Trojaner-Board - Windows 7,Unbekantes Programm namens SavingBull lässt sich nicht Entfernen....

FRST =
FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02

Ran by MichaelSchaper (administrator) on PASCAL on 01-03-2014 12:26:34

Running from C:\Users\MichaelSchaper\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe

() C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\xampp\mysql\bin\mysqld.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

() c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe

(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(LogMeIn, Inc.) D:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2000-01-01] (VIA)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-21] (AVAST Software)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-12-25] (Microsoft Corporation)

HKU\S-1-5-21-1505871448-3347223120-3397598552-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD47EA6487CFECE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: IEOptimizer - {10AD2C61-0898-4348-8600-14A342F22AC3} - C:\Program Files (x86)\SavingsBull\IEOptimizer.dll No File

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File

CHR Extension: (Google Drive) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-21]

CHR Extension: (YouTube) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-21]

CHR Extension: (Google-Suche) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-21]

CHR Extension: (GFACE Experience Plugin) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol [2014-01-09]

CHR Extension: (avast! Online Security) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-21]

CHR Extension: (Google Wallet) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-21]

CHR Extension: (Battlefield Play4Free) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2014-01-29]

CHR Extension: (Google Mail) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-21]

CHR Extension: (Abstract-Blue) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa [2013-12-21]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-21]
 

==================== Services (Whitelisted) =================
 

R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2013-11-21] (Apache Software Foundation)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-21] (AVAST Software)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-19] ()

R2 Hamachi2Svc; D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2224976 2014-02-26] (LogMeIn Inc.)

R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [710976 2014-01-27] ()

R2 mysql; C:\xampp\mysql\bin\mysqld.exe [10956800 2013-09-10] ()

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-01-04] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-02-15] ()

R2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [210432 2014-02-12] ()

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2000-01-01] (VIA Technologies, Inc.)

S2 WiseBootAssistant; D:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2014-01-21] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-21] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-21] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-21] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-21] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-21] (AVAST Software)

R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-21] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-21] ()

S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2014-01-26] (hxxp://libusb-win32.sourceforge.net)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()

R1 Netfilter64; C:\Windows\System32\drivers\Netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

R3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-03-01 12:26 - 2014-03-01 12:26 - 00010801 _____ () C:\Users\MichaelSchaper\Desktop\FRST.txt

2014-03-01 12:18 - 2014-03-01 12:18 - 00000000 ___DC () C:\FRST

2014-03-01 12:17 - 2014-03-01 12:17 - 02155520 _____ (Farbar) C:\Users\MichaelSchaper\Desktop\FRST64.exe

2014-03-01 10:40 - 2014-03-01 10:40 - 00108296 _____ () C:\Users\MichaelSchaper\AppData\Local\GDIPFONTCACHEV1.DAT

2014-03-01 10:40 - 2014-03-01 10:40 - 00000000 ____C () C:\autoexec.bat

2014-03-01 10:39 - 2014-03-01 10:39 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-03-01 10:38 - 2014-03-01 11:48 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP

2014-03-01 10:36 - 2014-03-01 10:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\MichaelSchaper\Downloads\SpyHunter-Installer.exe

2014-03-01 09:40 - 2014-03-01 10:40 - 00003205 _____ () C:\Windows\WindowsUpdate.log

2014-02-27 20:51 - 2014-02-27 20:51 - 00000000 ____D () C:\Program Files\SavingsbullFilter

2014-02-27 16:37 - 2014-02-27 16:37 - 00000681 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2014-02-26 20:51 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-02-26 20:51 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-02-26 20:51 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-02-26 20:51 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-02-26 20:49 - 2014-02-26 20:51 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-02-26 14:03 - 2014-03-01 09:38 - 00003152 _____ () C:\Windows\System32\Tasks\FRAPS

2014-02-26 13:32 - 2014-03-01 12:26 - 24522349 _____ () C:\Windows\system32\SavingsBullFilterService.log

2014-02-26 13:32 - 2014-02-26 13:32 - 00000000 _____ () C:\Windows\SysWOW64\Service.log

2014-02-26 13:32 - 2014-02-26 13:32 - 00000000 _____ () C:\Windows\system32\Service.log

2014-02-26 13:31 - 2014-02-26 13:31 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-02-26 11:43 - 2014-02-28 18:21 - 00000430 _____ () C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job

2014-02-26 11:43 - 2014-02-26 11:53 - 00003176 _____ () C:\Windows\System32\Tasks\Wise Care 365 PC Checkup Task

