die Updates fehlen kann ich nicht sagen, dessen war ich mir selbst gar nicht bewusst. Möglicherweise ist es, weil ich mein System vor einigen Wochen komplett neu aufgesetzt habe und das Betriebssystem über einen "Notfall" USB-Stick installiert habe, da mein Laufwerk leider nicht geht. Möglicherweise hat es damit etwas zu tun?

cosinus 08.12.2014 12:38
Dann bitte jetzt Combofix ausführen:

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Cyruz09 08.12.2014 12:56
Hier der ComboFix Log:
Der Malwarebytes Scan brachte übrigens keine Ergebnisse.

Code:
ComboFix 14-12-07.01 - Christian 08.12.2014  12:45:03.1.8 - x64
Microsoft Windows 7 Home Premium  6.1.7600.0.1252.49.1031.18.4085.1023 [GMT 1:00]
ausgeführt von:: c:\users\Christian\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\fML4jQoC.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\BZXWW.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\k3w.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\manifest.json
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\background.html
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\content.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\fML4jQoC.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\lsdb.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\manifest.json
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\background.html
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\BZXWW.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\content.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\lsdb.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\manifest.json
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\background.html
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\content.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\k3w.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\lsdb.js
c:\users\Christian\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\manifest.json
c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_goocmfhcffmefdcnljdiondphbikajik_0.localstorage
c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Christian\AppData\Roaming\winsetupt.exe
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\background.html
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\content.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\fML4jQoC.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\lsdb.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\manifest.json
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\background.html
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\BZXWW.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\content.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\lsdb.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\manifest.json
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\background.html
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\content.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\k3w.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\lsdb.js
c:\users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\fML4jQoC.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel\118\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\BZXWW.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\impladekfkcphmnjdchdnjijbpcpfngc\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\k3w.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdanfpdmceclbenkibphoffgkammdola\2.0\manifest.json
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-11-08 bis 2014-12-08  ))))))))))))))))))))))))))))))
.
.
2014-12-08 11:51 . 2014-12-08 11:51        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-12-08 11:18 . 2014-12-08 11:19        --------        d-----w-        C:\FRST
2014-12-07 17:55 . 2014-12-07 17:58        --------        d-----w-        c:\users\Christian\AppData\Roaming\JAM Software
2014-12-07 02:48 . 2014-12-07 02:48        42152        ----a-w-        c:\windows\system32\drivers\cnnctfy3.sys
2014-12-07 02:48 . 2014-12-07 17:59        --------        d-----w-        c:\program files (x86)\Connectify
2014-12-07 02:47 . 2014-12-07 03:03        --------        d-----w-        c:\programdata\Connectify
2014-12-05 20:56 . 2014-12-05 20:56        --------        d-----w-        c:\program files (x86)\Geeks3D
2014-12-05 20:45 . 2014-12-05 20:45        --------        d-----w-        c:\program files (x86)\Lavalys
2014-12-05 20:10 . 2014-12-05 20:10        --------        d-----w-        c:\windows\system32\Logs
2014-12-05 16:50 . 2014-12-05 16:50        --------        d-----w-        c:\program files (x86)\Intel
2014-12-05 16:50 . 2009-06-16 11:05        53248        ----a-w-        c:\windows\SysWow64\CSVer.dll
2014-12-05 16:50 . 2014-12-05 16:50        --------        d-----w-        C:\Intel
2014-12-05 13:10 . 2014-12-05 13:10        364512        ----a-w-        c:\windows\system32\aswBoot.exe
2014-12-05 13:10 . 2014-12-05 13:10        43152        ----a-w-        c:\windows\avastSS.scr
2014-12-05 13:04 . 2014-12-05 13:04        --------        d-----w-        c:\users\Christian\AppData\Roaming\AVAST Software
2014-12-05 13:03 . 2014-12-05 13:10        116728        ----a-w-        c:\windows\system32\drivers\aswStm.sys
2014-12-05 13:03 . 2014-12-05 13:10        267632        ----a-w-        c:\windows\system32\drivers\aswVmm.sys
2014-12-05 13:03 . 2014-12-05 13:10        65776        ----a-w-        c:\windows\system32\drivers\aswRvrt.sys
2014-12-05 13:03 . 2014-12-05 13:10        436624        ----a-w-        c:\windows\system32\drivers\aswSP.sys
2014-12-05 13:03 . 2014-12-05 13:10        83280        ----a-w-        c:\windows\system32\drivers\aswmonflt.sys
2014-12-05 13:03 . 2014-12-05 13:10        29208        ----a-w-        c:\windows\system32\drivers\aswHwid.sys
2014-12-05 13:03 . 2014-12-05 13:10        93568        ----a-w-        c:\windows\system32\drivers\aswRdr2.sys
2014-12-05 13:03 . 2014-12-05 13:10        1050432        ----a-w-        c:\windows\system32\drivers\aswsnx.sys
2014-12-05 13:03 . 2014-12-05 13:03        --------        d-----w-        c:\program files\AVAST Software
2014-12-05 13:02 . 2014-12-05 13:03        --------        d-----w-        c:\programdata\AVAST Software
2014-12-05 12:54 . 2014-12-05 12:54        --------        d-s---w-        c:\windows\SysWow64\Microsoft
2014-12-05 01:35 . 2014-10-31 22:26        103374192        ----a-w-        c:\windows\system32\MRT.exe
2014-12-04 16:19 . 2014-12-08 11:34        129752        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-12-04 16:19 . 2014-12-04 16:19        --------        d-----w-        c:\program files (x86)\Malwarebytes Anti-Malware
2014-12-04 16:19 . 2014-12-04 16:19        --------        d-----w-        c:\programdata\Malwarebytes
2014-12-04 16:19 . 2014-11-21 05:14        63704        ----a-w-        c:\windows\system32\drivers\mwac.sys
2014-12-04 16:19 . 2014-11-21 05:14        93400        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys
2014-12-04 16:19 . 2014-11-21 05:14        25816        ----a-w-        c:\windows\system32\drivers\mbam.sys
2014-12-04 10:33 . 2014-12-04 13:19        --------        d-----w-        c:\program files\WoW Burning Crusade
2014-12-02 17:23 . 2014-12-02 17:52        --------        d-----w-        c:\program files (x86)\CrystalDiskInfo
2014-11-19 01:32 . 2014-11-19 01:32        --------        d-----w-        c:\users\Christian\AppData\Local\Avg2014
2014-11-19 01:22 . 2014-11-19 01:27        --------        d-----w-        c:\programdata\TuneUp Software
2014-11-19 01:21 . 2014-11-19 01:45        --------        d-sh--w-        c:\programdata\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-11-19 01:21 . 2014-11-19 01:21        --------        d--h--w-        c:\programdata\Common Files
2014-11-19 01:19 . 2014-11-19 01:19        --------        d-----w-        c:\program files\CCleaner
2014-11-18 21:47 . 2014-11-12 20:46        615624        ----a-w-        c:\windows\SysWow64\nvStreaming.exe
