Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Problem Google (https://www.trojaner-board.de/145445-problem-google.html)

Striker(x44) 01.12.2013 19:21
Problem Google
 
Guten Tag,

mein Name ist Lenny und ich habe ein Problem, heute kam ich von einem Freund nachhause und wollte mein Projekt fertig stellen, ich öffnete Google Chrome und gab Google.com ein, doch es kam eine Fehlermeldung, die Seite konnte nicht aufgerufen werden. YouTube könnte ich zwar aufrufen aber die Videos funktionierten nicht. Nun Frage ich euch woran das liegen kann.

System Infos:
-Windows 7, 32Bit.
Internetanschluss von 1&1.

PS: Ich habe heute 2 Trojaner und eine C99Shell entfernt.

schrauber 01.12.2013 19:51
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Striker(x44) 01.12.2013 21:15
Addition:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 01-12-2013
Ran by User at 2013-12-01 21:10:43
Running from C:\Users\User\Downloads\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
100% Wimmelbild (Version: 1.0.0.0)
1001 Nacht: Die Abenteuer von Sindbad (Version: 1.0.0.0)
1001 Nights - The Adventures of Sindbad
7 Gates: Der Weg zu Zalmoxis (Version: 1.0.0.0)
7 Wonders (Version: 0.0.0.0)
A Fairy Tale (Version: 1.0.0.0)
Abenteuer Rom: Das Rätsel der Steine (Version: 1.0.0.0)
Abteilung 42 (Version: 1.0.0.0)
Abyss: Die Geister von Eden (Version: 1.0.0.0)
Abyss: Die Geister von Eden Sammleredition (Version: 1.0.0.0)
Ace of Spades
Ace of Spades (Version: 0.75.015)
Acrobat.com (Version: 1.6.65)
ADDICT-THING (Version: )
Adobe AIR (Version: 3.7.0.1530)
Adobe Creative Cloud (Version: 2.1.2.232)
Adobe Download Assistant (Version: 1.2.6)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Photoshop CC (Version: 14.0)
Adobe Photoshop CS6 (Version: 13.0)
Adobe Reader 9.3.4 MUI (Version: 9.3.4)
Adobe Shockwave Player 11.5 (Version: 11.5.8.612)
Age Of Oracles: Tara’s Journey (Version: 1.0.0.0)
Akademie der Magie 2 (Version: 0.0.0.0)
Akamai NetSession Interface
Alabama Smith 2 (Version: 1.0.0.0)
Alabama Smith: Flucht aus Pompeji (Version: 0.0.0.0)
Alamandi (Version: 1.00.0000)
ALDI SÜD Mah Jong
Alexander der Große: Geschichte der Macht Sammleredition (Version: 1.0.0.0)
Alice und die magischen Gärten (Version: 1.0.0.0)
Amazonia (Version: 0.0.0.0)
Ancient Rome (Version: 1.0.0.0)
Angelica Weaver: Übersinnliche Ermittlung (Version: 1.0.0.0)
Annabel (Version: 0.0.0.0)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Aquitania (Version: 1.0)
ATI Catalyst Install Manager (Version: 3.0.778.0)
Atlantica – Wunder der Tiefe (Version: 0.0.0.0)
Auf den Spuren des Hercules (Version: 1.0.0.0)
Autumn's Treasures - The Jade Coin (Version: 1.0)
AVG 2013 (Version: 13.0.3426)
AVG 2013 (Version: 13.0.3629)
AVG 2013 (Version: 2013.0.3426)
AVG Nation toolbar (Version: 17.0.1.12)
AVG PC TuneUp 2014 (de-DE) (Version: 14.0.1001.174)
AVG PC TuneUp 2014 (Version: 14.0.1001.174)
Babylonia (Version: 0.0.0.0)
BabylonObjectInstaller (Version: 1.0.0.0)
Be a King: Golden Empire (Version: 1.0.0.0)
BearShare (Version: 10.0.0.128377)
BFlix Gadget (Version: 1.0)
Big City Adventure: Paris (Version: 1.0.0.0)
Big City Adventure: Sydney, Australia (Version: 1.0.0.0)
Big Fish Games: Game Manager (Version: 2.0.0.8)
Bigfoot: Chasing Shadows (Version: 1.0.0.0)
BigMacroTool 1.5
Bilbo – Die vier Ecken der Welt (Version: 1.0.0.0)
Blumenparadies (Version: 0.0.0.0)
Blüten der Angst (Version: 1.0.0.0)
Bonanza Deals (remove only) (Version: 5.0.1.0)
Bonjour (Version: 3.0.0.10)
Brawl Busters
BrickForce 1.9.87 (Version: 1.9.87)
Brink of Consciousness: Dorian-Gray-Syndrom (Version: 1.0.0.0)
Brunhilda (Version: 1.0.0.0)
Build-a-lot (Version: 0.0.0.0)
Campfire Legends - The Hookman (Version: 1.0)
Camtasia Studio 7 (Version: 7.0.1)
Catalyst Control Center Graphics Previews Vista (Version: 2010.0527.1242.20909)
Catalyst Control Center InstallProxy (Version: 2010.0527.1242.20909)
Catalyst Control Center Localization All (Version: 2010.0527.1242.20909)
Cate West: Der verborgene Schlüssel (Version: 0.0.0.0)
CCC Help Danish (Version: 2010.0527.1241.20909)
CCC Help Dutch (Version: 2010.0527.1241.20909)
CCC Help English (Version: 2010.0527.1241.20909)
CCC Help Finnish (Version: 2010.0527.1241.20909)
CCC Help French (Version: 2010.0527.1241.20909)
CCC Help German (Version: 2010.0527.1241.20909)
CCC Help Italian (Version: 2010.0527.1241.20909)
CCC Help Japanese (Version: 2010.0527.1241.20909)
CCC Help Norwegian (Version: 2010.0527.1241.20909)
CCC Help Spanish (Version: 2010.0527.1241.20909)
CCC Help Swedish (Version: 2010.0527.1241.20909)
ccc-core-static (Version: 2010.0527.1242.20909)
ccc-utility (Version: 2010.0527.1242.20909)
Chroniken von Albian (Version: 1.0.0.0)
Chroniken von Albian 2: Die Zauberschule von Wizbury (Version: 1.0.0.0)
City Mysteries (Version: 1.0)
Clone Wars
Club der Ermittlerinnen: Dunkelgraue Schatten (Version: 1.0.0.0)
Club der Ermittlerinnen: Kleine dunkle Lügen (Version: 1.0.0.0)
CorelDRAW Essentials 4
CorelDRAW Essentials 4 - Content (Version: 4.0)
CorelDRAW Essentials 4 - Draw (Version: 4.0)
CorelDRAW Essentials 4 - Filters (Version: 4.0)
CorelDRAW Essentials 4 - ICA (Version: 4.0)
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0)
CorelDRAW Essentials 4 - Lang BR (Version: 4.0)
CorelDRAW Essentials 4 - Lang DE (Version: 4.0)
CorelDRAW Essentials 4 - Lang EN (Version: 4.0)
CorelDRAW Essentials 4 - Lang ES (Version: 4.0)
CorelDRAW Essentials 4 - Lang FR (Version: 4.0)
CorelDRAW Essentials 4 - Lang IT (Version: 4.0)
CorelDRAW Essentials 4 - Lang NL (Version: 4.0)
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0)
CorelDRAW Essentials 4 - Windows Shell Extension
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1)
CorelDRAW Essentials 4 (Version: 4.0)
Cradle of Rome (Version: 1.0)
Cruel Games: Rotkäppchen (Version: 1.0.0.0)
Cursed Fates: Der kopflose Reiter (Version: 1.0.0.0)
CyberLink LabelPrint (Version: 2.5.2515)
CyberLink Power2Go (Version: 6.1.3602c)
CyberLink PowerDVD Copy (Version: 1.5.1306)
Dark Lore Mysteries: Die Jagd nach der Wahrheit (Version: 1.0.0.0)
Dark Mysteries: Der Seelensammler (Version: 1.0.0.0)
Dark Strokes: Die Sünden der Väter (Version: 1.0.0.0)
Das Amulett der Zeit: Der Schatten von La Rochelle (Version: 1.0.0.0)
Das Biest von Lycan Isle Sammleredition (Version: 1.0.0.0)
Das Buch der Dunklen Träume (Version: 1.0.0.0)
Das Geheimnis von Mortlake (Version: 1.0.0.0)
Das Haus am See: Kinder der Stille (Version: 1.0.0.0)
Das Herz von Gaia (Version: 1.0.0.0)
Das mysteriöse Drachenrad (Version: 1.0.0.0)
Das Rätsel der Eisrose (Version: 1.0.0.0)
Das Rätsel der Eisrose Sammleredition (Version: 1.0.0.0)
Das rätselhafte Kristall-Portal (Version: 0.0.0.0)
Das Spukhotel (Version: 1.0.0.0)
Das Verlorene Königreich: Die Prophezeiung (Version: 1.0.0.0)
Das Vermächtnis der Insel (Version: 1.0.0.0)
Das Vermächtnis des Einhorns (Version: 0.0.0.0)
Deadly Voltage: Der Unbesiegbare (Version: 1.0.0.0)
Deadtime Stories (Version: 1.0.0.0)
Dealply
Delta Chrome Toolbar
Der Bau der Chinesischen Mauer Sammleredition (Version: 1.0.0.0)
Der Exorzist II (Version: 1.0.0.0)
Der Fluch von Montezuma (Version: 0.0.0.0)
Der Ring des Unheils (Version: 1.0.0.0)
Der Ring des Unheils (Version: 1.00.0000)
Der Schatz der versunkenen Brigantine (Version: 1.0.0.0)
Der Schnee (Version: 1.0.0.0)
Der Tempel des Lebens: Die Legende der Vier Elemente (Version: 1.0.0.0)
Der Tempel des Lebens: Die Legende der Vier Elemente Sammleredition (Version: 1.0.0.0)
