Ultraviolent | 24.09.2013 20:47 | Hallo,
sorry für die späte Antwort, habe im Moment blöde Schichten, dennoch hier die Logs:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-09-2013
Ran by Jonny (administrator) on BALOTELLINIGGER on 24-09-2013 21:42:32
Running from C:\Users\Jonny\Downloads
Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Creative Technology Ltd.) C:\Windows\V0700Mon.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Spotify Ltd) C:\Users\Jonny\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Jonny\AppData\Roaming\Spotify\spotify.exe
(Smartbar) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ArcSoft Connection Service] - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [ROC_ROC_NT] - "C:\Program Files\AVG Secure Search\ROC_ROC_NT.exe" / /PROMPT /CMPID=ROC_NT
HKLM\...\Run: [V0700Mon.exe] - C:\Windows\V0700Mon.exe [28672 2011-08-22] (Creative Technology Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKCU\...\Run: [Google Update] - C:\Users\Jonny\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-04] (Google Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Jonny\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Spotify] - C:\Users\Jonny\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.exe [20760 2013-06-30] (Smartbar)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
MountPoints2: {24153079-dcaf-11e2-a120-0024211f3c6f} - I:\Setup.exe
MountPoints2: {e21c9a33-ef93-11e2-9559-0024211f3c6f} - I:\Setup.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/04/2013&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=hp&fr=linkury-tb&installDate=20/04/2013&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/04/2013&type=hp1000
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/04/2013&type=hp1000
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/04/2013&type=hp1000
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/04/2013&type=hp1000
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/04/2013&type=hp1000
BHO: PriceGong - Price Comparison - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.6.12\PriceGongIE.dll (PriceGong)
BHO: Yahoo Community Smartbar (by Linkury)Engine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - loadtbs - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - C:\Users\Jonny\AppData\Roaming\loadtbs\toolbar.dll (InfiniAd GmbH)
Toolbar: HKLM - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Toolbar: HKLM - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU -loadtbs - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - C:\Users\Jonny\AppData\Roaming\loadtbs\toolbar.dll (InfiniAd GmbH)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 83.169.185.33 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Jonny\AppData\Roaming\Mozilla\Firefox\Profiles\r1sum0en.default
FF user.js: detected! => C:\Users\Jonny\AppData\Roaming\Mozilla\Firefox\Profiles\r1sum0en.default\user.js
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=hp&fr=linkury-tb&installDate=20/04/2013&type=hp1000
FF Keyword.URL: hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=ds&fr=linkury-tb&installDate=20/04/2013&type=hp1000&p=
FF NewTab: hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=nt&fr=linkury-tb&installDate=20/04/2013&type=hp1000&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.1 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Jonny\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Jonny\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Jonny\AppData\Roaming\Mozilla\Firefox\Profiles\r1sum0en.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: hdvc - C:\Users\Jonny\AppData\Roaming\Mozilla\Firefox\profiles\extensions\hdvc@hdvc.com.xpi
FF Extension: No Name - C:\Users\Jonny\AppData\Roaming\Mozilla\Firefox\Profiles\r1sum0en.default\Extensions\staged
FF Extension: No Name - C:\Users\Jonny\AppData\Roaming\Mozilla\Firefox\Profiles\r1sum0en.default\Extensions\{15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a}
FF Extension: PriceGong - C:\Users\Jonny\AppData\Roaming\Mozilla\Firefox\Profiles\r1sum0en.default\Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt
Chrome:
=======
CHR HomePage: hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=hp&fr=linkury-tb&installDate=20/04/2013&type=hp1000
CHR RestoreOnStartup: "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=hp&fr=linkury-tb&installDate=20/04/2013&type=hp1000"
CHR DefaultSearchURL: (Web) - hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=15d0cc8b-ab8b-4b6e-82dc-fd5c7198730a&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/04/2013&type=hp1000
CHR DefaultSuggestURL: (Web) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\gcswf32.dll No File
CHR Plugin: (Google Update) - C:\Users\Jonny\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\Jonny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Jonny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (ProxTube) - C:\Users\Jonny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fclefogcenncfmmekelnpgpehiglcjln\1.2.4_0
CHR Extension: (AdBlock) - C:\Users\Jonny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.7_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Jonny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Jonny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Jonny\AppData\Local\funmoods_2.3.crx
CHR HKLM\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files\PriceGong\2.6.12\pricegong.crx
CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\Jonny\AppData\Local\funmoods-speeddial_sf.crx
CHR HKLM\...\Chrome\Extension: [kpkbnefaikfaeadgidhpoanckoiaheli] - C:\Program Files\HDvidCodec.com\HDvidCodec10.crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Jonny\AppData\Local\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Desura Install Service; C:\Program Files\Common Files\Desura\desura_service.exe [131912 2012-10-15] (Desura Pty Ltd)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
==================== Drivers (Whitelisted) ====================
R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.)