2014-11-18 21:42 . 2014-11-13 00:20        4292416        ----a-w-        c:\windows\system32\nvcuvid.dll
2014-11-18 21:42 . 2014-11-13 00:20        4011208        ----a-w-        c:\windows\SysWow64\nvcuvid.dll
2014-11-18 21:42 . 2014-11-13 00:20        20922512        ----a-w-        c:\windows\system32\nvcompiler.dll
2014-11-18 21:42 . 2014-11-13 00:20        17259664        ----a-w-        c:\windows\SysWow64\nvcompiler.dll
2014-11-18 21:42 . 2014-11-13 00:20        13944952        ----a-w-        c:\windows\system32\nvcuda.dll
2014-11-18 21:42 . 2014-11-13 00:20        11336432        ----a-w-        c:\windows\SysWow64\nvcuda.dll
2014-11-15 18:02 . 2014-12-07 19:10        --------        d-----w-        c:\users\Christian\AppData\Local\Diagnostics
2014-11-14 14:47 . 2014-11-14 14:47        --------        d-----w-        c:\windows\Sun
2014-11-14 14:46 . 2014-11-14 14:46        --------        d-----w-        c:\program files (x86)\Common Files\Java
2014-11-14 14:46 . 2014-11-14 14:46        98216        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-11-12 17:38 . 2014-11-12 17:38        --------        d-----w-        c:\users\Christian\AppData\Roaming\The Creative Assembly
2014-11-12 10:03 . 2009-07-14 01:28        20268032        ------w-        c:\windows\system32\imageres.dll
2014-11-12 10:02 . 2010-06-17 16:40        53904        ----a-w-        c:\windows\system32\wbload.dll
2014-11-12 10:02 . 2014-11-12 10:02        --------        d-----w-        c:\program files (x86)\Stardock
2014-11-12 10:02 . 2014-11-12 10:02        --------        d-----w-        c:\users\Christian\AppData\Local\PackageAware
2014-11-12 05:27 . 2009-09-04 16:44        73544        ----a-w-        c:\windows\system32\XAPOFX1_3.dll
2014-11-11 17:18 . 2014-11-11 17:18        --------        d-----w-        c:\program files\WinRAR
2014-11-11 16:37 . 2014-11-11 16:37        --------        d-----w-        c:\program files\Intel
2014-11-11 16:37 . 2009-06-29 14:31        342552        ----a-w-        c:\windows\system32\PROUnstl.exe
2014-11-11 16:35 . 2009-06-03 16:38        78016        ----a-w-        c:\windows\system32\NicInstK.dll
2014-11-11 16:35 . 2009-06-22 10:05        273072        ----a-w-        c:\windows\system32\drivers\e1k62x64.sys
2014-11-11 16:35 . 2009-05-26 09:05        36472        ----a-w-        c:\windows\system32\NicCo36.dll
2014-11-11 16:35 . 2009-04-21 16:39        72288        ----a-w-        c:\windows\system32\e1kmsg.dll
2014-11-11 16:24 . 2009-09-16 02:49        605696        ------w-        c:\windows\system32\stapi64.dll
2014-11-11 16:24 . 2009-08-11 18:35        444928        ----a-w-        c:\windows\system32\AESTEC64.dll
2014-11-11 16:24 . 2009-07-20 18:32        162304        ----a-w-        c:\windows\system32\AESTAC64.dll
2014-11-11 16:24 . 2009-05-13 02:27        652288        ----a-w-        c:\windows\system32\ctapo64.dll
2014-11-11 16:22 . 2009-05-13 02:25        511488        ----a-w-        c:\windows\SysWow64\ctapo32.dll
2014-11-11 16:22 . 2014-11-11 16:22        --------        d--h--w-        c:\program files (x86)\InstallShield Installation Information
2014-11-11 16:22 . 2014-11-11 16:22        --------        d-----w-        C:\dell
2014-11-11 16:05 . 2014-11-11 16:10        --------        d-----w-        C:\AdwCleaner
2014-11-11 16:01 . 2014-11-11 16:01        --------        d-----w-        c:\program files\AlienAutopsy
2014-11-11 13:07 . 2014-11-11 13:07        --------        d-----w-        C:\$WINDOWS.~BT
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-11-13 00:20 . 2014-10-31 13:01        74056        ----a-w-        c:\windows\system32\OpenCL.dll
2014-11-13 00:20 . 2014-10-31 13:01        59592        ----a-w-        c:\windows\SysWow64\OpenCL.dll
2014-11-13 00:20 . 2014-10-31 12:53        3262784        ----a-w-        c:\windows\system32\nvapi64.dll
2014-11-13 00:20 . 2014-10-31 12:53        2874456        ----a-w-        c:\windows\SysWow64\nvapi.dll
2014-11-13 00:20 . 2014-10-31 12:53        20986592        ----a-w-        c:\windows\system32\nvwgf2umx.dll
2014-11-13 00:20 . 2014-10-31 12:53        16884632        ----a-w-        c:\windows\SysWow64\nvd3dum.dll
2014-11-12 21:56 . 2014-10-31 13:02        6897352        ----a-w-        c:\windows\system32\nvcpl.dll
2014-11-12 21:56 . 2014-10-31 13:02        3534152        ----a-w-        c:\windows\system32\nvsvc64.dll
2014-11-12 21:56 . 2014-10-31 13:02        934032        ----a-w-        c:\windows\system32\nvvsvc.exe
2014-11-12 21:56 . 2014-10-31 13:02        62608        ----a-w-        c:\windows\system32\nvshext.dll
2014-11-12 21:56 . 2014-10-31 13:02        386368        ----a-w-        c:\windows\system32\nvmctray.dll
2014-11-12 21:56 . 2014-10-31 13:02        2559808        ----a-w-        c:\windows\system32\nvsvcr.dll
2014-11-11 10:29 . 2014-10-31 13:02        4100776        ----a-w-        c:\windows\system32\nvcoproc.bin
2014-10-28 05:34 . 2014-10-31 12:11        275080        ------w-        c:\windows\system32\MpSigStub.exe
2014-10-20 02:37 . 2014-10-31 12:11        11627712        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{2FDC14A6-A18A-48F6-9BE9-F8F8FFC5E5B0}\mpengine.dll
2014-10-16 16:54 . 2014-10-31 12:53        38048        ----a-w-        c:\windows\system32\drivers\nvvad64v.sys
2014-10-16 16:54 . 2014-10-31 12:53        34976        ----a-w-        c:\windows\system32\nvaudcap64v.dll
2014-10-16 16:54 . 2014-10-31 12:53        32416        ----a-w-        c:\windows\SysWow64\nvaudcap32v.dll
2014-10-16 16:54 . 2014-10-31 12:53        31520        ----a-w-        c:\windows\system32\nvhdap64.dll
2014-10-16 16:54 . 2014-10-31 12:53        197408        ----a-w-        c:\windows\system32\drivers\nvhda64v.sys
2014-10-16 16:54 . 2014-10-31 12:53        1876296        ----a-w-        c:\windows\system32\nvdispco6434448.dll
2014-10-16 16:54 . 2014-10-31 12:53        1539272        ----a-w-        c:\windows\system32\nvdispgenco6434448.dll
2014-10-16 16:54 . 2014-10-31 12:53        1538880        ----a-w-        c:\windows\system32\nvhdagenco6420103.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-10-23 6501656]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-12-05 5226600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 fc67e7a0;DeltaFix;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series - Adaptertreiber für Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 cnnctfy3;Connectify LightWeight Filter;c:\windows\system32\DRIVERS\cnnctfy3.sys;c:\windows\SYSNATIVE\DRIVERS\cnnctfy3.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\AESTSr64.exe;c:\windows\SYSNATIVE\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\AESTSr64.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 Connectify;Connectify;c:\program files (x86)\Connectify\ConnectifyService.exe;c:\program files (x86)\Connectify\ConnectifyService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [x]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-10-31 12:02        1089352        ----a-w-        c:\program files (x86)\Google\Chrome\Application\38.0.2125.111\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-12-05 13:10        860984        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-10-16 2462536]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-09-16 487424]
"Connectify Hotspot"="c:\program files (x86)\Connectify\Connectify.exe" [2014-10-15 4305656]
"Connectify Dispatch"="c:\program files (x86)\Connectify\DispatchUI.exe" [2014-10-15 2367224]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
Trusted Zone: dell.com
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-12-08  12:53:27
ComboFix-quarantined-files.txt  2014-12-08 11:53
.
Vor Suchlauf: 12 Verzeichnis(se), 104.922.923.008 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 104.802.222.080 Bytes frei
.
- - End Of File - - FB9C89C8B1170C2F33EFE7437253FF99
A36C5E4F47E84449FF07ED3517B43A31