Der verlorene Schatz von Eldorado (Version: 0.0.0.0)
Detective Stories: Hollywood (Version: 0.0.0.0)
Deutschland Spielt - Spiele Post (Version: 1.0.3.0)
DEUTSCHLAND SPIELT GAME CENTER (Version: 1.0.0.46)
Die 4 Elemente II (Version: 1.0.0.0)
Die Chroniken von Emerland – Solitaire (Version: 1.0.0.0)
Die Chroniken von Shakespeare: Ein Sommernachtstraum (Version: 1.0.0.0)
Die Chroniken von Shakespeare: Romeo und Julia (Version: 1.0.0.0)
Die Erben von Arcanum (Version: 1.0.0.0)
Die Fisch-Oase H2O (Version: 1.0.0.0)
Die größten Heiligtümer der Welt - Mahjong (Version: 1.0.0.0)
Die Legende des Goldenen Buches (Version: 1.0.0.0)
Die Legende von Atlantis: Exodus (Version: 1.0.0.0)
Die Legende von Atlantis: Perlen aus der Tiefe (Version: 1.0.0.0)
Die Sage von Kolossus (Version: 1.0.0.0)
Die Spur des Erfinders (Version: 0.0.0.0)
Die Suche nach den Runensteinen (Version: 1.0.0.0)
Die Verlassenen Inseln (Version: 1.0.0.0)
Die Wiege Ägyptens (Version: 1.00.0000)
Die Wiege Olympias (Version: 0.0.0.0)
Die Wiege Olympias 2 (Version: 1.0.0.0)
Die Wiege Olympias 3 (Version: 1.0.0.0)
Die Wiege Roms (Version: 0.0.0.0)
Die Wiege Roms 2 (Version: 1.0.0.0)
Die Zauberhöhle (Version: 0.0.0.0)
DowNload kEeeper (Version: 2.1.0.1662)
DownloadnSave (Version: )
Dracula: Tödliche Liebe (Version: 1.0.0.0)
Dragon's Abode (Version: 1.0)
Dream Inn: Driftwood (Version: 1.0.0.0)
Dream Sleuth (Version: 1.0)
Dreamscapes: Der Sandmann (Version: 1.0.0.0)
Dreamscapes: Der Sandmann Sammleredition (Version: 1.0.0.0)
Dual-Core Optimizer (Version: 1.1.4.0169)
Einsame Herzen 2: Der Fluch der verlassenen Braut (Version: 1.0.0.0)
Elementals: Der Magische Schlüssel (Version: 1.0.0.0)
ElsterFormular (Version: 14.3.20130522)
Empress of the Deep (Version: 1.0.0.0)
Empress of the Deep 2: Der Gesang des Blauwals (Version: 1.0.0.0)
Eternity (Version: 1.0.0.0)
Ewige Reise: Das neue Atlantis (Version: 1.0.0.0)
Ewige Reise: Das neue Atlantis Sammleredition (Version: 1.0.0.0)
Exzellent, Eure Majestät! (Version: 1.0.0.0)
Farm Tribe 2: Jetzt wird geackert! (Version: 1.0.0.0)
Farmington Tales: Geschichten vom Land (Version: 1.0.0.0)
Farmscapes (Version: 1.0)
Farmscapes(TM) Premium Edition
Fiction Fixers: Der Fluch von Oz (Version: 1.0.0.0)
Firebird 2.5.0.26074 (Win32) (Version: 2.5.0.26074)
FlatOut2 (Version: 1.00.0000)
Fluch der Pharaonen (Version: 1.0.0.0)
Fraps (remove only)
Fremde Träume: Foreign Dreams (Version: 1.0.0.0)
G.H.O.S.T. Chronicles (Version: 0.0.0.0)
GameCatalog15.2013 (Version: 1.00.0000)
Gardenscapes – Gestalte dein Haus
Garten-Glück 2 (Version: 1.0.0.0)
Garten-Glück 2 Sammleredition (Version: 1.0.0.0)
Garten-Glück: Jetzt wird renoviert! (Version: 1.0.0.0)
Geflüsterte Geschichten: Die Zwillinge (Version: 1.0.0.0)
Geheime Fälle Trilogie (Version: 1.0.0.0)
Geheime Fälle: Die gestohlene Venus (Version: 0.0.0.0)
Geheime Fälle: Die gestohlene Venus 2 (Version: 1.0.0.0)
Geheime Fälle: Vermisst in Rom (Version: 1.0.0.0)
Geheimnis von Montezuma 3 (Version: 1.0.0.0)
Geheimnisse der Alchemisten: Der Golem von Prag (Version: 1.0.0.0)
Glyph 2 (Version: 0.0.0.0)
Goldfieber 3: Der Schatz des Schwarzen Ordens (Version: 1.0.0.0)
Google Chrome (Version: 31.0.1650.57)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4601.54)
Google Update Helper (Version: 1.3.21.165)
Gourmania 3 - Zoo Zoom (Version: 1.0)
Great Secrets - Da Vinci (Version: 1.0)
Heroes of Kalevala (Version: 1.0.0.0)
Herr des Wetters: Die verborgene Welt (Version: 1.0.0.0)
Hexus (Version: 1.0.0.0)
Hidden Magic (Version: 1.0.0.0)
Hidden World of Art 2 - Undercover Art Agent (Version: 1.0)
Hide and Secret 2 - Cliffhanger Castle (Version: 1.0)
Hide and Secret 4: Die verlorene Welt (Version: 1.0.0.0)
Hinter dem Spiegel (Version: 1.0.0.0)
Hinter dem Spiegel 2: Die Rache der Hexe (Version: 1.0.0.0)
Iminent (Version: 5.18.52.0)
IMinent Toolbar (Version: 3.26.0)
Insel der Feen - Fairy Island (Version: 1.0.0.0)
Insel der Runen (Version: 0.0.0.0)
Inspector Magnusson: Mord auf der Titanic (Version: 1.0.0.0)
Intel(R) Rapid Storage Technology (Version: 9.6.0.1014)
Isla Dorada – Episode 1: The Sands of Ephranis (Version: 1.0.0.0)
iTunes (Version: 11.0.5.5)
Jack of all Tribes (Version: 1.0.0.0)
Java Auto Updater (Version: 2.0.2.4)
Java(TM) 6 Update 21 (Version: 6.0.210)
Jewel Charm (Version: 1.0.0.0)
Jewel Legends – Tree of Life (Version: 1.0.0.0)
Jewel Match 2 (Version: 0.0.0.0)
Jewel Match 3 (Version: 1.0.0.0)
Jewel Match Winteredition (Version: 0.0.0.0)
Jewel Quest Mysteries (Version: 1.0.0.0)
Jewel Quest Mysteries II (Version: 1.0.0.0)
join.me (HKCU Version: 1.8.0.108)
Junk Mail filter update (Version: 14.0.8117.416)
Karthago 2 (Version: 0.0.0.0)
Kingdom Chronicles Sammleredition (Version: 1.0.0.0)
Königreich der Meerjungfrauen (Version: 1.0.0.0)
Land der Magie (Version: 1.0.0.0)
Laura Jones (Version: 0.0.0.0)
Lawn & Order: Die Gartenprofis (Version: 1.0.0.0)
Lawn and Order - Die Gartenprofis (Version: 1.00.0000)
Legacy Tales: Der schwarze Tod Sammleredition (Version: 1.0.0.0)
Legenden des Mahjong (Version: 1.0.0.0)
LogMeIn Hamachi (Version: 2.1.0.362)
Lost City of Aquatica (Version: 1.0)
Lost Souls: Die verzauberten Gemälde (Version: 1.0.0.0)
Luxor Adventures (Version: 1.0.0.0)
Magic Encyclopedia – Mondschein (Version: 1.0.0.0)
Magic Encyclopedia (Version: 0.0.0.0)
Magic Encyclopedia: Illusionen (Version: 1.0.0.0)
Magic Gem (Version: 1.0)
Margrave: Der Fluch des gebrochenen Herzens (Version: 1.0.0.0)
Margrave: Die Tochter des Schmieds (Version: 1.0.0.0)
Margrave: Die Tochter des Schmieds Sammleredition (Version: 1.0.0.0)
Masquerade Mysteries (Version: 1.0.0.0)
Medion Home Cinema (Version: 6.0.0000)
Mein Blütenparadies (Version: 0.0.0.0)
Meridian: Zeitalter der Erfindungen (Version: 1.0.0.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Corporation (Version: 9.1.0.0)
Microsoft LifeCam (Version: 3.60.253.0)
Microsoft Office 2010 (Version: 14.0.4763.1000)
Microsoft Search Enhancement Pack (Version: 3.0.127.0)
Microsoft Security Client (Version: 4.4.0304.0)
Microsoft Security Essentials (Version: 4.4.304.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft XNA Framework Redistributable 4.0 (Version: 4.0.20823.0)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
Midnight Mysteries: Salem Witch Trials (Version: 1.0.0.0)
Midnight Mysteries: Teufel auf dem Mississippi (Version: 1.0.0.0)
Minecraft - 1.6.4 Packages
Minecraft (Version: 1.6.1)
Moonbase Alpha
Moonlight Match: Eine zauberhafte Nacht (Version: 1.0.0.0)
Mortimer Beckett und das Geheimnis des Geisterhauses (Version: 1.0.0.0)
Mountain Crime: Die Vergeltung (Version: 1.0.0.0)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSI to redistribute MS VS2005 CRT libraries (Version: 8.0.50727.42)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
MTA:SA v1.3.3 (Version: v1.3.3)
Mystery Masterpiece: Der Mondstein (Version: 1.0.0.0)
Mystery Stories – Berge des Wahnsinns (Version: 1.0.0.0)
Mystery Stories: Berlin Nights (Version: 0.0.0.0)
Mystic Gallery (Version: 1.0)
Natalie Brooks - Secrets of Treasure House (Version: 1.0)
Nebel der Elfen 2 (Version: 0.0.0.0)
Need for Speed(TM) Hot Pursuit (Version: 1.0.0.0)
Need For Speed™ World (Version: 1.0.0.1353)
Neptunia (Version: 1.0)
Nightfall Mysteries: Die Ashburg-Verschwörung (Version: 1.0.0.0)
Nightmare on the Pacific (Version: 1.0.0.0)
Nightmares from the Deep: Die Schädelinsel (Version: 1.0.0.0)
Nora Roberts: Frühlingsträume (Version: 1.0.0.0)