2014-02-26 11:43 - 2014-02-26 11:43 - 00003254 _____ () C:\Windows\System32\Tasks\Wise Turbo Checker

2014-02-26 11:43 - 2014-02-26 11:43 - 00000420 _____ () C:\Windows\Tasks\Wise Turbo Checker.job

2014-02-26 11:31 - 2014-03-01 09:49 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Wise Care 365

2014-02-26 11:31 - 2014-02-26 11:31 - 00000835 _____ () C:\Users\Public\Desktop\Wise Care 365.lnk

2014-02-25 18:50 - 2014-02-25 18:50 - 00000000 ____D () C:\Windows\pss

2014-02-24 17:39 - 2014-02-24 17:39 - 00631050 _____ () C:\Users\MichaelSchaper\Desktop\ThrottleStop_600.zip

2014-02-23 21:26 - 2014-02-23 21:26 - 00007605 _____ () C:\Users\MichaelSchaper\AppData\Local\Resmon.ResmonCfg

2014-02-22 18:44 - 2014-02-22 18:44 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Razer

2014-02-22 18:44 - 2014-02-22 18:44 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Razer_Inc

2014-02-22 18:40 - 2014-02-23 20:57 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Razer

2014-02-22 18:39 - 2014-02-23 20:57 - 00000000 ____D () C:\ProgramData\Razer

2014-02-22 18:30 - 2014-02-22 18:31 - 00000000 ____D () C:\Program Files\Defraggler

2014-02-22 18:30 - 2014-02-22 18:30 - 00001724 _____ () C:\Users\Public\Desktop\Defraggler.lnk

2014-02-21 21:50 - 2014-02-21 21:50 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\SimCity

2014-02-21 20:57 - 2014-02-28 20:18 - 00008142 _____ () C:\Users\MichaelSchaper\AppData\Roaming\TheHunterSettings_live.bin

2014-02-21 20:55 - 2014-02-28 19:25 - 00000040 _____ () C:\Users\MichaelSchaper\AppData\Roaming\TheHunterSettings_live.cfg

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\theHunter

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\theHunter

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\theHunter

2014-02-21 20:10 - 2014-02-21 20:10 - 00000000 ____D () C:\ProgramData\Hunter

2014-02-20 20:36 - 2014-02-20 20:36 - 00000497 _____ () C:\Users\Public\Desktop\OMSI.lnk

2014-02-20 20:08 - 2014-02-20 20:08 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-02-20 20:07 - 2014-02-08 17:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-02-20 20:03 - 2014-02-20 20:03 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Bus Simulator 2012

2014-02-20 20:03 - 2014-02-20 20:03 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Bus Simulator 2012

2014-02-20 19:52 - 2014-02-08 19:34 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-02-20 19:52 - 2014-02-08 19:34 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-02-18 15:17 - 2014-02-18 15:18 - 00017814 ____C () C:\ReallifeScript.amx

2014-02-16 12:26 - 2014-02-16 12:26 - 00001097 _____ () C:\Users\MichaelSchaper\Desktop\Origin - Verknüpfung.lnk

2014-02-16 12:21 - 2014-02-16 12:21 - 00003178 _____ () C:\Windows\System32\Tasks\JetCleanLoginCheckUpdate

2014-02-16 12:21 - 2014-02-16 12:21 - 00000830 _____ () C:\Users\Public\Desktop\JetClean.lnk

2014-02-15 14:23 - 2014-02-15 15:07 - 00000000 ____C () C:\dfu.log

2014-02-15 14:20 - 2014-02-15 14:20 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Gameforge4d

2014-02-15 13:53 - 2014-02-15 13:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Criterion Games

2014-02-15 02:54 - 2014-02-15 02:54 - 00000000 __RHD () C:\Users\MichaelSchaper\AppData\Roaming\SecuROM

2014-02-15 02:32 - 2014-02-15 02:32 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Electronic Arts

2014-02-15 02:32 - 2014-02-15 02:32 - 00000000 ____D () C:\ProgramData\EA Core

2014-02-15 02:31 - 2014-02-15 02:27 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll

2014-02-15 02:30 - 2014-02-15 02:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE

2014-02-15 01:38 - 2014-02-15 01:38 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\WarThunder

2014-02-15 01:38 - 2014-02-15 01:38 - 00000000 ____D () C:\ProgramData\WarThunder

2014-02-14 21:06 - 2014-02-14 21:09 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\.technic