cosinus 08.12.2014 12:57
Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Cyruz09 08.12.2014 13:21
AdwCleaner:

Code:
# AdwCleaner v4.104 - Bericht erstellt am 08/12/2014 um 13:05:56
# Aktualisiert 05/12/2014 von Xplode
# Database : 2014-12-08.1 [Live]
# Betriebssystem : Windows 7 Home Premium  (64 bits)
# Benutzername : Christian - CHRISTIAN-LP
# Gestartet von : C:\Users\Christian\Downloads\AdwCleaner_4.104.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

[!] Ordner Gelöscht : C:\Users\Christian\AppData\Local\PackageAware

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v8.0.7600.16385


-\\ Google Chrome v38.0.2125.111


-\\ Comodo Dragon v


*************************

AdwCleaner[R0].txt - [9171 octets] - [11/11/2014 17:05:35]
AdwCleaner[R1].txt - [984 octets] - [08/12/2014 13:03:11]
AdwCleaner[S0].txt - [8482 octets] - [11/11/2014 17:10:12]
AdwCleaner[S1].txt - [910 octets] - [08/12/2014 13:05:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [969 octets] ##########
JRT:

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 7 Home Premium x64
Ran by Christian on 08.12.2014 at 13:08:51,40
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\Blizzard Entertainment.temp
Successfully deleted: [Folder] "C:\ProgramData\pcdr"
Successfully deleted: [Folder] "C:\Users\Christian\appdata\locallow\pcdr"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.12.2014 at 13:15:16,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Und die neuen FRST.txt...