NVIDIA PhysX v8.10.29 (Version: 8.10.29)
Odyssee ins Ungewisse (Version: 1.0.0.0)
Odysseus: Die Heimkehr (Version: 1.0.0.0)
OpenOffice 4.0.1 (Version: 4.01.9714)
Overwolf (Version: 0.46.271)
Paint.NET v3.5.10 (Version: 3.60.0)
PDF Settings CC (Version: 12.0)
PDF Settings CS6 (Version: 11.0)
Phantasmat (Version: 1.0.0.0)
PJ Pride Pet Detective (Version: 1.0)
PlayReady PC Runtime x86 (Version: 1.3.0)
Prinzessin Isabella: Die Rückkehr des Fluches Sammleredition (Version: 1.0.0.0)
QuickTime (Version: 7.74.80.86)
Rachel’s Retreat (Version: 1.0.0.0)
Rainbow Mystery (Version: 1.0)
Realtek Ethernet Controller Driver For Windows 7 (Version: 7.21.531.2010)
Realtek High Definition Audio Driver (Version: 6.0.1.6136)
Red Crow Mysteries: Legion (Version: 1.0.0.0)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0)
Rita James und das Rennen nach Shangri La (Version: 1.0.0.0)
Ritter Arthur III (Version: 1.0.0.0)
Robin’s Quest: Aufstieg einer Legende (Version: 1.0.0.0)
ROBLOX Player for User
ROBLOX Studio 2013 for User
Royal Trouble (Version: 1.0.0.0)
S4 League_EU (Version: 1.00.0000)
Sacra Terra 2: Der Kuss des Todes (Version: 1.0.0.0)
Sacra Terra 2: Der Kuss des Todes Sammleredition (Version: 1.0.0.0)
Safari (Version: 5.34.57.2)
SAM Broadcaster 2013 (Version: 2013)
Samantha Swift 4 (Version: 1.0.0.0)
Samantha Swift and the Hidden Roses of Athena (Version: 1.0.0.0)
Sandra Fleming Chronicles – Crystal Skulls (Version: 1.0.0.0)
Schätze der geheimnisvollen Insel: Das Geisterschiff (Version: 1.0.0.0)
Schätze der geheimnisvollen Insel: Die Tore des Schicksals (Version: 1.0.0.0)
Schatzjäger: Treasure Hunters (Version: 1.0.0.0)
Sea Legends: Geisterhaftes Licht (Version: 1.0.0.0)
Sea Legends: Geisterhaftes Licht Sammleredition (Version: 1.0.0.0)
Secret Empires of the Ancient World (Version: 1.0)
Secret Journeys - Cities of the World (Version: 1.0)
Shadows: Haus der 1000 Schatten (Version: 1.0.0.0)
Silentville: Jenseits der Zeit (Version: 1.0.0.0)
Skype Click to Call (Version: 6.3.11079)
Skype™ 6.11 (Version: 6.11.102)
Snap.Do (Version: 1.6.1.804)
Snap.Do Engine (HKCU Version: 1.6.1.804)
Snark Busters: Willkommen im Club (Version: 1.0.0.0)
SOE Web Installer (HKCU Version: 1.0.3.171)
Solars Abenteuer (Version: 1.0.0.0)
Solitaire Mystery - Stolen Power (Version: 1.0)
Sothink SWF Decompiler (Version: 7.0)
Sothink SWF Editor Version 1.0 (Version: 1.0)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Spiegelwelten 2: Vergessene Welten (Version: 1.0.0.0)
Spirits of Mystery: Der dunkle Minotaurus
Sprill & Ritchie (Version: 1.0.0.0)
Ss.Helper 1.74
Stadt der Angst (Version: 1.0.0.0)
Steam (Version: 1.0.0.0)
Stray Souls: Das Haus Der Puppen (Version: 1.0.0.0)
Tales of Lagoona: Waisen des Ozeans (Version: 1.0.0.0)
Tarot des Schicksals (Version: 1.0.0.0)
Tatort Museum (Version: 0.0.0.0)
Tatort Museum 2 (Version: 1.0.0.0)
TeamSpeak 3 Client (HKCU Version: 3.0.12)
TeamSpeak 3 Client (Version: 3.0.13.1)
TeamViewer 8 (Version: 8.0.17396)
Test Drive Unlimited 2
The Clockwork Man - The Hidden World (Version: 1.0)
The Enchanted Kingdom: Elisa’s Adventure (Version: 1.0.0.0)
The Fool (Version: 1.0.0.0)
The Path of Hercules (Version: 1.0)
The Tiny Bang Story (Version: 1.0.0.0)
Them: The Summoning (Version: 1.0.0.0)
Tibet Quest (Version: 1.0.0.0)
Time to Hurry: Nicole’s Story (Version: 1.0.0.0)
Tornado: Das Mysterium der magischen Höhle (Version: 1.0.0.0)
Treasure Masters, Inc.: Die verlorene Stadt (Version: 1.0.0.0)
Trügerische Zuflucht: White Haven Mysteries (Version: 1.0.0.0)
Trügerische Zuflucht: White Haven Mysteries Sammleredition (Version: 1.0.0.0)
Tulula: Die Legende des Vulkans (Version: 1.0.0.0)
Twisted Lands: Der Anfang (Version: 1.0.0.0)
Twisted: Verhexte Weihnacht (Version: 1.0.0.0)
Unity Web Player (HKCU Version: )
Unsolved Mystery Club: Ancient Astronauts (Version: 1.0.0.0)
Unsterbliche Liebe: Eine Vampirgeschichte (Version: 1.0.0.0)
Unterwasser-Spaß Sammleredition (Version: 1.0.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
VAFPlayer (Version: 1.6.8)
Val’Gor: The Beginning (Version: 1.0.0.0)
Vampirsaga 3: Der Ausbruch (Version: 1.0.0.0)
Vampirsaga: Willkommen in Hell Lock (Version: 1.0.0.0)
Verlorene Träume – Bedtime Stories (Version: 1.0.0.0)
Victorian Mysteries: Das Gelbe Zimmer (Version: 1.0.0.0)
Victorian Mysteries: Die Frau in Weiß (Version: 1.0.0.0)
Villa Banana (Version: 1.0)
VirtualDJ Home FREE (Version: 7.3)
VirtualDJ PRO Full (Version: 7.0.5)
Voodoo Whisperer: Fluch einer Legende (Version: 1.0.0.0)
Voodoo Whisperer: Fluch einer Legende Sammleredition (Version: 1.0.0.0)
Wajam (Version: 1.42) <==== ATTENTION
Weird Park: Unheimliche Märchen (Version: 1.0.0.0)
Where Angels Cry: Göttliche Tränen (Version: 1.0.0.0)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Call (Version: 14.0.8117.0416)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Fotogalerie (Version: 14.0.8117.416)
Windows Live Mail (Version: 14.0.8117.0416)
Windows Live Messenger (Version: 14.0.8117.0416)
Windows Live Movie Maker (Version: 14.0.8117.0416)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live Writer (Version: 14.0.8117.0416)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinRAR 4.11 (32-Bit) (Version: 4.11.0)
Woodville Chronicles (Version: 1.0)
World of Tanks
World Voyage (Version: 0.0.0.0)
XAMPP 1.7.7
Xara 3D Maker 7 (Version: 7.0.0.415)
Yontoo 1.10.02 (Version: 1.10.02)
Youda Mystery: Das Stanwick-Erbe (Version: 1.0.0.0)
==================== Restore Points =========================
19-11-2013 20:07:49 Windows Update
23-11-2013 19:31:27 DirectX wurde installiert
24-11-2013 09:34:58 Windows Update
27-11-2013 12:22:02 Windows Update
01-12-2013 13:17:04 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {056901E3-8112-47FB-87B9-8BB9008A33AE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-05-11] (Google Inc.)
Task: {20FD9C12-82D9-427A-BC31-89F4996AA86A} - System32\Tasks\Dealply => C:\Users\User\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe [2013-07-23] () <==== ATTENTION
Task: {29853E95-B6A4-464F-A160-42626AC495C7} - \AdobeFlashPlayerUpdate No Task File
Task: {34812D99-4D3D-4BE7-AA21-0EF9F15D7043} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe
Task: {598CF35B-07C7-46A1-B83A-867A807E6371} - \AdobeFlashPlayerUpdate 2 No Task File
Task: {6FE66035-609E-4576-988B-2D3A69A42F13} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: {7F89A69B-AD32-4B6B-8629-9DA676C012BB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {8BDE0047-E455-46FB-93DA-E1FA1BEFD66C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-05-11] (Google Inc.)
Task: {8E6800B5-1169-447E-AE78-440C14185D41} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\AVG\AVG PC TuneUp\OneClick.exe [2013-09-23] (AVG)
Task: {B23611E0-FD7C-4DF3-8539-C8FC02B71B4F} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-User => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-06-13] (Adobe Systems Incorporated)
Task: {C2A6C8E8-CBA5-4FEE-8EAE-3F02C2FA7DFC} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-Philipp => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-06-13] (Adobe Systems Incorporated)
Task: {D91F20B7-687E-4D03-B13B-85A509BAB804} - System32\Tasks\BonanzaDealsUpdate => C:\Program
Task: {DF049BFF-93B3-43F5-8A2F-DA6A933CB1B9} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\Windows\Tasks\Dealply.job => C:\Users\User\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE

FRST:
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-12-2013
Ran by User (administrator) on USER-PC on 01-12-2013 20:55:41
Running from C:\Users\User\Downloads\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS32.exe
() C:\xampp\mysql\bin\mysqld.exe
() C:\Windows\System32\PnkBstrA.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe
(Wajam) C:\Program Files\Wajam\Updater\WajamUpdater.exe
() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\loggingserver.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgemcx.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Iminent) C:\Program Files\Iminent\Iminent.exe
(Iminent) C:\Program Files\Iminent\Iminent.Messengers.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgui.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
() C:\Program Files\AVG Nation toolbar\vprot.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Overwolf) C:\Program Files\Overwolf\Overwolf.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft) C:\Program Files\Common Files\Overwolf\OverwolfHelper.exe
() C:\Program Files\Overwolf\Purplizer\Purplizer.exe
() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9288296 2010-06-14] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [LifeCam] - C:\Program Files\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation)
HKLM\...\Run: [Iminent] - C:\Program Files\Iminent\Iminent.exe [1073744 2012-04-27] (Iminent)
HKLM\...\Run: [IminentMessenger] - C:\Program Files\Iminent\Iminent.Messengers.exe [884816 2012-04-27] (Iminent)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472984 2013-06-13] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] - C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM\...\Run: [amd_dc_opt] - C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2013\avgui.exe [4411952 2013-09-23] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-05-15] (LogMeIn Inc.)
HKLM\...\Run: [Adobe Creative Cloud] - C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-09-03] (Adobe Systems Incorporated)
HKLM\...\Run: [vProt] - C:\Program Files\AVG Nation toolbar\vprot.exe [2403144 2013-10-02] ()
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-11] (Google Inc.)
HKCU\...\Run: [msnmsgr] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
HKCU\...\Run: [Steam] - C:\Program Files\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Spiele Post] - C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe [480328 2013-04-24] (Intenium)
HKCU\...\Run: [Exetender_148] - "C:\Program Files\FreeRide Games\GPlayer.exe" /schedule 300000
HKCU\...\Run: [Overwolf] - C:\Program Files\Overwolf\Overwolf.exe [35256 2013-11-11] (Overwolf)
MountPoints2: F - F:\HTC_Sync_Manager_PC.exe
MountPoints2: {06a1ef87-9b2b-11e1-bd81-74f06d6ce3f5} - I:\CD_Start.exe
MountPoints2: {a1c0b772-ec4b-11e2-93f6-6c626d887930} - F:\HTC_Sync_Manager_PC.exe
MountPoints2: {bca08001-db14-11e2-9878-6c626d887930} - F:\HTC_Sync_Manager_PC.exe
HKU\Default\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Default User\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Philipp\...\Run: [Akamai NetSession Interface] - C:\Users\Philipp\AppData\Local\Akamai\netsession_win.exe [ 2013-06-05] (Akamai Technologies, Inc.)
HKU\Philipp\...\Run: [msnmsgr] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe [ 2010-04-16] (Microsoft Corporation)
HKU\Philipp\...\Run: [RocketDock] - "C:\Program Files\RocketDock\RocketDock.exe"
HKU\Philipp\...\Run: [AVG-Secure-Search-Update_0913b] - C:\Users\Philipp\AppData\Roaming\AVG 0913b Campaign\AVG-Secure-Search-Update-0913b.exe /PROMPT --mid 7a32709e964f47d09a99bd2b2b6c90c3-ce3459d2a217299ab9ef231c670fdbc9aaf836df --CMPID 0913b
AppInit_DLLs: c:\progra~2\browse~1\261519~1.190\{c16c1~1\browse~1.dll  c:\progra~1\ssde96~1.hel\psupport.dll [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.iminent.com/?appid=621f0543-39d7-4a9b-9678-97a5138c5442
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKCU\Software\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = hxxp://search.iminent.com/?appid=621f0543-39d7-4a9b-9678-97a5138c5442
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://my.myplaycity.com/
URLSearchHook: HKLM - (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  No File
SearchScopes: HKLM - DefaultScope {48B8DEF1-1E31-45F0-8FE4-3F4EAE05D89A} URL =
SearchScopes: HKLM - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoSoftonic&dpid=SnapdoSoftonic&co=DE&userid=4a862d30-b900-4f96-946f-0abc704d6be1&searchtype=ds&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=bf3&chnl=bf3&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyDyE0EtC0CtCtB0DtA0E0EtN0D0Tzu0CtBtCzztN1L2XzutBtFtCtFtCtFtAtCtB&cr=1235926218
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=133&systemid=2&sr=0&q={searchTerms}
SearchScopes: HKLM - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=&ref=toolbox&q={searchTerms}
SearchScopes: HKCU - DefaultScope {48B8DEF1-1E31-45F0-8FE4-3F4EAE05D89A} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3176921&CUI=UN34220508943161820&UM=2
SearchScopes: HKCU - Backup.Old.DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoSoftonic&dpid=SnapdoSoftonic&co=DE&userid=4a862d30-b900-4f96-946f-0abc704d6be1&searchtype=ds&q={searchTerms}&installDate=01/01/1970
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A06E6C626D887930&affID=119982&tsp=4952
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {48B8DEF1-1E31-45F0-8FE4-3F4EAE05D89A} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3176921&CUI=UN34220508943161820&UM=2
SearchScopes: HKCU - {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} URL = hxxp://my.myplaycity.com/results.php?category=web&s={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} -  No File
BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: ADDICT-THING Class - {54D8A4DF-A11D-8CDF-95A0-3D9FC0AD3B81} - C:\ProgramData\ADDICT-THING\bhoclass.dll ()
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} -  No File
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} -  No File
BHO: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files\Iminent\Iminent.WebBooster.InternetExplorer.dll (Iminent)
BHO: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files\Wajam\IE\priam_bho.dll (Wajam)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: TheSea.TheSeaPlugin - {C585D593-E7F3-4852-A200-561686EE02E4} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Oracle)
BHO: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} -  No File
BHO: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC)
BHO: BonanzaDeals - {fe063412-bea4-4d76-8ed3-183be6220d17} - C:\Program Files\BonanzaDeals\BonanzaDealsIE.dll No File
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} -  No File
Toolbar: HKLM - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} -  No File
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - No Name - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  No File
Toolbar: HKLM - Funmoods Toolbar - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} -  No File
Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} -  No File
DPF: {4FF78044-96B4-4312-A5B7-FDA3CB328095}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\user.js
FF NewTab: hxxp://www.doko-search.com/?babsrc=NT_ss&mntrId=A06E6C626D887930&affID=125836&tsp=5038
FF DefaultSearchEngine: MyPlayCity
FF SearchEngineOrder.1: Delta Search
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SelectedSearchEngine: MyPlayCity
FF Homepage: hxxp://search.iminent.com/?appId=621f0543-39d7-4a9b-9678-97a5138c5442&lcid=1031&ref=homepage
FF Keyword.URL: hxxp://my.myplaycity.com/results.php?category=web&s=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\17.0.12\\npsitesafety.dll (AVG Technologies)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @nsroblox.roblox.com/launcher - C:\Users\User\AppData\Local\Roblox\Versions\version-090353e3882541ce\\NPRobloxProxy.dll ( ROBLOX Corporation)
FF Plugin HKCU: @soe.sony.com/installer,version=1.0.3 - C:\Users\User\AppData\LocalLow\Sony Online Entertainment\npsoe.dll ()
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\searchplugins\express-files-customized-web-search.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\searchplugins\myplaycity.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\searchplugins\SearchTheWeb.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions
FF Extension: OneClickDownloader - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\OneClickDownload@OneClickDownload.com
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\user.js
FF Extension: DowNload kEeeper - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\Extensions\ttsoyy.9my@tob-aypbxzi.co.uk
FF Extension: DealPly  Shopping - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\Extensions\{906000a4-88d9-4d52-b209-7a772970d91f}
FF Extension: BonanzaDeals - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rx4x1k3.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com