2014-02-14 19:27 - 2014-02-14 19:27 - 00000000 ____D () C:\ProgramData\MTA San Andreas All

2014-02-12 21:46 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-12 21:46 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-12 21:45 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-12 21:45 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-12 21:45 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-12 21:45 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-12 21:45 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-12 21:45 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-12 21:45 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-12 21:45 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-12 21:45 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-12 21:45 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-12 21:45 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-12 21:45 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-12 21:45 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-12 21:45 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-12 21:45 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-12 21:45 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-12 21:45 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-12 21:45 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-12 21:45 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-12 21:45 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-12 21:45 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-12 21:45 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-12 21:45 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-12 21:45 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-12 21:45 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-12 21:45 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-12 21:45 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-12 21:45 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-12 21:45 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-12 21:45 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-12 21:45 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-12 21:45 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-12 21:45 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-12 21:45 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-12 21:45 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-12 21:45 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-12 21:45 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-12 21:45 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-12 21:45 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-12 16:04 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls

2014-02-12 16:04 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-12 16:04 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-12 16:04 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-12 16:04 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-02-12 16:04 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-02-12 16:04 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-12 16:04 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-12 16:04 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-12 16:04 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-12 16:04 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-12 16:04 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-12 16:04 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-12 16:04 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-12 16:04 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-12 16:04 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2014-02-12 16:04 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2014-02-12 16:04 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-02-12 16:04 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2014-02-12 16:04 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-02-12 16:04 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2014-02-12 16:04 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2014-02-12 16:04 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-02-12 16:04 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-02-12 16:03 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-02-12 16:03 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-12 16:03 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-02-12 16:03 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-09 12:47 - 2014-02-09 12:57 - 00000804 _____ () C:\Users\MichaelSchaper\Desktop\SAMP Scripting Hilfe.txt

2014-02-08 15:48 - 2014-02-08 15:48 - 00021235 ____C () C:\SelfmadeScript.amx

2014-02-07 23:32 - 2014-02-07 23:32 - 00000903 _____ () C:\Users\MichaelSchaper\Desktop\xampp-control.lnk

2014-02-07 23:24 - 2014-02-07 23:39 - 00000000 ____D () C:\xampp

2014-02-07 17:51 - 2014-02-07 17:51 - 00000784 _____ () C:\Users\MichaelSchaper\Desktop\SA-MP Colorpicker.lnk

2014-02-07 17:51 - 2014-02-07 17:51 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker

2014-02-07 16:52 - 2014-02-07 16:52 - 00001132 _____ () C:\Users\MichaelSchaper\Desktop\Server Starten.lnk

2014-02-06 21:10 - 2014-02-23 20:57 - 00000000 ____D () C:\Program Files (x86)\NCH Software

2014-02-06 21:10 - 2014-02-13 21:10 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software

2014-02-06 21:10 - 2014-02-06 21:10 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\NCH Software

2014-02-06 21:10 - 2014-02-06 21:10 - 00000000 ____D () C:\ProgramData\NCH Software

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\MAGIX_MusicEditor

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Xara

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Magix

2014-02-06 19:50 - 2014-02-06 19:58 - 00000000 ___RD () C:\Users\MichaelSchaper\Documents\MAGIX

2014-02-06 19:50 - 2014-02-06 19:58 - 00000000 ____D () C:\ProgramData\MAGIX

2014-02-06 19:50 - 2014-02-06 19:50 - 00000000 ____D () C:\Program Files (x86)\MAGIX

2014-02-06 19:49 - 2014-02-06 19:49 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0

2014-02-06 19:33 - 2014-02-06 19:58 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\MAGIX

2014-02-06 18:42 - 2014-02-28 22:34 - 00000000 ____D () C:\Users\MichaelSchaper\Desktop\teamspeak3-server_win64

2014-02-06 18:40 - 2014-02-28 16:48 - 00000000 ____D () C:\ProgramData\boost_interprocess

2014-02-06 17:48 - 2014-02-26 14:03 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps

2014-02-06 17:48 - 2014-02-06 17:48 - 00000560 _____ () C:\Users\MichaelSchaper\Desktop\Fraps.lnk

2014-02-06 17:31 - 2014-02-06 17:31 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Publish Providers

2014-02-06 17:24 - 2014-02-06 17:29 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Sony

2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Sony

2014-02-06 17:08 - 2014-02-06 17:27 - 00000000 ____D () C:\ProgramData\Sony

2014-02-06 17:07 - 2014-03-01 00:27 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Sony

2014-02-05 17:28 - 2014-02-05 17:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Dxtory Software