R1 archlp; C:\Windows\System32\drivers\archlp.sys [127744 2009-02-19] ()
R3 BCMH43XX; C:\Windows\System32\DRIVERS\bcmwlhigh6.sys [699896 2009-11-06] (Broadcom Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-07-18] (DT Soft Ltd)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 hcwhdpvr; C:\Windows\System32\DRIVERS\hcwhdpvr.sys [161480 2012-03-26] (Hauppauge, Inc.)
S3 NPF; C:\Windows\System32\DRIVERS\npf.sys [50704 2010-02-03] (CACE Technologies, Inc.)
S3 V0700Vid; C:\Windows\System32\DRIVERS\V0700Vid.sys [322528 2011-09-06] (Creative Technology Ltd.)
S3 athr; system32\DRIVERS\athr.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 XDva397; \??\C:\Windows\system32\XDva397.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-24 21:42 - 2013-09-24 21:42 - 00000000 ____D C:\FRST
2013-09-24 21:41 - 2013-09-24 21:41 - 01088653 _____ (Farbar) C:\Users\Jonny\Downloads\FRST.exe
2013-09-21 00:12 - 2013-09-21 00:13 - 00000000 ____D C:\Users\Jonny\Desktop\Bewerbung
2013-09-20 23:33 - 2013-09-21 00:11 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-09-20 23:32 - 2013-09-20 23:32 - 12907592 _____ (Malwarebytes Corp.) C:\Users\Jonny\Downloads\mbar-1.07.0.1005.exe
2013-09-20 23:30 - 2013-09-20 23:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Jonny\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-20 23:30 - 2013-09-20 23:30 - 00000000 ____D C:\Users\Jonny\AppData\Roaming\Malwarebytes
2013-09-20 23:30 - 2013-09-20 23:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 23:30 - 2013-09-20 23:30 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-20 23:30 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-19 22:39 - 2013-09-21 00:13 - 00000000 ____D C:\Users\Jonny\Desktop\chillllllll
2013-09-15 15:06 - 2013-09-21 00:25 - 00000000 ____D C:\Users\Jonny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-09-15 15:06 - 2013-09-20 21:54 - 00000000 ____D C:\Users\Jonny\AppData\Roaming\Dropbox
2013-09-12 19:15 - 2013-09-12 19:16 - 00000000 ____D C:\Users\Jonny\Desktop\Neuer Ordner (2)
2013-09-12 19:13 - 2013-09-12 19:15 - 00000000 ____D C:\Users\Jonny\Desktop\Neuer Ordner
2013-08-27 21:06 - 2013-08-27 21:06 - 38725271 _____ C:\Users\Jonny\Downloads\Monster Warlord Hack 2013 (1).rar
2013-08-27 21:03 - 2013-08-27 21:04 - 00000000 ____D C:\Users\Jonny\Downloads\Monster Warlord Hack 2013
2013-08-27 21:02 - 2013-08-27 21:03 - 38725271 _____ C:\Users\Jonny\Downloads\Monster Warlord Hack 2013.rar
2013-08-25 00:14 - 2013-08-25 00:14 - 00000000 ____D C:\Users\Jonny\Downloads\RS (1)
==================== One Month Modified Files and Folders =======
2013-09-24 21:42 - 2013-09-24 21:42 - 00000000 ____D C:\FRST
2013-09-24 21:42 - 2012-07-04 16:11 - 02021384 _____ C:\Windows\WindowsUpdate.log
2013-09-24 21:41 - 2013-09-24 21:41 - 01088653 _____ (Farbar) C:\Users\Jonny\Downloads\FRST.exe
2013-09-24 21:41 - 2012-08-15 00:53 - 00000000 ____D C:\Users\Jonny\AppData\Roaming\Spotify
2013-09-24 21:40 - 2012-12-06 21:25 - 00000200 _____ C:\Windows\Tasks\AutoKMS.job
2013-09-24 21:40 - 2012-08-15 00:54 - 00000000 ____D C:\Users\Jonny\AppData\Local\Spotify
2013-09-24 21:39 - 2011-11-09 00:13 - 00199922 _____ C:\Windows\setupact.log
2013-09-24 21:39 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-21 20:16 - 2012-10-07 23:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-21 19:58 - 2012-07-04 16:21 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-971021196-3656279465-4205886418-1000UA.job
2013-09-21 18:58 - 2012-07-04 16:21 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-971021196-3656279465-4205886418-1000Core.job