Chrome:
=======
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\User\AppData\Local\funmoods.crx
CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\User\AppData\Local\funmoods-speeddial.crx
CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonChrome.crx
CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\User\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM\...\Chrome\Extension: [flolnhkojafikhpkpidiphabnpgedplh] - C:\Users\User\AppData\Local\CRE\flolnhkojafikhpkpidiphabnpgedplh.crx
CHR HKLM\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - C:\Program Files\Iminent\Iminent.crx
CHR HKLM\...\Chrome\Extension: [iibmmjhgclhlahmjniokmhleigemjpbh] - C:\Users\User\AppData\Local\CRE\iibmmjhgclhlahmjniokmhleigemjpbh.crx
CHR HKLM\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\User\AppData\Local\Wajam\Chrome\wajam.crx
CHR HKLM\...\Chrome\Extension: [leocdeigfnkaojcapikdjcdbedcjmffc] - C:\Users\User\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Nation toolbar\ChromeExt\17.0.1.12\avg.crx
CHR HKLM\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Users\User\AppData\Local\Temp\YontooLayers.crx
CHR HKLM\...\Chrome\Extension: [nnolphifcgfkbkfdkmmhmlikpgmkblmh] - C:\ProgramData\DownloadnSave\nnolphifcgfkbkfdkmmhmlikpgmkblmh.crx
CHR HKLM\...\Chrome\Extension: [pbghnefoidjbbkjgafiimmiaaknpfnpe] - C:\ProgramData\ADDICT-THING\pbghnefoidjbbkjgafiimmiaaknpfnpe.crx
CHR HKLM\...\Chrome\Extension: [pmlghpafmmnmmkjdhacccolfgnkiboco] - C:\Program Files\1ClickDownload\oneclickdownloader10.crx