2014-02-05 17:28 - 2013-02-15 22:44 - 08300544 _____ (Dxtory Software) C:\Windows\SysWOW64\DxtoryCodec.dll

2014-02-05 17:28 - 2013-02-15 22:44 - 08043008 _____ (Dxtory Software) C:\Windows\system32\DxtoryCodec.dll

2014-02-05 17:24 - 2014-02-05 17:24 - 00715038 _____ () C:\Windows\unins000.exe

2014-02-05 17:24 - 2014-02-05 17:24 - 00001997 _____ () C:\Windows\unins000.dat

2014-02-05 17:24 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll

2014-02-05 17:24 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll

2014-02-03 19:43 - 2014-02-03 19:43 - 00002042 ____C () C:\pascatotal.amx

2014-02-03 19:22 - 2014-02-08 23:12 - 00000000 ____D () C:\Users\MichaelSchaper\Desktop\SampServer

2014-02-03 15:37 - 2014-02-03 15:38 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\paul.bv96@yahoo.com

2014-02-02 10:10 - 2014-02-02 10:10 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\America's Army

2014-02-02 10:08 - 2014-02-02 10:08 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00000000 ____D () C:\Program Files (x86)\OpenAL

2014-02-01 22:28 - 2014-02-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Square Enix

2014-02-01 22:28 - 2014-02-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\CrashRpt

2014-01-31 09:53 - 2013-02-03 07:49 - 00412160 _____ () C:\Users\MichaelSchaper\Desktop\samp.exe
 

==================== One Month Modified Files and Folders =======
 

2014-03-01 12:26 - 2014-03-01 12:26 - 00010801 _____ () C:\Users\MichaelSchaper\Desktop\FRST.txt

2014-03-01 12:26 - 2014-02-26 13:32 - 24522349 _____ () C:\Windows\system32\SavingsBullFilterService.log

2014-03-01 12:21 - 2013-12-22 11:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Skype

2014-03-01 12:18 - 2014-03-01 12:18 - 00000000 ___DC () C:\FRST

2014-03-01 12:17 - 2014-03-01 12:17 - 02155520 _____ (Farbar) C:\Users\MichaelSchaper\Desktop\FRST64.exe

2014-03-01 12:02 - 2013-12-21 19:45 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-03-01 11:56 - 2013-12-21 19:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-03-01 11:48 - 2014-03-01 10:38 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP

2014-03-01 10:40 - 2014-03-01 10:40 - 00108296 _____ () C:\Users\MichaelSchaper\AppData\Local\GDIPFONTCACHEV1.DAT

2014-03-01 10:40 - 2014-03-01 10:40 - 00000000 ____C () C:\autoexec.bat

2014-03-01 10:40 - 2014-03-01 09:40 - 00003205 _____ () C:\Windows\WindowsUpdate.log

2014-03-01 10:39 - 2014-03-01 10:39 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-03-01 10:36 - 2014-03-01 10:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\MichaelSchaper\Downloads\SpyHunter-Installer.exe

2014-03-01 10:27 - 2014-01-06 19:13 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\LogMeIn Hamachi

2014-03-01 09:49 - 2014-02-26 11:31 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Wise Care 365

2014-03-01 09:45 - 2009-07-14 05:45 - 00015600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-03-01 09:45 - 2009-07-14 05:45 - 00015600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-03-01 09:38 - 2014-02-26 14:03 - 00003152 _____ () C:\Windows\System32\Tasks\FRAPS

2014-03-01 09:37 - 2013-12-21 20:19 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-03-01 09:37 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-03-01 00:27 - 2014-02-06 17:07 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Sony

2014-02-28 22:36 - 2013-12-24 20:16 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\TS3Client

2014-02-28 22:34 - 2014-02-06 18:42 - 00000000 ____D () C:\Users\MichaelSchaper\Desktop\teamspeak3-server_win64

2014-02-28 20:18 - 2014-02-21 20:57 - 00008142 _____ () C:\Users\MichaelSchaper\AppData\Roaming\TheHunterSettings_live.bin

2014-02-28 19:25 - 2014-02-21 20:55 - 00000040 _____ () C:\Users\MichaelSchaper\AppData\Roaming\TheHunterSettings_live.cfg

2014-02-28 18:30 - 2014-01-09 14:48 - 00000484 _____ () C:\Windows\Tasks\Wise Registry Cleaner Schedule Task.job

2014-02-28 18:21 - 2014-02-26 11:43 - 00000430 _____ () C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job