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2014 02
Ran by Christian (administrator) on CHRISTIAN-LP on 08-12-2014 13:18:18
Running from C:\Users\Christian\Downloads
Loaded Profile: Christian (Available profiles: Christian)
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\stacsv64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\AESTSr64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngtool.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2009-09-16] (IDT, Inc.)
HKLM\...\Run: [Connectify Hotspot] => C:\Program Files (x86)\Connectify\Connectify.exe [4305656 2014-10-15] (Connectify)
HKLM\...\Run: [Connectify Dispatch] => C:\Program Files (x86)\Connectify\DispatchUI.exe [2367224 2014-10-15] (Connectify)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-05] (AVAST Software)
Winlogon\Notify\WB: C:\Program Files (x86)\Stardock\MyColors\fast64.dll [X]
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x93A2E0C001F5CF01
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-05]

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-31]
CHR Extension: (AdBlock) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-11-11]
CHR Extension: (Avast Online Security) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-05]
CHR Extension: (Google Wallet) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-31]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-05]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-05] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-05] (Avast Software)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2014-10-15] (Connectify) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_056607ee0106e5e8\STacSV64.exe [240640 2009-09-16] (IDT, Inc.)
S2 fc67e7a0; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\DeltaFix\DeltaFix.dll",serv

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-05] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-05] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-05] ()
R1 cnnctfy3; C:\Windows\System32\DRIVERS\cnnctfy3.sys [42152 2014-12-07] (Connectify)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-05] (Avast Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-08 13:17 - 2014-12-08 13:17 - 00000247 _____ () C:\Windows\system32\2014-12-08-12-17-57.074-aswFe.exe-1732.log
2014-12-08 13:17 - 2014-12-08 13:17 - 00000197 _____ () C:\Windows\system32\2014-12-08-12-17-53.050-AvastVBoxSVC.exe-5308.log
2014-12-08 13:15 - 2014-12-08 13:15 - 00000835 _____ () C:\Users\Christian\Desktop\JRT.txt
2014-12-08 13:08 - 2014-12-08 13:08 - 00000000 ____D () C:\Windows\ERUNT
2014-12-08 13:07 - 2014-12-08 13:07 - 00000744 _____ () C:\Windows\PFRO.log
2014-12-08 13:03 - 2014-12-08 13:03 - 00000055 _____ () C:\AdwCleanerDebug.txt
2014-12-08 13:02 - 2014-12-08 13:02 - 02153472 _____ () C:\Users\Christian\Downloads\AdwCleaner_4.104.exe
2014-12-08 13:02 - 2014-12-08 13:02 - 01707646 _____ (Thisisu) C:\Users\Christian\Downloads\JRT.exe
2014-12-08 12:53 - 2014-12-08 12:53 - 00024782 _____ () C:\ComboFix.txt
2014-12-08 12:42 - 2014-12-08 12:53 - 00000000 ____D () C:\Qoobox
2014-12-08 12:42 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-12-08 12:42 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-12-08 12:42 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-12-08 12:42 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-12-08 12:42 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-12-08 12:42 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-12-08 12:42 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-12-08 12:42 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-12-08 12:41 - 2014-12-08 12:52 - 00000000 ____D () C:\Windows\erdnt
2014-12-08 12:40 - 2014-12-08 12:41 - 05600430 ____R (Swearware) C:\Users\Christian\Downloads\ComboFix.exe
2014-12-08 12:19 - 2014-12-08 12:19 - 00024668 _____ () C:\Users\Christian\Downloads\Addition.txt
2014-12-08 12:18 - 2014-12-08 13:18 - 00010391 _____ () C:\Users\Christian\Downloads\FRST.txt
2014-12-08 12:18 - 2014-12-08 13:18 - 00000000 ____D () C:\FRST
2014-12-08 12:17 - 2014-12-08 12:18 - 02119680 _____ (Farbar) C:\Users\Christian\Downloads\FRST64.exe
2014-12-08 09:30 - 2014-12-08 09:30 - 00000197 _____ () C:\Windows\system32\2014-12-08-08-30-15.070-AvastVBoxSVC.exe-3872.log
2014-12-07 21:15 - 2014-12-07 21:15 - 00000197 _____ () C:\Windows\system32\2014-12-07-20-15-23.055-AvastVBoxSVC.exe-3792.log
2014-12-07 21:12 - 2014-12-08 13:07 - 00000168 _____ () C:\Windows\setupact.log
2014-12-07 21:12 - 2014-12-07 21:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-07 18:55 - 2014-12-07 18:58 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\JAM Software
2014-12-07 18:52 - 2014-12-07 18:54 - 14865289 _____ () C:\Users\Christian\Downloads\HeavyLoad_3.3.1.zip
2014-12-07 14:36 - 2014-12-07 14:37 - 00000197 _____ () C:\Windows\system32\2014-12-07-13-36-52.092-AvastVBoxSVC.exe-3608.log
2014-12-07 04:05 - 2014-12-07 04:05 - 00000197 _____ () C:\Windows\system32\2014-12-07-03-05-13.016-AvastVBoxSVC.exe-3000.log
2014-12-07 03:49 - 2014-12-07 03:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectify
2014-12-07 03:48 - 2014-12-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Connectify
2014-12-07 03:48 - 2014-12-07 03:48 - 00042152 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy3.sys
2014-12-07 03:47 - 2014-12-07 04:03 - 00000000 ____D () C:\ProgramData\Connectify
2014-12-07 03:46 - 2014-12-07 03:46 - 08969944 _____ (Connectify) C:\Users\Christian\Downloads\Connectify922Installer.exe
2014-12-06 21:02 - 2014-12-06 21:02 - 00000247 _____ () C:\Windows\system32\2014-12-06-20-02-30.051-aswFe.exe-1132.log
2014-12-06 20:57 - 2014-12-06 21:02 - 00000247 _____ () C:\Windows\system32\2014-12-06-19-57-37.034-aswFe.exe-5448.log
2014-12-06 20:57 - 2014-12-06 20:57 - 00000197 _____ () C:\Windows\system32\2014-12-06-19-57-34.006-AvastVBoxSVC.exe-4588.log
2014-12-06 14:49 - 2014-12-06 14:49 - 00417064 _____ () C:\Users\Christian\Downloads\DellSystemDetect.exe
2014-12-06 12:17 - 2014-12-06 12:18 - 00000197 _____ () C:\Windows\system32\2014-12-06-11-17-54.004-AvastVBoxSVC.exe-3420.log
2014-12-05 21:56 - 2014-12-05 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D
2014-12-05 21:56 - 2014-12-05 21:56 - 00000000 ____D () C:\Program Files (x86)\Geeks3D
2014-12-05 21:54 - 2014-12-05 21:55 - 05406799 _____ (Geeks3D ) C:\Users\Christian\Downloads\FurMark_1.15.0_Setup.exe
2014-12-05 21:48 - 2014-12-05 21:48 - 05378177 _____ () C:\Users\Christian\Downloads\p95v285.win64.zip
2014-12-05 21:45 - 2014-12-05 21:45 - 04179293 _____ (Lavalys, Inc. ) C:\Users\Christian\Downloads\everesthome220.exe
2014-12-05 21:45 - 2014-12-05 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
2014-12-05 21:45 - 2014-12-05 21:45 - 00000000 ____D () C:\Program Files (x86)\Lavalys
2014-12-05 21:42 - 2014-12-05 21:42 - 00000197 _____ () C:\Windows\system32\2014-12-05-20-42-06.027-AvastVBoxSVC.exe-3036.log
2014-12-05 21:13 - 2014-12-05 21:13 - 00000197 _____ () C:\Windows\system32\2014-12-05-20-13-42.076-AvastVBoxSVC.exe-3336.log
2014-12-05 19:17 - 2014-12-05 19:17 - 00001059 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-12-05 19:17 - 2014-12-05 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-12-05 17:56 - 2014-12-05 17:56 - 00000197 _____ () C:\Windows\system32\2014-12-05-16-56-03.094-AvastVBoxSVC.exe-3312.log
2014-12-05 17:50 - 2014-12-05 17:50 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-12-05 17:50 - 2014-12-05 17:50 - 00000000 ____D () C:\Intel
2014-12-05 17:50 - 2009-06-16 12:05 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-12-05 17:49 - 2014-12-05 17:49 - 02502624 _____ () C:\Users\Christian\Downloads\R232275.exe
2014-12-05 17:48 - 2014-12-05 17:49 - 04093264 _____ () C:\Users\Christian\Downloads\R293649.exe
2014-12-05 14:32 - 2014-12-05 14:32 - 00000247 _____ () C:\Windows\system32\2014-12-05-13-32-14.046-aswFe.exe-4552.log
2014-12-05 14:24 - 2014-12-05 14:32 - 00000247 _____ () C:\Windows\system32\2014-12-05-13-24-13.065-aswFe.exe-3964.log
2014-12-05 14:24 - 2014-12-05 14:24 - 00000197 _____ () C:\Windows\system32\2014-12-05-13-24-08.083-AvastVBoxSVC.exe-3356.log