========================== Services (Whitelisted) =================

R2 Akamai; c:\program files\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.)
R2 Apache2.2; c:\xampp\apache\bin\httpd.exe [18432 2011-09-10] (Apache Software Foundation)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2010-09-17] (Firebird Project)
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [3735552 2010-09-17] (Firebird Project)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1435984 2013-05-15] (LogMeIn Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R2 mysql; c:\xampp\mysql\bin\my.ini [5396 2013-08-28] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
S3 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [18360 2013-11-11] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-05-20] ()
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [1740088 2013-09-23] (AVG)
R2 vToolbarUpdater17.0.12; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [1733448 2013-10-02] (AVG Secure Search)
R2 WajamUpdater; C:\Program Files\Wajam\Updater\WajamUpdater.exe [109064 2012-04-24] (Wajam)
S2 bonanzadealslive; C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe /svc [x]
S3 bonanzadealslivem; C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe /medsvc [x]
S3 iPod Service; "C:\Program Files\iPod\bin\iPodService.exe" [x]

==================== Drivers (Whitelisted) ====================

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [208184 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22328 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [39224 2013-09-05] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [182072 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-10-02] (AVG Technologies)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2013-09-18] (TuneUp Software)
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [x]
R1 MpKsl3ba84040; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6FA50BB3-87FE-4DDA-A6ED-20759B8DE30E}\MpKsl3ba84040.sys [x]
S3 uxddrv; \??\F:\uxddrv86.sys [x]
S3 XDva397; \??\C:\Windows\system32\XDva397.sys [x]
S3 XDva398; \??\C:\Windows\system32\XDva398.sys [x]
S3 XDva399; \??\C:\Windows\system32\XDva399.sys [x]
S3 XDva400; \??\C:\Windows\system32\XDva400.sys [x]
S3 XDva401; \??\C:\Windows\system32\XDva401.sys [x]
S3 XDva402; \??\C:\Windows\system32\XDva402.sys [x]
S3 XDva404; \??\C:\Windows\system32\XDva404.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-01 20:55 - 2013-12-01 20:55 - 00000000 ____D C:\FRST
2013-12-01 20:54 - 2013-12-01 20:55 - 01092187 _____ (Farbar) C:\Users\User\Downloads\FRST.exe
2013-12-01 11:15 - 2013-12-01 11:15 - 00001335 _____ C:\Users\Public\Desktop\Der Fluch von Montezuma.lnk
2013-12-01 10:26 - 2013-12-01 10:30 - 49131544 _____ (INTENIUM GmbH) C:\Users\User\Downloads\DerFluchVonMontezuma.exe
2013-12-01 10:21 - 2013-12-01 10:21 - 00001359 _____ C:\Users\Public\Desktop\Geheimnis von Montezuma 3.lnk
2013-12-01 09:48 - 2013-12-01 09:58 - 143369176 _____ (INTENIUM GmbH) C:\Users\User\Downloads\GeheimnisVonMontezuma3.exe
2013-11-30 15:21 - 2013-11-30 15:22 - 00142801 _____ C:\Users\User\Downloads\Minecraft.jar
2013-11-30 13:22 - 2013-11-30 14:07 - 636786640 _____ (INTENIUM GmbH) C:\Users\User\Downloads\DieChronikenVonShakespeare2.exe
2013-11-30 12:20 - 2013-11-30 12:21 - 00000000 ____D C:\Users\User\AppData\Local\Deadtime Stories
2013-11-30 12:16 - 2013-11-30 12:16 - 00000000 ____D C:\ProgramData\Deadtime Stories
2013-11-30 12:03 - 2013-11-30 12:13 - 119971176 _____ (INTENIUM GmbH) C:\Users\User\Downloads\DeadtimeStories.exe
2013-11-30 11:34 - 2013-11-30 11:47 - 192773048 _____ (INTENIUM GmbH) C:\Users\User\Downloads\NightmareOnThePacific.exe
2013-11-30 10:09 - 2013-11-30 10:24 - 210350064 _____ (INTENIUM GmbH) C:\Users\User\Downloads\SamanthaSwift4.exe
2013-11-29 16:38 - 2013-11-29 16:38 - 00000000 ____D C:\Users\User\AppData\Roaming\mp3DirectCut
2013-11-29 16:35 - 2013-11-29 16:35 - 00000000 ____D C:\Program Files\mpshit
2013-11-28 20:00 - 2013-11-28 20:00 - 00000000 ____D C:\MicroVolts Package
2013-11-28 19:54 - 2013-11-28 19:55 - 01679872 _____ (Rock Hippo Productions) C:\Users\User\Downloads\MicroVolts_Package.exe
2013-11-28 17:51 - 2013-11-28 17:53 - 10009073 _____ C:\Users\User\Downloads\After Effects Intro Template #3 -TFT.rar
2013-11-28 12:04 - 2013-11-28 12:04 - 00000342 _____ C:\Users\User\Downloads\attachments_20131128120403.zip
2013-11-27 19:00 - 2013-11-27 19:00 - 00002576 _____ C:\Users\User\Downloads\help.yml
2013-11-27 19:00 - 2013-11-27 19:00 - 00001252 _____ C:\Users\User\Downloads\spigot.yml
2013-11-27 19:00 - 2013-11-27 19:00 - 00001126 _____ C:\Users\User\Downloads\server.log
2013-11-27 19:00 - 2013-11-27 19:00 - 00001082 _____ C:\Users\User\Downloads\bukkit.yml
2013-11-27 19:00 - 2013-11-27 19:00 - 00000815 _____ C:\Users\User\Downloads\server.log.1
2013-11-27 19:00 - 2013-11-27 19:00 - 00000109 _____ C:\Users\User\Downloads\banned-players.txt
2013-11-27 19:00 - 2013-11-27 19:00 - 00000109 _____ C:\Users\User\Downloads\banned-ips.txt
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 ____D C:\Users\User\Downloads\plugins
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 _____ C:\Users\User\Downloads\white-list.txt
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 _____ C:\Users\User\Downloads\server.log.lck
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 _____ C:\Users\User\Downloads\server.log.1.lck
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 _____ C:\Users\User\Downloads\ops.txt
2013-11-27 18:55 - 2013-11-27 18:59 - 19394634 _____ C:\Users\User\Downloads\Server.rar
2013-11-24 16:30 - 2013-11-24 16:30 - 00000000 ____D C:\Users\User\AppData\Roaming\ERS Game Studios
2013-11-24 13:53 - 2013-11-24 13:53 - 00002203 _____ C:\Users\Public\Desktop\Spiel Spirits of Mystery - Der dunkle Minotaurus.lnk
2013-11-24 13:50 - 2013-11-24 13:53 - 00000000 ____D C:\Program Files\Spirits of Mystery - Der dunkle Minotaurus
2013-11-24 13:50 - 2013-11-24 13:50 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spirits of Mystery - Der dunkle Minotaurus
2013-11-24 13:49 - 2013-11-24 13:49 - 00001869 _____ C:\Users\Public\Desktop\Game Manager.lnk
2013-11-24 13:49 - 2013-11-24 13:49 - 00000000 ____D C:\Program Files\bfgclient
2013-11-23 20:43 - 2013-11-23 20:43 - 00000000 ____D C:\Users\User\Documents\Eden Games
2013-11-23 20:37 - 2013-11-23 20:37 - 00000000 ____D C:\Users\User\AppData\Local\CrashRpt
2013-11-23 20:33 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-11-23 20:24 - 2013-11-23 20:24 - 00001057 _____ C:\Users\Public\Desktop\Test Drive Unlimited 2.lnk
2013-11-23 20:09 - 2013-11-23 20:09 - 00000000 ____D C:\Program Files\Atari
2013-11-23 15:18 - 2013-11-23 15:18 - 00002211 _____ C:\Users\Public\Desktop\Play More Playrix Games!.lnk
2013-11-23 15:18 - 2013-11-23 15:18 - 00001339 _____ C:\Users\Public\Desktop\The Path of Hercules.lnk
2013-11-23 11:34 - 2013-11-23 11:34 - 00001227 _____ C:\Users\Public\Desktop\World Voyage.lnk
2013-11-20 18:13 - 2013-12-01 20:38 - 00000000 ____D C:\Users\User\AppData\Local\Purplizer
2013-11-20 18:11 - 2013-11-20 18:11 - 00001925 _____ C:\Users\Public\Desktop\Overwolf.lnk
2013-11-20 18:11 - 2013-11-20 18:11 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-11-20 18:11 - 2013-11-20 18:11 - 00000000 ____D C:\Program Files\Overwolf
2013-11-20 18:11 - 2013-11-20 18:11 - 00000000 ____D C:\Program Files\Common Files\Overwolf
2013-11-20 18:06 - 2013-12-01 20:37 - 00000000 ____D C:\Users\User\AppData\Local\Overwolf
2013-11-20 11:27 - 2013-11-20 11:27 - 00000000 ____D C:\Users\User\AppData\Local\Artogon
2013-11-17 19:04 - 2013-11-17 19:04 - 00000000 ____D C:\Users\User\AppData\Roaming\OpenOffice
2013-11-15 08:52 - 2013-11-15 08:53 - 00000000 ____D C:\Users\User\AppData\Local\Chronicles of Albian 2
2013-11-14 15:51 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 15:51 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 15:51 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 15:51 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 15:51 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 15:51 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 15:51 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 15:50 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 15:50 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 15:50 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 15:50 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 15:50 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 15:50 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 15:50 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 15:50 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 15:50 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 15:50 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 15:50 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-14 13:50 - 2013-11-14 13:51 - 00000438 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-11-12 11:04 - 2013-11-12 11:04 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-12 11:04 - 2013-11-12 11:04 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-12 11:04 - 2013-11-12 11:04 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-12 11:04 - 2013-11-12 11:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-12 11:04 - 2013-11-12 11:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-12 11:04 - 2013-11-12 11:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-12 11:03 - 2013-11-12 11:07 - 00010464 _____ C:\Windows\IE11_main.log
2013-11-08 20:47 - 2013-11-08 20:52 - 144752885 _____ C:\Users\Philipp\AppData\Local\ACCCx2_2_1_260.zip.aamdownload
2013-11-08 20:47 - 2013-11-08 20:52 - 00001817 _____ C:\Users\Philipp\AppData\Local\ACCCx2_2_1_260.zip.aamdownload.aamd
2013-11-05 18:01 - 2013-11-05 18:36 - 106246287 _____ C:\Users\Philipp\Downloads\Misa ResourcePack 1.6.4 and older (rw edit).zip
2013-11-05 17:59 - 2013-11-05 17:59 - 02161521 _____ C:\Users\Philipp\Downloads\MCpatcher.exe
2013-11-05 17:34 - 2013-11-05 17:46 - 89940403 _____ C:\Users\Philipp\Downloads\LB Photo Realism x256 10.0.0-converted-1374012707213.zip
2013-11-05 10:00 - 2013-11-05 10:00 - 00000000 ____D C:\Users\Public\Documents\intenium_de
2013-11-02 19:11 - 2013-11-02 19:27 - 00000000 ____D C:\Users\User\AppData\Local\fd
2013-11-02 11:45 - 2013-11-02 11:45 - 00000000 ____D C:\Users\User\AppData\Local\Murder on the Titanic
2013-11-01 18:54 - 2013-11-01 18:54 - 00000000 ____D C:\Users\User\AppData\Roaming\GO Games
2013-11-01 17:03 - 2013-11-01 17:03 - 00000000 ____D C:\Users\User\AppData\Roaming\VampireSagaHL