2014-02-28 16:48 - 2014-02-06 18:40 - 00000000 ____D () C:\ProgramData\boost_interprocess

2014-02-27 20:51 - 2014-02-27 20:51 - 00000000 ____D () C:\Program Files\SavingsbullFilter

2014-02-27 16:37 - 2014-02-27 16:37 - 00000681 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2014-02-27 16:36 - 2013-12-21 21:56 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2014-02-26 20:52 - 2013-12-28 16:18 - 00000000 ____D () C:\ProgramData\Oracle

2014-02-26 20:51 - 2014-02-26 20:49 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-02-26 20:51 - 2013-12-28 16:15 - 00000000 ____D () C:\Program Files (x86)\Java

2014-02-26 14:03 - 2014-02-06 17:48 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps

2014-02-26 13:32 - 2014-02-26 13:32 - 00000000 _____ () C:\Windows\SysWOW64\Service.log

2014-02-26 13:32 - 2014-02-26 13:32 - 00000000 _____ () C:\Windows\system32\Service.log

2014-02-26 13:31 - 2014-02-26 13:31 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-02-26 11:53 - 2014-02-26 11:43 - 00003176 _____ () C:\Windows\System32\Tasks\Wise Care 365 PC Checkup Task

2014-02-26 11:43 - 2014-02-26 11:43 - 00003254 _____ () C:\Windows\System32\Tasks\Wise Turbo Checker

2014-02-26 11:43 - 2014-02-26 11:43 - 00000420 _____ () C:\Windows\Tasks\Wise Turbo Checker.job

2014-02-26 11:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help

2014-02-26 11:32 - 2014-01-19 17:37 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

2014-02-26 11:32 - 2013-12-21 19:06 - 00000000 ____D () C:\Windows\Panther

2014-02-26 11:31 - 2014-02-26 11:31 - 00000835 _____ () C:\Users\Public\Desktop\Wise Care 365.lnk

2014-02-25 18:50 - 2014-02-25 18:50 - 00000000 ____D () C:\Windows\pss

2014-02-24 17:39 - 2014-02-24 17:39 - 00631050 _____ () C:\Users\MichaelSchaper\Desktop\ThrottleStop_600.zip

2014-02-23 21:26 - 2014-02-23 21:26 - 00007605 _____ () C:\Users\MichaelSchaper\AppData\Local\Resmon.ResmonCfg

2014-02-23 20:57 - 2014-02-22 18:40 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Razer

2014-02-23 20:57 - 2014-02-22 18:39 - 00000000 ____D () C:\ProgramData\Razer

2014-02-23 20:57 - 2014-02-06 21:10 - 00000000 ____D () C:\Program Files (x86)\NCH Software

2014-02-22 18:44 - 2014-02-22 18:44 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Razer

2014-02-22 18:44 - 2014-02-22 18:44 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Razer_Inc

2014-02-22 18:31 - 2014-02-22 18:30 - 00000000 ____D () C:\Program Files\Defraggler

2014-02-22 18:30 - 2014-02-22 18:30 - 00001724 _____ () C:\Users\Public\Desktop\Defraggler.lnk

2014-02-21 21:50 - 2014-02-21 21:50 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\SimCity

2014-02-21 21:50 - 2014-01-04 00:01 - 00000000 ____D () C:\ProgramData\Electronic Arts

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\theHunter

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\theHunter

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\theHunter

2014-02-21 20:10 - 2014-02-21 20:10 - 00000000 ____D () C:\ProgramData\Hunter

2014-02-21 20:10 - 2013-12-31 04:32 - 00000000 ____D () C:\Windows\SysWOW64\directx

2014-02-21 13:59 - 2013-12-21 19:44 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-21 13:58 - 2013-12-21 19:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-21 13:58 - 2013-12-21 19:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-20 20:40 - 2013-12-21 20:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-02-20 20:36 - 2014-02-20 20:36 - 00000497 _____ () C:\Users\Public\Desktop\OMSI.lnk

2014-02-20 20:08 - 2014-02-20 20:08 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-02-20 20:08 - 2013-12-21 20:17 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-02-20 20:03 - 2014-02-20 20:03 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Bus Simulator 2012

2014-02-20 20:03 - 2014-02-20 20:03 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Bus Simulator 2012