2014-12-05 14:10 - 2014-12-05 14:10 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-05 14:10 - 2014-12-05 14:10 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-12-05 14:04 - 2014-12-05 14:10 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-12-05 14:04 - 2014-12-05 14:04 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\AVAST Software
2014-12-05 14:04 - 2014-12-05 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-05 14:03 - 2014-12-05 14:10 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-12-05 14:03 - 2014-12-05 14:10 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-12-05 14:03 - 2014-12-05 14:03 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-05 14:02 - 2014-12-05 14:03 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-05 13:51 - 2014-12-05 13:51 - 05040384 _____ (AVAST Software) C:\Users\Christian\Downloads\avastclear.exe
2014-12-05 13:42 - 2014-12-05 13:49 - 131078000 _____ (AVAST Software) C:\Users\Christian\Downloads\avast_free_antivirus_setup.exe
2014-12-05 02:35 - 2014-10-31 23:26 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-05 02:32 - 2014-12-05 02:34 - 32507072 _____ (Microsoft Corporation) C:\Users\Christian\Downloads\Windows-KB890830-x64-V5.18.exe
2014-12-04 17:19 - 2014-12-08 12:34 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-04 17:19 - 2014-12-04 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-04 17:19 - 2014-12-04 17:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-04 17:19 - 2014-12-04 17:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-04 17:19 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-04 17:19 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-04 17:19 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-04 17:17 - 2014-12-04 17:19 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Christian\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-04 17:17 - 2014-12-04 17:17 - 00006338 _____ () C:\Users\Christian\Downloads\hijackthis.log
2014-12-04 11:44 - 2014-12-06 13:06 - 00001430 _____ () C:\Users\Christian\Desktop\World of Warcraft - Burning Crusade.lnk
2014-12-04 11:33 - 2014-12-04 14:19 - 00000000 ____D () C:\Program Files\WoW Burning Crusade
2014-12-04 01:34 - 2014-12-04 01:34 - 00007605 _____ () C:\Users\Christian\AppData\Local\Resmon.ResmonCfg
2014-12-02 21:35 - 2014-12-02 21:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-12-02 18:23 - 2014-12-02 18:52 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2014-12-02 18:23 - 2014-12-02 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2014-11-19 02:45 - 2014-11-19 02:45 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-11-19 02:32 - 2014-11-19 02:32 - 00000000 ____D () C:\Users\Christian\AppData\Local\Avg2014
2014-11-19 02:22 - 2014-11-19 02:27 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-11-19 02:21 - 2014-11-19 02:45 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-11-19 02:19 - 2014-11-19 02:19 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-11-19 02:19 - 2014-11-19 02:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-19 02:19 - 2014-11-19 02:19 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-18 22:47 - 2014-11-18 22:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-18 22:47 - 2014-11-12 21:46 - 00615624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-11-18 22:43 - 2014-11-13 01:20 - 31893136 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 24557712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 19966344 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 18514616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 14032984 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 13213512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-18 22:43 - 2014-11-13 01:20 - 11397744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434475.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 01540424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434475.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 00964928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 00935240 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 00923792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-18 22:43 - 2014-11-13 01:20 - 00900928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 20922512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 13944952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 11336432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 04292416 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-18 22:42 - 2014-11-13 01:20 - 04011208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-17 18:13 - 2014-12-07 18:59 - 00000000 ____D () C:\Windows\Minidump
2014-11-14 15:47 - 2014-11-14 15:47 - 00000000 ____D () C:\Windows\Sun
2014-11-14 15:46 - 2014-11-14 15:46 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-11-14 15:46 - 2014-11-14 15:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-12 11:03 - 2009-07-14 02:28 - 20268032 ____N (Microsoft Corporation) C:\Windows\system32\imageres.dll
2014-11-12 11:02 - 2014-11-12 11:02 - 00000000 ____D () C:\Users\Public\Documents\Stardock
2014-11-12 11:02 - 2014-11-12 11:02 - 00000000 ____D () C:\Program Files (x86)\Stardock
2014-11-12 11:02 - 2010-06-17 17:40 - 00053904 _____ () C:\Windows\system32\wbload.dll
2014-11-12 09:55 - 2014-12-08 11:43 - 00220672 ___SH () C:\Users\Christian\Desktop\Thumbs.db
2014-11-12 06:28 - 2014-11-12 06:28 - 00000000 ____D () C:\Users\Christian\Documents\my games
2014-11-12 06:28 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-11-12 06:28 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-12 06:28 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-11-12 06:28 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-11-12 06:28 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-11-12 06:28 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-11-12 06:28 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-11-12 06:28 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-11-12 06:28 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-11-12 06:28 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-11-12 06:27 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-11-12 06:27 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-11-12 06:27 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-11-12 06:27 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-11-12 06:27 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-11-12 06:27 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-11-12 06:27 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-11-12 06:27 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-11-12 06:27 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-11-12 06:27 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-11-12 06:27 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-11-12 06:27 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-11-12 06:27 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-11-12 06:27 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-11-12 06:27 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-11-12 06:27 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-11-12 06:27 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-11-12 06:27 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-11-12 06:27 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-11-12 06:27 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-11-12 06:27 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-11-12 06:27 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-11-12 06:27 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-11-12 06:27 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-11-12 06:27 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-11-12 06:27 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-11-12 06:27 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-11-12 06:27 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-11-12 06:27 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-11-12 06:27 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-11-12 06:27 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-11-12 06:27 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-11-12 06:27 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-11-12 