==================== One Month Modified Files and Folders =======

2013-12-01 20:55 - 2013-12-01 20:55 - 00000000 ____D C:\FRST
2013-12-01 20:55 - 2013-12-01 20:54 - 01092187 _____ (Farbar) C:\Users\User\Downloads\FRST.exe
2013-12-01 20:55 - 2012-05-11 06:39 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-01 20:52 - 2013-10-17 13:47 - 00000910 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-12-01 20:52 - 2012-05-16 18:12 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2013-12-01 20:48 - 2012-05-11 15:25 - 01806393 _____ C:\Windows\WindowsUpdate.log
2013-12-01 20:44 - 2013-07-23 17:44 - 00000286 _____ C:\Windows\Tasks\Dealply.job
2013-12-01 20:44 - 2009-07-14 05:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-01 20:44 - 2009-07-14 05:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-01 20:39 - 2013-07-27 12:28 - 00000000 ____D C:\ProgramData\MFAData
2013-12-01 20:38 - 2013-11-20 18:13 - 00000000 ____D C:\Users\User\AppData\Local\Purplizer
2013-12-01 20:37 - 2013-11-20 18:06 - 00000000 ____D C:\Users\User\AppData\Local\Overwolf
2013-12-01 20:37 - 2012-06-04 17:52 - 00000000 ____D C:\Users\User\Tracing
2013-12-01 20:36 - 2012-12-29 15:34 - 00000000 ____D C:\Program Files\Steam
2013-12-01 20:36 - 2012-05-17 07:53 - 00000000 ____D C:\Users\User\AppData\Local\LogMeIn Hamachi
2013-12-01 20:35 - 2013-10-17 13:47 - 00000906 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-12-01 20:35 - 2012-07-10 13:19 - 00000000 ____D C:\Program Files\Common Files\Akamai
2013-12-01 20:35 - 2012-05-11 06:39 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-01 20:34 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-01 20:34 - 2009-07-14 05:39 - 00145641 _____ C:\Windows\setupact.log
2013-12-01 17:42 - 2013-01-13 15:25 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2013-12-01 17:18 - 2013-10-02 15:02 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-01 17:12 - 2012-05-15 15:09 - 00000000 ____D C:\Users\User\AppData\Roaming\Adobe
2013-12-01 11:15 - 2013-12-01 11:15 - 00001335 _____ C:\Users\Public\Desktop\Der Fluch von Montezuma.lnk
2013-12-01 11:15 - 2013-09-14 10:19 - 00000000 ____D C:\Program Files\DEUTSCHLAND SPIELT
2013-12-01 11:15 - 2013-08-25 09:37 - 00000000 ____D C:\Users\User\AppData\Roaming\Friday's games
2013-12-01 11:15 - 2013-08-24 19:56 - 00001097 _____ C:\Users\Public\Desktop\GAME CENTER.lnk
2013-12-01 10:30 - 2013-12-01 10:26 - 49131544 _____ (INTENIUM GmbH) C:\Users\User\Downloads\DerFluchVonMontezuma.exe
2013-12-01 10:21 - 2013-12-01 10:21 - 00001359 _____ C:\Users\Public\Desktop\Geheimnis von Montezuma 3.lnk
2013-12-01 09:58 - 2013-12-01 09:48 - 143369176 _____ (INTENIUM GmbH) C:\Users\User\Downloads\GeheimnisVonMontezuma3.exe
2013-12-01 08:54 - 2012-06-20 13:10 - 00000000 ____D C:\Users\User\AppData\Local\Adobe
2013-11-30 19:09 - 2012-12-30 13:54 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-30 16:14 - 2012-06-20 14:26 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2013-11-30 15:22 - 2013-11-30 15:21 - 00142801 _____ C:\Users\User\Downloads\Minecraft.jar
2013-11-30 14:25 - 2012-05-16 18:11 - 00000000 ___RD C:\Program Files\Skype
2013-11-30 14:25 - 2012-05-16 18:11 - 00000000 ____D C:\ProgramData\Skype
2013-11-30 14:07 - 2013-11-30 13:22 - 636786640 _____ (INTENIUM GmbH) C:\Users\User\Downloads\DieChronikenVonShakespeare2.exe
2013-11-30 12:21 - 2013-11-30 12:20 - 00000000 ____D C:\Users\User\AppData\Local\Deadtime Stories
2013-11-30 12:16 - 2013-11-30 12:16 - 00000000 ____D C:\ProgramData\Deadtime Stories
2013-11-30 12:13 - 2013-11-30 12:03 - 119971176 _____ (INTENIUM GmbH) C:\Users\User\Downloads\DeadtimeStories.exe
2013-11-30 11:47 - 2013-11-30 11:34 - 192773048 _____ (INTENIUM GmbH) C:\Users\User\Downloads\NightmareOnThePacific.exe
2013-11-30 10:24 - 2013-11-30 10:09 - 210350064 _____ (INTENIUM GmbH) C:\Users\User\Downloads\SamanthaSwift4.exe
2013-11-29 16:38 - 2013-11-29 16:38 - 00000000 ____D C:\Users\User\AppData\Roaming\mp3DirectCut
2013-11-29 16:35 - 2013-11-29 16:35 - 00000000 ____D C:\Program Files\mpshit
2013-11-29 13:05 - 2013-03-10 19:25 - 00000000 ____D C:\Users\User\AppData\Roaming\ShamanGS
2013-11-29 09:09 - 2013-02-22 10:22 - 00000000 ____D C:\Users\User\AppData\Roaming\AlawarEntertainment
2013-11-28 20:00 - 2013-11-28 20:00 - 00000000 ____D C:\MicroVolts Package
2013-11-28 19:55 - 2013-11-28 19:54 - 01679872 _____ (Rock Hippo Productions) C:\Users\User\Downloads\MicroVolts_Package.exe
2013-11-28 18:10 - 2013-02-02 13:15 - 00000000 ____D C:\Fraps
2013-11-28 17:53 - 2013-11-28 17:51 - 10009073 _____ C:\Users\User\Downloads\After Effects Intro Template #3 -TFT.rar
2013-11-28 17:00 - 2012-09-05 17:05 - 00000000 ____D C:\Users\User\AppData\Local\Paint.NET
2013-11-28 12:04 - 2013-11-28 12:04 - 00000342 _____ C:\Users\User\Downloads\attachments_20131128120403.zip
2013-11-27 19:00 - 2013-11-27 19:00 - 00002576 _____ C:\Users\User\Downloads\help.yml
2013-11-27 19:00 - 2013-11-27 19:00 - 00001252 _____ C:\Users\User\Downloads\spigot.yml
2013-11-27 19:00 - 2013-11-27 19:00 - 00001126 _____ C:\Users\User\Downloads\server.log
2013-11-27 19:00 - 2013-11-27 19:00 - 00001082 _____ C:\Users\User\Downloads\bukkit.yml
2013-11-27 19:00 - 2013-11-27 19:00 - 00000815 _____ C:\Users\User\Downloads\server.log.1
2013-11-27 19:00 - 2013-11-27 19:00 - 00000109 _____ C:\Users\User\Downloads\banned-players.txt
2013-11-27 19:00 - 2013-11-27 19:00 - 00000109 _____ C:\Users\User\Downloads\banned-ips.txt
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 ____D C:\Users\User\Downloads\plugins
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 _____ C:\Users\User\Downloads\white-list.txt
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 _____ C:\Users\User\Downloads\server.log.lck
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 _____ C:\Users\User\Downloads\server.log.1.lck
2013-11-27 19:00 - 2013-11-27 19:00 - 00000000 _____ C:\Users\User\Downloads\ops.txt
2013-11-27 19:00 - 2013-09-22 14:23 - 00000616 _____ C:\Users\User\Downloads\server.properties
2013-11-27 18:59 - 2013-11-27 18:55 - 19394634 _____ C:\Users\User\Downloads\Server.rar
2013-11-27 16:20 - 2012-08-01 09:27 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\TS3Client
2013-11-27 16:20 - 2012-07-04 14:12 - 00000000 ____D C:\Users\Philipp\AppData\Local\LogMeIn Hamachi
2013-11-27 15:39 - 2012-10-23 14:37 - 00000000 ____D C:\Users\Philipp\Tracing
2013-11-27 15:39 - 2012-07-21 09:16 - 00000000 ____D C:\Users\Philipp\AppData\Local\Adobe
2013-11-26 15:33 - 2010-08-28 01:49 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-24 18:53 - 2013-05-19 09:39 - 00000000 ____D C:\BigFishGamesCache
2013-11-24 16:30 - 2013-11-24 16:30 - 00000000 ____D C:\Users\User\AppData\Roaming\ERS Game Studios
2013-11-24 14:25 - 2012-11-20 18:18 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-11-24 13:53 - 2013-11-24 13:53 - 00002203 _____ C:\Users\Public\Desktop\Spiel Spirits of Mystery - Der dunkle Minotaurus.lnk
2013-11-24 13:53 - 2013-11-24 13:50 - 00000000 ____D C:\Program Files\Spirits of Mystery - Der dunkle Minotaurus
2013-11-24 13:50 - 2013-11-24 13:50 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spirits of Mystery - Der dunkle Minotaurus
2013-11-24 13:49 - 2013-11-24 13:49 - 00001869 _____ C:\Users\Public\Desktop\Game Manager.lnk
2013-11-24 13:49 - 2013-11-24 13:49 - 00000000 ____D C:\Program Files\bfgclient
2013-11-23 20:43 - 2013-11-23 20:43 - 00000000 ____D C:\Users\User\Documents\Eden Games
2013-11-23 20:37 - 2013-11-23 20:37 - 00000000 ____D C:\Users\User\AppData\Local\CrashRpt
2013-11-23 20:24 - 2013-11-23 20:24 - 00001057 _____ C:\Users\Public\Desktop\Test Drive Unlimited 2.lnk
2013-11-23 20:09 - 2013-11-23 20:09 - 00000000 ____D C:\Program Files\Atari
2013-11-23 15:18 - 2013-11-23 15:18 - 00002211 _____ C:\Users\Public\Desktop\Play More Playrix Games!.lnk
2013-11-23 15:18 - 2013-11-23 15:18 - 00001339 _____ C:\Users\Public\Desktop\The Path of Hercules.lnk
2013-11-23 15:17 - 2013-05-11 17:49 - 00000000 ____D C:\Program Files\Playrix Entertainment
2013-11-23 14:58 - 2012-09-09 12:21 - 00000000 ____D C:\ProgramData\Solidshield
2013-11-23 11:34 - 2013-11-23 11:34 - 00001227 _____ C:\Users\Public\Desktop\World Voyage.lnk
2013-11-23 11:34 - 2013-08-02 11:09 - 00000000 ____D C:\Users\User\AppData\Roaming\Sahmon Games
2013-11-22 21:38 - 2013-03-01 18:15 - 00000000 ____D C:\Users\User\AppData\Roaming\YoudaGames
2013-11-22 18:02 - 2012-09-16 08:59 - 00002004 ____H C:\Users\User\Documents\Default.rdp
2013-11-22 17:58 - 2013-09-17 13:36 - 00000000 ____D C:\ProgramData\Big Fish
2013-11-22 17:58 - 2013-09-17 13:32 - 00000000 ____D C:\BigFishCache
2013-11-22 17:10 - 2012-07-04 14:17 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Skype
2013-11-20 18:11 - 2013-11-20 18:11 - 00001925 _____ C:\Users\Public\Desktop\Overwolf.lnk
2013-11-20 18:11 - 2013-11-20 18:11 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-11-20 18:11 - 2013-11-20 18:11 - 00000000 ____D C:\Program Files\Overwolf
2013-11-20 18:11 - 2013-11-20 18:11 - 00000000 ____D C:\Program Files\Common Files\Overwolf
2013-11-20 11:27 - 2013-11-20 11:27 - 00000000 ____D C:\Users\User\AppData\Local\Artogon
2013-11-19 21:09 - 2012-05-17 16:40 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-19 21:09 - 2012-05-17 16:39 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-19 19:01 - 2013-09-04 16:19 - 00000185 _____ C:\Users\User\Downloads\conf1.txt
2013-11-19 19:01 - 2013-09-04 16:19 - 00000060 _____ C:\Users\User\Downloads\conf4.txt
2013-11-19 19:01 - 2013-09-04 16:19 - 00000060 _____ C:\Users\User\Downloads\conf3.txt
2013-11-19 19:01 - 2013-09-04 16:19 - 00000060 _____ C:\Users\User\Downloads\conf2.txt
2013-11-19 19:01 - 2013-09-04 16:19 - 00000003 _____ C:\Users\User\Downloads\lastactivemap.txt
2013-11-19 13:19 - 2013-10-08 10:15 - 00000000 ____D C:\Users\User\AppData\Roaming\quickclick
2013-11-19 11:21 - 2010-08-30 17:46 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-19 10:50 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-11-18 10:46 - 2013-09-13 13:37 - 00000000 ____D C:\Users\User\AppData\Roaming\MagicIndie
2013-11-18 07:57 - 2010-08-30 10:48 - 00064004 _____ C:\Windows\PFRO.log
2013-11-17 19:23 - 2013-10-30 12:41 - 00000000 ____D C:\Users\User\AppData\Roaming\Playrix Entertainment
2013-11-17 19:04 - 2013-11-17 19:04 - 00000000 ____D C:\Users\User\AppData\Roaming\OpenOffice
2013-11-17 19:01 - 2013-08-07 08:20 - 00000000 ____D C:\Program Files\MyPlayCity.com
2013-11-17 19:00 - 2012-06-30 16:37 - 00000000 ____D C:\Program Files\Lokas
2013-11-17 18:58 - 2012-05-24 17:07 - 00000000 ____D C:\Users\User\AppData\Roaming\Solveig Multimedia
2013-11-17 18:57 - 2012-07-15 12:31 - 00000000 ____D C:\Users\User\AppData\Local\Conduit
2013-11-17 18:52 - 2012-06-04 17:52 - 00000000 ____D C:\Program Files\IMinent Toolbar
2013-11-17 18:44 - 2012-08-09 17:05 - 00000000 ____D C:\Program Files\alaplaya
2013-11-17 18:42 - 2013-09-29 13:42 - 00000000 ____D C:\Program Files\AVG Nation toolbar
2013-11-17 08:20 - 2009-07-14 05:33 - 03768608 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 14:37 - 2013-06-17 10:51 - 00000000 ____D C:\Users\User\AppData\Roaming\Deep Shadows
2013-11-15 08:53 - 2013-11-15 08:52 - 00000000 ____D C:\Users\User\AppData\Local\Chronicles of Albian 2
2013-11-15 07:54 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 21:20 - 2013-08-14 10:26 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 21:16 - 2010-08-30 17:47 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 13:51 - 2013-11-14 13:50 - 00000438 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-11-14 13:50 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2013-11-14 13:47 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Public\Libraries
2013-11-14 13:40 - 2012-07-10 13:22 - 00000000 ____D C:\Users\Philipp\AppData\Local\Akamai
2013-11-13 16:32 - 2013-08-01 15:36 - 00000066 _____ C:\Users\Philipp\Downloads\conf1.txt
2013-11-13 16:32 - 2013-08-01 15:36 - 00000060 _____ C:\Users\Philipp\Downloads\conf4.txt
2013-11-13 16:32 - 2013-08-01 15:36 - 00000060 _____ C:\Users\Philipp\Downloads\conf3.txt
2013-11-13 16:32 - 2013-08-01 15:36 - 00000060 _____ C:\Users\Philipp\Downloads\conf2.txt
2013-11-13 16:32 - 2013-08-01 15:36 - 00000003 _____ C:\Users\Philipp\Downloads\lastactivemap.txt
2013-11-13 13:33 - 2013-02-21 14:47 - 00000000 ____D C:\ProgramData\Cateia Games
2013-11-13 13:10 - 2013-01-31 14:25 - 00000000 _____ C:\END
2013-11-12 11:07 - 2013-11-12 11:03 - 00010464 _____ C:\Windows\IE11_main.log
2013-11-12 11:04 - 2013-11-12 11:04 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-12 11:04 - 2013-11-12 11:04 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-12 11:04 - 2013-11-12 11:04 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-12 11:04 - 2013-11-12 11:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-12 11:04 - 2013-11-12 11:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-12 11:04 - 2013-11-12 11:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-12 11:04 - 2013-11-12 11:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-12 11:04 - 2013-11-12 11:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-12 10:29 - 2013-04-12 17:24 - 00000000 ____D C:\ProgramData\Meridian93
2013-11-12 10:28 - 2013-02-23 13:48 - 00000000 ____D C:\Users\User\AppData\Roaming\Meridian93
2013-11-11 15:54 - 2013-07-05 11:07 - 00000000 ____D C:\Users\User\AppData\Roaming\JoyBits
2013-11-10 12:58 - 2013-10-30 14:08 - 00000000 ____D C:\Users\User\AppData\Roaming\Artifex Mundi
2013-11-08 20:52 - 2013-11-08 20:47 - 144752885 _____ C:\Users\Philipp\AppData\Local\ACCCx2_2_1_260.zip.aamdownload
2013-11-08 20:52 - 2013-11-08 20:47 - 00001817 _____ C:\Users\Philipp\AppData\Local\ACCCx2_2_1_260.zip.aamdownload.aamd
2013-11-08 14:32 - 2013-09-15 11:59 - 00000000 ____D C:\Users\User\AppData\Roaming\Gogii Games
2013-11-07 14:10 - 2013-02-17 15:28 - 00000000 ____D C:\ProgramData\Playrix Entertainment
2013-11-06 18:21 - 2012-07-04 14:46 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\.minecraft
2013-11-06 16:20 - 2012-09-15 20:26 - 00002006 ____H C:\Users\Philipp\Documents\Default.rdp
2013-11-05 18:36 - 2013-11-05 18:01 - 106246287 _____ C:\Users\Philipp\Downloads\Misa ResourcePack 1.6.4 and older (rw edit).zip
2013-11-05 17:59 - 2013-11-05 17:59 - 02161521 _____ C:\Users\Philipp\Downloads\MCpatcher.exe
2013-11-05 17:46 - 2013-11-05 17:34 - 89940403 _____ C:\Users\Philipp\Downloads\LB Photo Realism x256 10.0.0-converted-1374012707213.zip
2013-11-05 11:44 - 2013-10-29 13:24 - 00000000 ____D C:\Users\Public\Documents\intenium
2013-11-05 10:00 - 2013-11-05 10:00 - 00000000 ____D C:\Users\Public\Documents\intenium_de
2013-11-05 08:25 - 2013-02-17 15:28 - 00000000 ____D C:\ProgramData\Intenium
2013-11-04 13:41 - 2013-07-24 07:53 - 00000000 ____D C:\Users\User\AppData\Roaming\Freeze Tag
2013-11-04 10:59 - 2013-10-29 12:11 - 00000000 ____D C:\Users\User\AppData\Roaming\Daedalic Entertainment
2013-11-04 08:46 - 2013-06-24 12:57 - 00000000 ____D C:\Users\User\AppData\Roaming\Gogii
2013-11-02 19:27 - 2013-11-02 19:11 - 00000000 ____D C:\Users\User\AppData\Local\fd
2013-11-02 11:45 - 2013-11-02 11:45 - 00000000 ____D C:\Users\User\AppData\Local\Murder on the Titanic
2013-11-01 18:54 - 2013-11-01 18:54 - 00000000 ____D C:\Users\User\AppData\Roaming\GO Games
2013-11-01 17:03 - 2013-11-01 17:03 - 00000000 ____D C:\Users\User\AppData\Roaming\VampireSagaHL
2013-11-01 10:56 - 2013-06-26 18:19 - 00000000 ____D C:\Users\User\AppData\Roaming\ElementalsTheMagicKey
2013-11-01 09:45 - 2013-06-21 20:45 - 00000000 ____D C:\Users\User\AppData\Roaming\4 Friends Games
2013-11-01 08:44 - 2012-12-29 15:34 - 00000000 ____D C:\Program Files\Common Files\Steam