2014-02-18 15:18 - 2014-02-18 15:17 - 00017814 ____C () C:\ReallifeScript.amx

2014-02-17 21:30 - 2014-01-02 20:11 - 00000000 ____D () C:\Windows\system32\MRT

2014-02-17 21:27 - 2014-01-02 20:10 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-02-16 12:27 - 2014-01-04 00:01 - 00000000 ____D () C:\ProgramData\Origin

2014-02-16 12:26 - 2014-02-16 12:26 - 00001097 _____ () C:\Users\MichaelSchaper\Desktop\Origin - Verknüpfung.lnk

2014-02-16 12:21 - 2014-02-16 12:21 - 00003178 _____ () C:\Windows\System32\Tasks\JetCleanLoginCheckUpdate

2014-02-16 12:21 - 2014-02-16 12:21 - 00000830 _____ () C:\Users\Public\Desktop\JetClean.lnk

2014-02-15 15:07 - 2014-02-15 14:23 - 00000000 ____C () C:\dfu.log

2014-02-15 14:30 - 2014-01-29 13:23 - 00282104 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

2014-02-15 14:30 - 2014-01-04 01:55 - 00282104 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-02-15 14:30 - 2014-01-04 01:55 - 00234768 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-02-15 14:25 - 2013-12-29 23:16 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\My Games

2014-02-15 14:20 - 2014-02-15 14:20 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Gameforge4d

2014-02-15 13:53 - 2014-02-15 13:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Criterion Games

2014-02-15 13:16 - 2013-12-21 22:19 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2014-02-15 09:57 - 2013-12-21 19:45 - 00004122 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-02-15 05:26 - 2014-01-29 13:10 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-02-15 02:54 - 2014-02-15 02:54 - 00000000 __RHD () C:\Users\MichaelSchaper\AppData\Roaming\SecuROM

2014-02-15 02:32 - 2014-02-15 02:32 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Electronic Arts

2014-02-15 02:32 - 2014-02-15 02:32 - 00000000 ____D () C:\ProgramData\EA Core

2014-02-15 02:30 - 2014-02-15 02:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE

2014-02-15 02:27 - 2014-02-15 02:31 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll

2014-02-15 01:38 - 2014-02-15 01:38 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\WarThunder

2014-02-15 01:38 - 2014-02-15 01:38 - 00000000 ____D () C:\ProgramData\WarThunder

2014-02-14 21:09 - 2014-02-14 21:06 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\.technic

2014-02-14 19:27 - 2014-02-14 19:27 - 00000000 ____D () C:\ProgramData\MTA San Andreas All

2014-02-14 15:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-13 21:10 - 2014-02-06 21:10 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software

2014-02-12 21:49 - 2013-12-21 20:13 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-12 21:49 - 2009-07-14 18:58 - 00699416 _____ () C:\Windows\system32\perfh007.dat

2014-02-12 21:49 - 2009-07-14 18:58 - 00149556 _____ () C:\Windows\system32\perfc007.dat

2014-02-12 21:49 - 2009-07-14 06:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-09 12:57 - 2014-02-09 12:47 - 00000804 _____ () C:\Users\MichaelSchaper\Desktop\SAMP Scripting Hilfe.txt

2014-02-08 23:12 - 2014-02-03 19:22 - 00000000 ____D () C:\Users\MichaelSchaper\Desktop\SampServer

2014-02-08 20:32 - 2013-12-25 13:14 - 00000000 ____D () C:\ProgramData\Unity

2014-02-08 19:34 - 2014-02-20 19:52 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-02-08 19:34 - 2014-02-20 19:52 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-02-08 19:34 - 2013-12-21 20:18 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-02-08 19:34 - 2013-12-21 20:18 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 18257576 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 14669032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 03090184 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 02713728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 00947296 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-02-08 18:42 - 2014-01-04 01:43 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-02-08 18:42 - 2013-12-21 20:19 - 06712608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-02-08 18:42 - 2013-12-21 20:19 - 03498272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-02-08 18:42 - 2013-12-21 20:19 - 00923936 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-02-08 18:42 - 2013-12-21 20:19 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-02-08 18:42 - 2013-12-21 20:19 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-02-08 17:18 - 2014-02-20 20:07 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-02-08 15:48 - 2014-02-08 15:48 - 00021235 ____C () C:\SelfmadeScript.amx

2014-02-08 13:00 - 2009-07-14 06:08 - 00026822 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-07 23:39 - 2014-02-07 23:24 - 00000000 ____D () C:\xampp

2014-02-07 23:32 - 2014-02-07 23:32 - 00000903 _____ () C:\Users\MichaelSchaper\Desktop\xampp-control.lnk