2013-09-21 18:35 - 2009-07-14 06:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-21 18:35 - 2009-07-14 06:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-21 18:20 - 2012-07-04 16:54 - 00000000 ____D C:\Users\Jonny\AppData\Roaming\Skype
2013-09-21 18:19 - 2010-11-20 23:48 - 00100758 _____ C:\Windows\PFRO.log
2013-09-21 18:19 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\LiveKernelReports
2013-09-21 00:25 - 2013-09-15 15:06 - 00000000 ____D C:\Users\Jonny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-09-21 00:25 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-09-21 00:25 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-09-21 00:25 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat
2013-09-21 00:16 - 2012-10-07 23:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-21 00:16 - 2012-10-07 23:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-21 00:13 - 2013-09-21 00:12 - 00000000 ____D C:\Users\Jonny\Desktop\Bewerbung
2013-09-21 00:13 - 2013-09-19 22:39 - 00000000 ____D C:\Users\Jonny\Desktop\chillllllll
2013-09-21 00:11 - 2013-09-20 23:33 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-09-20 23:42 - 2012-12-06 21:25 - 00000202 _____ C:\Windows\Tasks\AutoKMSDaily.job
2013-09-20 23:42 - 2011-11-08 22:55 - 00000000 ____D C:\Windows\Panther
2013-09-20 23:32 - 2013-09-20 23:32 - 12907592 _____ (Malwarebytes Corp.) C:\Users\Jonny\Downloads\mbar-1.07.0.1005.exe
2013-09-20 23:30 - 2013-09-20 23:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Jonny\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-20 23:30 - 2013-09-20 23:30 - 00000000 ____D C:\Users\Jonny\AppData\Roaming\Malwarebytes
2013-09-20 23:30 - 2013-09-20 23:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 23:30 - 2013-09-20 23:30 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-20 23:27 - 2012-12-07 14:00 - 00102024 _____ C:\Windows\AutoKMS.log
2013-09-20 23:26 - 2012-07-04 16:08 - 00000000 ____D C:\Users\Jonny
2013-09-20 21:54 - 2013-09-15 15:06 - 00000000 ____D C:\Users\Jonny\AppData\Roaming\Dropbox
2013-09-12 19:16 - 2013-09-12 19:15 - 00000000 ____D C:\Users\Jonny\Desktop\Neuer Ordner (2)
2013-09-12 19:15 - 2013-09-12 19:13 - 00000000 ____D C:\Users\Jonny\Desktop\Neuer Ordner
2013-09-08 23:55 - 2013-02-08 19:01 - 00000000 ____D C:\Users\Jonny\Documents\Ausbildung & Nebenjob
2013-09-07 17:39 - 2012-07-09 12:37 - 00013824 _____ C:\Users\Jonny\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-29 21:47 - 2010-11-20 23:01 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-27 21:06 - 2013-08-27 21:06 - 38725271 _____ C:\Users\Jonny\Downloads\Monster Warlord Hack 2013 (1).rar
2013-08-27 21:04 - 2013-08-27 21:03 - 00000000 ____D C:\Users\Jonny\Downloads\Monster Warlord Hack 2013
2013-08-27 21:03 - 2013-08-27 21:02 - 38725271 _____ C:\Users\Jonny\Downloads\Monster Warlord Hack 2013.rar
2013-08-25 14:42 - 2009-07-14 06:53 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-25 00:14 - 2013-08-25 00:14 - 00000000 ____D C:\Users\Jonny\Downloads\RS (1)
Some content of TEMP:
====================
C:\Users\Jonny\AppData\Local\Temp\AoE2demo.exe
C:\Users\Jonny\AppData\Local\Temp\AskSLib.dll
C:\Users\Jonny\AppData\Local\Temp\AutoRun.exe
C:\Users\Jonny\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Jonny\AppData\Local\Temp\avguidx.dll
C:\Users\Jonny\AppData\Local\Temp\CmdLineExt01.dll
C:\Users\Jonny\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Jonny\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Jonny\AppData\Local\Temp\drm_dyndata_7330017.dll
C:\Users\Jonny\AppData\Local\Temp\GenericWndApi.dll
C:\Users\Jonny\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Jonny\AppData\Local\Temp\oi_{D7F54F6D-E409-4C51-AE10-BD9A7EFBF3F3}.exe
C:\Users\Jonny\AppData\Local\Temp\SIntf16.dll