Some content of TEMP:
====================
C:\Users\Philipp\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\Philipp\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\Philipp\AppData\Local\Temp\i4jdel0.exe
C:\Users\Philipp\AppData\Local\Temp\i4jdel1.exe
C:\Users\Philipp\AppData\Local\Temp\ICReinstall_ImageEditorSetup.exe
C:\Users\Philipp\AppData\Local\Temp\jansi-32-git-Bukkit-1.3.1-R1.0-b2320jnks.dll
C:\Users\Philipp\AppData\Local\Temp\jansi-32-git-Bukkit-1.5.2-R0.1-1-g53734d2-b2779jnks.dll
C:\Users\Philipp\AppData\Local\Temp\jline_git-Bukkit-1_2_4-R1_0-b2126jnks.dll
C:\Users\Philipp\AppData\Local\Temp\setup.exe
C:\Users\Philipp\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Philipp\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\BackupSetup.exe
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\jansi-32-git-Spigot-10.dll
C:\Users\User\AppData\Local\Temp\tbexp0.dll
C:\Users\User\AppData\Local\Temp\tempmessage.bfg


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-20 14:26

==================== End Of Log ============================
--- --- ---

schrauber 02.12.2013 11:42
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307


Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Striker(x44) 02.12.2013 17:15
Das Problem ist gestern von selbst weg gegangen. Trozdem danke

schrauber 03.12.2013 10:15
ok :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:06 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132