2014-02-07 20:30 - 2014-01-29 19:48 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\TeamViewer

2014-02-07 17:51 - 2014-02-07 17:51 - 00000784 _____ () C:\Users\MichaelSchaper\Desktop\SA-MP Colorpicker.lnk

2014-02-07 17:51 - 2014-02-07 17:51 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker

2014-02-07 16:52 - 2014-02-07 16:52 - 00001132 _____ () C:\Users\MichaelSchaper\Desktop\Server Starten.lnk

2014-02-07 11:24 - 2009-07-14 05:45 - 00391832 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-02-06 21:10 - 2014-02-06 21:10 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\NCH Software

2014-02-06 21:10 - 2014-02-06 21:10 - 00000000 ____D () C:\ProgramData\NCH Software

2014-02-06 19:58 - 2014-02-06 19:50 - 00000000 ___RD () C:\Users\MichaelSchaper\Documents\MAGIX

2014-02-06 19:58 - 2014-02-06 19:50 - 00000000 ____D () C:\ProgramData\MAGIX

2014-02-06 19:58 - 2014-02-06 19:33 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\MAGIX

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\MAGIX_MusicEditor

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Xara

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Magix

2014-02-06 19:50 - 2014-02-06 19:50 - 00000000 ____D () C:\Program Files (x86)\MAGIX

2014-02-06 19:49 - 2014-02-06 19:49 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0

2014-02-06 17:48 - 2014-02-06 17:48 - 00000560 _____ () C:\Users\MichaelSchaper\Desktop\Fraps.lnk

2014-02-06 17:31 - 2014-02-06 17:31 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Publish Providers

2014-02-06 17:29 - 2014-02-06 17:24 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Sony

2014-02-06 17:27 - 2014-02-06 17:08 - 00000000 ____D () C:\ProgramData\Sony

2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Sony

2014-02-06 13:16 - 2014-02-12 21:45 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-06 12:30 - 2014-02-12 21:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-06 12:30 - 2014-02-12 21:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-06 12:12 - 2014-02-12 21:45 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-06 12:07 - 2014-02-12 21:45 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-06 12:06 - 2014-02-12 21:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-06 11:57 - 2014-02-12 21:45 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-06 11:56 - 2014-02-12 21:45 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-06 11:52 - 2014-02-12 21:45 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-06 11:49 - 2014-02-12 21:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-06 11:48 - 2014-02-12 21:45 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-06 11:48 - 2014-02-12 21:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-06 11:38 - 2014-02-12 21:45 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-06 11:32 - 2014-02-12 21:45 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-06 11:20 - 2014-02-12 21:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-06 11:17 - 2014-02-12 21:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-06 11:11 - 2014-02-12 21:45 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-06 11:01 - 2014-02-12 21:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-06 11:00 - 2014-02-12 21:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-06 10:57 - 2014-02-12 21:45 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-06 10:57 - 2014-02-12 21:45 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-06 10:52 - 2014-02-12 21:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-06 10:52 - 2014-02-12 21:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-06 10:50 - 2014-02-12 21:45 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-06 10:49 - 2014-02-12 21:45 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-06 10:47 - 2014-02-12 21:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-06 10:46 - 2014-02-12 21:45 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-06 10:25 - 2014-02-12 21:45 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-06 10:25 - 2014-02-12 21:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-06 10:24 - 2014-02-12 21:45 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-06 10:22 - 2014-02-12 21:45 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-06 10:13 - 2014-02-12 21:45 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-06 10:09 - 2014-02-12 21:45 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-06 10:03 - 2014-02-12 21:45 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-06 09:55 - 2014-02-12 21:45 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-06 09:41 - 2014-02-12 21:45 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-06 09:40 - 2014-02-12 21:45 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-06 09:36 - 2014-02-12 21:45 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-06 09:34 - 2014-02-12 21:45 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-05 18:52 - 2013-12-21 20:19 - 03573739 _____ () C:\Windows\system32\nvcoproc.bin

2014-02-05 17:28 - 2014-02-05 17:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Dxtory Software

2014-02-05 17:24 - 2014-02-05 17:24 - 00715038 _____ () C:\Windows\unins000.exe

2014-02-05 17:24 - 2014-02-05 17:24 - 00001997 _____ () C:\Windows\unins000.dat

2014-02-03 19:43 - 2014-02-03 19:43 - 00002042 ____C () C:\pascatotal.amx

2014-02-03 15:38 - 2014-02-03 15:37 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\paul.bv96@yahoo.com