06:27 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-11-12 06:27 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-11-12 06:27 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-11-12 06:27 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-11-12 06:27 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-11-12 06:27 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-11-12 06:27 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-11-12 06:27 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-11-12 06:27 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-11-12 06:27 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-11-12 06:27 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-11-12 06:27 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-11-12 06:27 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-11-12 06:27 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-11-12 06:27 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-11-12 06:27 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-11-12 06:27 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-11-12 06:27 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-11-12 06:27 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-11-12 06:27 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-11-12 06:27 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-11-12 06:27 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-11-12 06:27 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-11-12 06:27 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-11-12 06:27 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-11-12 06:27 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-11-12 06:27 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-11-12 06:27 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-11-12 06:27 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-11-12 06:27 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-11-12 06:27 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-11-12 06:27 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-11-12 06:27 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-11-12 06:27 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-11-12 06:27 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-11-12 06:27 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-11-12 06:27 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-11-12 06:27 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-11-12 06:27 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-11-12 06:27 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-11-12 06:27 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-11-12 06:27 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-11-12 06:27 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-11-12 06:27 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-11-12 06:27 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-11-12 06:27 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-11-12 06:27 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-11-12 06:27 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-11-12 06:27 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-11-12 06:27 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-11-12 06:27 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-11-12 06:27 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-11-12 06:27 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-11-12 06:27 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-11-12 06:27 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-11-12 06:27 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-11-12 06:27 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-11-12 06:27 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-11-12 06:27 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-11-12 06:27 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-11-12 06:27 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-11-12 06:27 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-11-12 06:27 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-11-12 06:27 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-11-12 06:27 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-11-12 06:27 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-11-12 06:27 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-11-12 06:27 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-11-12 06:27 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-11-11 19:54 - 2014-11-11 19:54 - 00000222 _____ () C:\Users\Christian\Desktop\Men of War Assault Squad 2.url
2014-11-11 18:23 - 2014-12-07 18:58 - 00000000 ____D () C:\Users\Christian\Desktop\Kram
2014-11-11 18:18 - 2014-11-11 18:18 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\WinRAR
2014-11-11 18:18 - 2014-11-11 18:18 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-11 18:18 - 2014-11-11 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-11 18:18 - 2014-11-11 18:18 - 00000000 ____D () C:\Program Files\WinRAR
2014-11-11 17:37 - 2014-11-11 17:37 - 00000000 ____D () C:\Program Files\Intel
2014-11-11 17:37 - 2009-06-29 15:31 - 00342552 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-11-11 17:37 - 2006-01-12 14:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din
2014-11-11 17:35 - 2009-06-22 11:05 - 00273072 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1k62x64.sys
2014-11-11 17:35 - 2009-06-03 17:38 - 00078016 _____ (Intel Corporation) C:\Windows\system32\NicInstK.dll
2014-11-11 17:35 - 2009-05-26 10:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-11-11 17:35 - 2009-04-21 17:39 - 00072288 _____ (Intel Corporation) C:\Windows\system32\e1kmsg.dll
2014-11-11 17:35 - 2009-03-07 02:08 - 00003127 _____ () C:\Windows\system32\e1k62x64.din
2014-11-11 17:24 - 2014-11-11 17:24 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-11-11 17:24 - 2009-09-16 03:49 - 12383232 _____ (IDT, Inc.) C:\Windows\system32\idtcpl64.cpl
2014-11-11 17:24 - 2009-09-16 03:49 - 03038720 _____ (IDT, Inc.) C:\Windows\system32\stlang64.dll
2014-11-11 17:24 - 2009-09-16 03:49 - 00605696 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
2014-11-11 17:24 - 2009-09-16 03:49 - 00564224 _____ (IDT, Inc.) C:\Windows\system32\idt64mp1.exe
2014-11-11 17:24 - 2009-08-11 19:35 - 00444928 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTEC64.dll
2014-11-11 17:24 - 2009-07-20 19:32 - 00162304 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTAC64.dll
2014-11-11 17:24 - 2009-05-13 03:28 - 00057856 _____ (Creative Technology Ltd.) C:\Windows\system32\ctppld64.dll
2014-11-11 17:24 - 2009-05-13 03:27 - 00652288 _____ (Creative Technology Ltd.) C:\Windows\system32\ctapo64.dll
2014-11-11 17:24 - 2009-05-13 03:25 - 00511488 _____ (Creative Technology Ltd.) C:\Windows\system32\ctapo32.dll
2014-11-11 17:24 - 2009-03-03 01:58 - 00068608 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTAR64.dll
2014-11-11 17:24 - 2009-03-03 01:47 - 00090624 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTCo64.dll
2014-11-11 17:23 - 2009-09-16 03:49 - 01433088 _____ (IDT, Inc.) C:\Windows\system32\stapo64.dll
2014-11-11 17:23 - 2009-09-16 03:49 - 00499712 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt64.sys
2014-11-11 17:23 - 2009-09-16 03:49 - 00431616 _____ (IDT, Inc.) C:\Windows\system32\stcplx64.dll
2014-11-11 17:23 - 2009-09-16 03:49 - 00209920 _____ (IDT, Inc.) C:\Windows\system32\st646241.dll
2014-11-11 17:22 - 2014-11-11 17:24 - 00000000 ____D () C:\Program Files\IDT
2014-11-11 17:22 - 2014-11-11 17:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-11 17:22 - 2014-11-11 17:22 - 00000000 ____D () C:\dell
2014-11-11 17:22 - 2009-05-13 03:25 - 00511488 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\ctapo32.dll
2014-11-11 17:05 - 2014-12-08 13:05 - 00000000 ____D () C:\AdwCleaner
2014-11-11 17:01 - 2014-11-11 17:01 - 00000000 ____D () C:\Program Files\AlienAutopsy
2014-11-11 14:07 - 2014-11-11 14:07 - 00001890 _____ () C:\Windows\diagwrn.xml
2014-11-11 14:07 - 2014-11-11 14:07 - 00001890 _____ () C:\Windows\diagerr.xml
2014-11-11 14:07 - 2014-11-11 14:07 - 00000000 ____D () C:\$WINDOWS.~BT