C:\Users\Jonny\AppData\Local\Temp\SIntf32.dll
C:\Users\Jonny\AppData\Local\Temp\SIntfNT.dll
C:\Users\Jonny\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Jonny\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\Jonny\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Jonny\AppData\Local\Temp\totalmediaextreme_1.0.9.4_1.0.9.9_update_g.exe
C:\Users\Jonny\AppData\Local\Temp\UNINSTALL.EXE
C:\Users\Jonny\AppData\Local\Temp\_is3968.exe
C:\Users\Jonny\AppData\Local\Temp\_is4E10.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-21 01:53
==================== End Of Log ============================ --- --- ---
Und die Addition: Zitat:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-09-2013
Ran by Jonny at 2013-09-24 21:43:29
Running from C:\Users\Jonny\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
µTorrent (HKCU Version: 3.3.1.29938)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
ArcSoft TotalMedia Extreme
Audacity 2.0
Bonjour (Version: 3.0.0.10)
Camtasia Studio 7 (Version: 7.0.1)
Cheat Engine 6.3
Creative Live! Cam Chat HD (VF0700) (1.00.06.00)
Creative Live! Central 3 (Version: 3.00.33)
Creative Software AutoUpdate (Version: 1.41)
Creative Systeminformationen (Version: 1.10)
DAEMON Tools Lite (Version: 4.47.1.0333)
Definition update for Microsoft Office 2010 (KB982726)
Desura (Version: 100.53)
Desura: No More Room in Hell (Version: Open Beta)
Desura: The Stanley Parable (Version: Full)
Dota 2
ffdshow v1.2.4422 [2012-04-09] (Version: 1.2.4422.0)
Fraps (remove only)
Free YouTube Download version 3.1.37.918 (Version: 3.1.37.918)
Free YouTube to MP3 Converter version 3.11.33.1005 (Version: 3.11.33.1005)
Frets On Fire (Version: 1.3.110-win32)
Funmoods
GIMP 2.8.2 (Version: 2.8.2)
Google Chrome (HKCU Version: 29.0.1547.76)
Guitar Hero III (Version: 1.00.0000)
Gyazo 1.0.1
HDVidCodec (Version: 2.1 Build 26473)
Horizon v2.5.3.0 (Version: 2.5.3.0)
ICQ7M (Version: 7.8)
iTunes (Version: 11.0.4.4)
Java 7 Update 11 (Version: 7.0.110)
Java Auto Updater (Version: 2.1.9.0)
JavaFX 2.1.1 (Version: 2.1.1)
LAME v3.99.3 (for Windows)
League of Legends (Version: 1.3)
loadtbs-3.0
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Age of Empires II
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (Version: 3.5.0.0)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVCRT Redists (Version: 1.0)
My Game Long Name
OpenOffice.org 3.4.1 (Version: 3.41.9593)
PDF Architect (Version: 1.1.83.9982)
PDF24 Creator 5.4.0
PDFCreator (Version: 1.7.0)
PhotoScape
PlanetSide 2 (HKCU Version: 1.0.3.183)
Portal
PriceGong 2.6.12 (Version: 2.6.12)
QuickTime (Version: 7.74.80.86)
Skype Click to Call (Version: 6.3.11079)
Skype™ 6.6 (Version: 6.6.106)
Source SDK Base 2007
Spotify (HKCU Version: 0.9.1.57.ge7405149)
Steam (Version: 1.0.0.0)
Team Fortress 2
TmNationsForever
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Vegas Pro 11.0 (Version: 11.0.682)
VLC media player 1.0.3 (Version: 1.0.3)
WinRAR 4.20 (32-Bit) (Version: 4.20.0)
XSplit (Version: 1.1.1209.0601)
Yahoo Community Smartbar (Version: 1.51.66.11081)
Yahoo Community Smartbar Engine (HKCU Version: 1.51.66.11081)
YTD Video Downloader 4.0 (Version: 4.0)
==================== Restore Points =========================
31-07-2013 00:00:38 Geplanter Prüfpunkt
09-08-2013 20:57:31 Geplanter Prüfpunkt
20-08-2013 20:41:40 Geplanter Prüfpunkt
30-08-2013 23:13:51 Geplanter Prüfpunkt
13-09-2013 17:34:26 Geplanter Prüfpunkt
21-09-2013 00:01:00 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0316827C-DD0D-4DCF-BC32-354EC30D8CFF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-971021196-3656279465-4205886418-1000Core => C:\Users\Jonny\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-04] (Google Inc.)