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-08 13:14 - 2009-07-14 18:58 - 00698162 _____ () C:\Windows\system32\perfh007.dat
2014-12-08 13:14 - 2009-07-14 18:58 - 00148826 _____ () C:\Windows\system32\perfc007.dat
2014-12-08 13:14 - 2009-07-14 06:13 - 01616098 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-08 13:14 - 2009-07-14 05:45 - 00019488 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-08 13:14 - 2009-07-14 05:45 - 00019488 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-08 13:07 - 2014-10-31 14:03 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-08 13:07 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-08 13:06 - 2014-10-31 13:50 - 00354965 _____ () C:\Windows\WindowsUpdate.log
2014-12-08 13:05 - 2014-10-31 15:22 - 00000000 ____D () C:\Users\Christian\AppData\Local\Battle.net
2014-12-08 12:53 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-12-08 12:51 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-12-08 01:12 - 2014-11-02 17:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\TS3Client
2014-12-07 21:30 - 2014-11-02 19:35 - 00000000 ____D () C:\Program Files\World of Warcraft
2014-12-07 19:57 - 2014-11-01 22:50 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Skype
2014-12-07 19:56 - 2014-11-02 16:53 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-07 18:59 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-07 14:36 - 2014-10-31 13:18 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-04 17:31 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-12-02 21:46 - 2014-10-31 15:21 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-11-26 16:03 - 2014-10-31 13:58 - 01589650 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-11-19 02:30 - 2014-10-31 13:46 - 00000000 ____D () C:\Windows\Panther
2014-11-18 22:47 - 2014-11-03 03:26 - 00000000 ____D () C:\temp
2014-11-18 22:47 - 2014-10-31 14:02 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-18 22:46 - 2014-10-31 13:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-18 22:43 - 2014-10-31 12:54 - 00000000 ____D () C:\Users\Christian\AppData\Local\VirtualStore
2014-11-13 01:20 - 2014-10-31 14:01 - 00074056 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-11-13 01:20 - 2014-10-31 14:01 - 00059592 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 20986592 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 16884632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 03262784 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 02874456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-13 01:20 - 2014-10-31 13:53 - 00027094 _____ () C:\Windows\system32\nvinfo.pb
2014-11-12 22:56 - 2014-10-31 14:02 - 06897352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-12 22:56 - 2014-10-31 14:02 - 03534152 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-12 22:56 - 2014-10-31 14:02 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-12 22:56 - 2014-10-31 14:02 - 00934032 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-12 22:56 - 2014-10-31 14:02 - 00386368 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-12 22:56 - 2014-10-31 14:02 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-11 17:14 - 2014-10-31 12:57 - 00000000 ____D () C:\Users\Christian\AppData\Local\Deployment
2014-11-11 17:01 - 2014-11-03 03:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alienware
2014-11-11 11:29 - 2014-10-31 14:02 - 04100776 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-09 20:43 - 2014-10-31 12:54 - 00000000 ____D () C:\Users\Christian
2014-11-09 20:39 - 2014-10-31 14:06 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA
2014-11-09 20:37 - 2014-10-31 14:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