Task: {0DA9233E-497A-4652-8E29-632F2213794D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {4D319D9D-DCF1-403E-8C28-8A277385B97E} - System32\Tasks\AutoKMSDaily => C:\Windows\AutoKMS.exe
Task: {6AA5DB6F-0671-4CCF-BC5D-DDCF69575E60} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-971021196-3656279465-4205886418-1000UA => C:\Users\Jonny\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-04] (Google Inc.)
Task: {85540086-F8E0-4AFA-B1B4-2FA69B030657} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-21] (Adobe Systems Incorporated)
Task: {A15FC061-D7BB-4156-AEE2-F7F4EE2A6B25} - System32\Tasks\Funmoods => C:\Users\Jonny\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE [2013-04-30] ()
Task: {B9A2D0CE-1FEF-44A7-831E-218FC65A0FD8} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSDaily.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-971021196-3656279465-4205886418-1000Core.job => C:\Users\Jonny\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-971021196-3656279465-4205886418-1000UA.job => C:\Users\Jonny\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-04-23 13:47 - 2013-03-20 14:38 - 00057384 _____ (Geek Software GmbH) C:\Program Files\PDF24\Settings.dll
2013-04-23 13:47 - 2013-03-20 14:38 - 00395304 _____ (Geek Software GmbH) C:\Program Files\PDF24\NotifyIcon.dll
2013-04-23 13:47 - 2013-03-20 14:38 - 00047144 _____ (Geek Software GmbH) C:\Program Files\PDF24\Language.dll
2013-04-23 13:47 - 2013-03-20 14:38 - 00382504 _____ (Geek Software GmbH) C:\Program Files\PDF24\About.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 00053608 _____ (Open Source Software community project) C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-06-21 09:53 - 2013-06-21 09:53 - 00088680 ____R (Skype Technologies) C:\Program Files\Skype\Updater\Updater.dll
2012-08-15 00:54 - 2013-07-09 14:48 - 24985600 _____ () C:\Users\Jonny\AppData\Roaming\Spotify\Data\libcef.dll
2012-08-15 00:54 - 2013-07-09 14:48 - 09964032 _____ (The ICU Project) C:\Users\Jonny\AppData\Roaming\Spotify\Data\icudt.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00032024 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00055576 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00149784 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2007-05-11 21:09 - 2007-05-11 21:09 - 00218536 _____ (Microsoft Corporation) C:\Users\Jonny\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00112408 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00045336 _____ (Smartbar) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettingsAutoUpdater.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 01747224 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00078104 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00016664 _____ (Microsoft) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.UserSettingsManager.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00035608 _____ (Microsoft) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.Base.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00012568 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00722712 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00100632 _____ (Microsoft) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessEntities.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00059672 _____ (Microsoft) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00174360 _____ (Microsoft) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettings.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00081688 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00013592 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00016152 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00019736 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00021272 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00028952 _____ (Microsoft) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.DefaultBrowser.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00014616 _____ (Microsoft) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ShareManagerLocalPlugin.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00053528 _____ (Microsoft) C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00057112 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2013-04-20 14:59 - 2013-04-20 14:59 - 00145688 _____ ( ) C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll
2012-12-06 21:11 - 2012-12-06 21:11 - 08007680 _____ ( ) C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00014104 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
2013-04-20 14:59 - 2013-04-20 14:59 - 00911128 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00014104 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00051992 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2013-06-30 09:31 - 2013-06-30 09:31 - 00047384 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2013-06-30 09:31 - 2013-06-30 09:31 - 00025368 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00025368 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2013-06-30 09:32 - 2013-06-30 09:32 - 00245528 _____ () C:\Users\Jonny\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll
2013-09-21 00:03 - 2013-09-17 05:20 - 47033808 _____ (Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\chrome.dll