Some content of TEMP:
====================
C:\Users\Christian\AppData\Local\Temp\Quarantine.exe
C:\Users\Christian\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-06 18:03

==================== End Of Log ============================
--- --- ---


Die Addition.txt wird nach dem Scan nicht erstellt... wieso denn das jetzt?

cosinus 08.12.2014 13:47
Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Scan klicken.

http://saved.im/mtg0mjy4yjlu/2014-04...ryscantool.png

Cyruz09 08.12.2014 13:49
Dann hier noch nachträglich:

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2014 02
Ran by Christian at 2014-12-08 13:48:48
Running from C:\Users\Christian\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Connectify (HKLM\...\Connectify) (Version: 9.2.2.33000 - Connectify)
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CrystalDiskInfo 6.2.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.2.1 - Crystal Dew World)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Geeks3D FurMark 1.15.0.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version:  - Geeks3D)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6241.0 - IDT)
Intel(R) Network Connections 14.2.100.0 (HKLM\...\PROSetDX) (Version: 14.2.100.0 - Intel)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Men of War: Assault Squad 2 (HKLM-x32\...\Steam App 244450) (Version:  - Digitalmindsoft)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
NVIDIA 3D Vision Treiber 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.75 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.75 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.104 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

31-10-2014 12:11:05 Windows Update
31-10-2014 12:14:28 avast! antivirus system restore point
31-10-2014 12:54:03 Windows Update
11-11-2014 16:35:27 Installed Intel(R) Network Connections.
12-11-2014 05:26:50 DirectX wurde installiert
12-11-2014 17:16:35 Installed System Requirements Lab Detection
12-11-2014 17:35:43 DirectX wurde installiert
12-11-2014 17:37:05 Microsoft Visual C++ 2005 Redistributable wird installiert
14-11-2014 14:41:37 Removed Java 8 Update 25
15-11-2014 18:03:36 Gerätetreiber-Paketinstallation: EuMus Design Audio-, Video- und Gamecontroller
19-11-2014 01:22:25 TuneUp Utilities 2014 wird installiert
26-11-2014 15:04:52 Gerätetreiber-Paketinstallation: Connectify Netzwerkdienst
02-12-2014 17:17:25 Removed System Requirements Lab CYRI
02-12-2014 17:18:07 Removed System Requirements Lab Detection
02-12-2014 17:19:50 TuneUp Utilities 2014 wird entfernt
02-12-2014 17:20:41 TuneUp Utilities 2014 (de-DE) wird entfernt
05-12-2014 12:50:22 avast! antivirus system restore point
05-12-2014 13:02:42 avast! antivirus system restore point
05-12-2014 13:08:48 avast! antivirus system restore point
07-12-2014 02:48:38 Gerätetreiber-Paketinstallation: Connectify Netzwerkdienst

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-12-08 13:07 - 00000065 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {B5D7B16F-3850-4C47-AC7A-8E23E71FA73A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-05] (AVAST Software)
Task: {C918BCF8-97AF-41E8-B9D2-95A49B7D9163} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation)
Task: {FFCAD33D-C3BD-46ED-A9DC-DF3EDBDC5357} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)

==================== Loaded Modules (whitelisted) =============

2014-10-31 14:02 - 2014-11-12 22:56 - 00118080 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-05 14:09 - 2014-12-05 14:09 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-12-05 14:09 - 2014-12-05 14:09 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-12-08 12:21 - 2014-12-08 12:21 - 02905088 _____ () C:\Program Files\AVAST Software\Avast\defs\14120800\algo.dll
2014-12-05 14:09 - 2014-12-05 14:09 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-12-05 14:09 - 2014-12-05 14:10 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-12-07 03:48 - 2014-10-15 20:44 - 00377080 _____ () C:\Program Files (x86)\Connectify\NativeLibrary.dll
2014-12-07 03:48 - 2014-10-15 20:44 - 00713976 _____ () C:\Program Files (x86)\Connectify\log4cplus.dll
2014-12-07 03:48 - 2014-10-15 20:44 - 03564280 _____ () C:\Program Files (x86)\Connectify\ConnectifyNAT.dll
2014-12-07 03:48 - 2014-10-15 20:44 - 00354040 _____ () C:\Program Files (x86)\Connectify\LibDispatch.dll
2014-10-31 13:02 - 2014-10-22 05:04 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\libglesv2.dll
2014-10-31 13:02 - 2014-10-22 05:04 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\libegl.dll
2014-10-31 13:02 - 2014-10-22 05:04 - 08910664 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\pdf.dll
2014-10-31 13:02 - 2014-10-22 05:04 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\libcef.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\libGLESv2.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00907264 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\platforms\qwindows.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\libEGL.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qgif.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00021504 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qico.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00205312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qjpeg.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00225792 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qmng.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00015872 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qsvg.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00312832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\imageformats\qtiff.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\qml\QtQuick.2\qtquick2plugin.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00054272 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2014-12-02 21:46 - 2014-12-02 21:46 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5325\qml\QtQml\Models.2\modelsplugin.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-4252364099-3653914557-3492531405-500 - Administrator - Disabled)
Christian (S-1-5-21-4252364099-3653914557-3492531405-1001 - Administrator - Enabled) => C:\Users\Christian
Gast (S-1-5-21-4252364099-3653914557-3492531405-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-4252364099-3653914557-3492531405-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Intel(R) WiFi Link 5300 AGN
Description: Intel(R) WiFi Link 5300 AGN
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: NETwNs64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-12-08 12:50:43.130
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-08 12:50:43.125
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-05 21:46:06.091
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\CHRIST~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-05 21:46:06.086
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\CHRIST~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-05 21:46:05.794
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-12-05 21:46:05.789
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz
Percentage of memory in use: 51%
Total physical RAM: 4084.5 MB
Available physical RAM: 1982.23 MB
Total Pagefile: 8167.16 MB
Available Pagefile: 5473.65 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.79 GB) (Free:97.3 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 7DF6CF8B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus 08.12.2014 13:53
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
S2 fc67e7a0; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\DeltaFix\DeltaFix.dll",serv
c:\Program Files (x86)\DeltaFix
EmptyTemp:
Hosts:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Cyruz09 08.12.2014 14:02
Hier die FixList:

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-12-2014 02
Ran by Christian at 2014-12-08 13:57:28 Run:1
Running from C:\Users\Christian\Downloads
Loaded Profile: Christian (Available profiles: Christian)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
S2 fc67e7a0; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\DeltaFix\DeltaFix.dll",serv
c:\Program Files (x86)\DeltaFix
EmptyTemp:
Hosts:
*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-4252364099-3653914557-3492531405-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
fc67e7a0 => Service deleted successfully.
"c:\Program Files (x86)\DeltaFix" => File/Directory not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 699.1 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

cosinus 08.12.2014 14:20
Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Cyruz09 08.12.2014 15:07
Also ich lasse gerade den Scan von Eset durchlaufen... der steht nun bei 99% und scheint bei einer bestimmten Datei hängen geblieben zu sein, ist das normal?


Alle Zeitangaben in WEZ +1. Es ist jetzt 11:35 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19