2013-09-21 00:03 - 2013-09-17 05:20 - 09962960 _____ (The ICU Project) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\icudt.dll
2013-09-21 00:03 - 2013-09-17 03:23 - 03231688 _____ (Microsoft Corporation) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\D3DCompiler_46.dll
2013-09-21 00:03 - 2013-09-17 05:20 - 00709584 _____ () C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\libglesv2.dll
2013-09-21 00:03 - 2013-09-17 05:20 - 00099792 _____ () C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\libegl.dll
2013-09-21 00:03 - 2013-09-17 05:21 - 04053456 _____ () C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\pdf.dll
2013-09-21 00:03 - 2013-09-17 05:21 - 00410576 _____ () C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll
2013-09-21 00:03 - 2013-09-17 05:20 - 02110928 _____ (Google Inc.) C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\libpeerconnection.dll
2013-09-21 00:03 - 2013-09-17 05:20 - 01604560 _____ () C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\ffmpegsumo.dll
2013-09-21 00:03 - 2013-09-17 05:21 - 13611984 _____ () C:\Users\Jonny\AppData\Local\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/24/2013 09:41:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/21/2013 06:21:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/21/2013 01:54:39 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (09/20/2013 11:44:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/20/2013 11:28:20 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/20/2013 11:27:47 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (09/20/2013 11:27:35 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (09/20/2013 11:27:25 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (09/20/2013 10:32:51 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/20/2013 10:13:37 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
System errors:
=============
Error: (09/21/2013 00:11:48 AM) (Source: mbamchameleon) (User: )
Description: C000000D
Error: (09/21/2013 00:11:48 AM) (Source: mbamchameleon) (User: )
Description: C000000D
Error: (09/21/2013 00:11:48 AM) (Source: mbamchameleon) (User: )
Description: C000000D
Error: (09/20/2013 11:48:31 PM) (Source: mbamchameleon) (User: )
Description: C0000022
Error: (09/20/2013 11:48:30 PM) (Source: mbamchameleon) (User: )
Description: C0000022
Error: (09/20/2013 11:43:01 PM) (Source: mbamchameleon) (User: )
Description: ume1\USERS\JONNY\APPDATA\ROAMING\SPOTIFY\SPOTIFY.EXE
Error: (09/20/2013 11:43:00 PM) (Source: mbamchameleon) (User: )
Description: ume1\USERS\JONNY\APPDATA\ROAMING\SPOTIFY\SPOTIFY.EXE
Error: (09/20/2013 11:43:00 PM) (Source: mbamchameleon) (User: )
Description: ume1\Users\Jonny\AppData\Roaming\Spotify\spotify.exe
Error: (09/20/2013 11:42:59 PM) (Source: mbamchameleon) (User: )
Description: ume1\USERS\JONNY\APPDATA\ROAMING\SPOTIFY\SPOTIFY.EXE
Error: (09/20/2013 11:32:46 PM) (Source: mbamchameleon) (User: )
Description: ume1\USERS\JONNY\APPDATA\ROAMING\SPOTIFY\SPOTIFY.EXE
Microsoft Office Sessions:
=========================
Error: (09/24/2013 09:41:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/21/2013 06:21:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/21/2013 01:54:39 AM) (Source: SideBySide)(User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe
Error: (09/20/2013 11:44:01 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/20/2013 11:28:20 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/20/2013 11:27:47 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Users\Jonny\Downloads\vega spro12.0.486.exe
Error: (09/20/2013 11:27:35 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (09/20/2013 11:27:25 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
Error: (09/20/2013 10:32:51 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/20/2013 10:13:37 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Users\Jonny\Downloads\vega spro12.0.486.exe
CodeIntegrity Errors:
===================================
Date: 2013-09-07 17:54:21.321
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-07 17:52:41.541
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-07 17:33:38.831
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-07 17:27:58.300
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-07 17:24:43.501
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-27 20:36:19.651
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-26 21:24:51.745
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-26 21:16:49.370
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-26 21:14:36.873
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-26 21:14:13.193
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\CTAFX32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 3326.3 MB
Available physical RAM: 2065.17 MB
Total Pagefile: 6650.89 MB
Available Pagefile: 5238.02 MB
Total Virtual: 2047.88 MB
Available Virtual: 1886.21 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:576.17 GB) (Free:427.82 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:19.99 GB) (Free:9.86 GB) FAT32
Drive i: (GHIII) (CDROM) (Total:3.19 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 2BAB359D)
Partition 1: (Active) - (Size=576 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)
==================== End Of Log ============================
| |