2014-02-02 10:11 - 2014-01-04 01:50 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\PunkBuster

2014-02-02 10:10 - 2014-02-02 10:10 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\America's Army

2014-02-02 10:08 - 2014-02-02 10:08 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00000000 ____D () C:\Program Files (x86)\OpenAL

2014-02-01 22:28 - 2014-02-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Square Enix

2014-02-01 22:28 - 2014-02-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\CrashRpt

2014-02-01 19:41 - 2014-01-09 14:18 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\DayZ
 

Some content of TEMP:

====================

C:\Users\MichaelSchaper\AppData\Local\Temp\SHSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-28 14:58
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Addition =
FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-02-2014 02

Ran by MichaelSchaper at 2014-03-01 12:27:22

Running from C:\Users\MichaelSchaper\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)

Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)

Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)

Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)

Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)

avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2011 - Avast Software)

BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )

Bus-Simulator 2012 (HKLM-x32\...\Bus-Simulator 2012_is1) (Version:  - astragon)

Clownfish for Skype (HKLM-x32\...\Clownfish) (Version:  - )

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)

Defraggler (HKLM\...\Defraggler) (Version: 2.17 - Piriform)

Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)

ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)

Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube to MP3 Converter version 3.12.19.1219 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.19.1219 - DVDVideoSoft Ltd.)

Gameforge Live 1.10.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.10.0 - Gameforge)

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)

Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden

Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)

Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

JetBoost (HKLM-x32\...\JetBoost_is1) (Version: 2.0.0 - BlueSprig)

JetClean (HKLM-x32\...\BlueSprig_JetClean_is1) (Version: 1.5.0 - BlueSprig)

Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version:  - Avalanche)

Just Cause 2: Multiplayer Mod (HKLM-x32\...\Steam App 259080) (Version:  - JC2-MP Team)

Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.173 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.173 - LogMeIn, Inc.) Hidden

MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{F6E484FB-BC48-4A63-8186-E25DF4607B3B}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden

Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)

Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden

Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)

Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{E9089B6A-1FDE-47F3-8D29-175F5B7A0722}) (Version: 10.50.1750.9 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40303 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.40303 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden

MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MTA:SA v1.3.4 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3.4 - Multi Theft Auto)

Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.659 - Electronic Arts)

NVIDIA 3D Vision Controller-Treiber 334.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 334.89 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 334.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 334.89 - NVIDIA Corporation)

NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 334.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 334.89 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3489 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 334.89 (Version: 334.89 - NVIDIA Corporation) Hidden

NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)

OMSI - Der Omnibussimulator (HKLM-x32\...\{9AE850A4-B89D-4875-A159-B1B64D717EFB}) (Version: 1.02 - aerosoft)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

Origin (HKLM-x32\...\Origin) (Version: 9.4.5.195 - Electronic Arts, Inc.)

Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )

Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.)

RaceRoom Racing Experience Launcher (HKLM-x32\...\{1FD9F07F-7BBF-4C91-B3F0-A23714A3A913}_is1) (Version: 1.0 - SimBin)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)

Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)

S.K.I.L.L. - Special Force 2 (HKLM-x32\...\Special Force 2 Beta_is1) (Version:  - )

SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)

SavingsBull (x32 Version: 1.0.0.0 - SavingsBull) Hidden

SavingsbullFilter (Version: 1.0.0.0 - SavingsBull Filter) Hidden <==== ATTENTION

SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden

SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 1.0.0.0 - Electronic Arts)

Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

SlimDrivers (HKLM-x32\...\{A5457401-D56A-43F2-9524-78E54A7FC07A}) (Version: 2.2.32705 - SlimWare Utilities, Inc.)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer)

theHunter Launcher (HKLM-x32\...\FBDFBE7F-2DB8-47E2-B88E-32F4A2A74AA8_is1) (Version: 631 - Expansive Worlds)

Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)

Vegas Pro 11.0 (64-bit) (HKLM\...\{7E3B2D0F-029B-11E2-BD68-F04DA23A5C58}) (Version: 11.0.701 - Sony)

Vegas Pro 12.0 (64-bit) (HKLM\...\{BE94768F-5232-11E3-BD78-F04DA23A5C58}) (Version: 12.0.770 - Sony)

VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)

Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

Wise Care 365 2.95 (HKLM-x32\...\Wise Care 365_is1) (Version: 2.95 - WiseCleaner.com, Inc.)

XAMPP (HKLM-x32\...\xampp) (Version: 1.8.3-2 - BitNami)
 

==================== Restore Points  =========================
 

01-03-2014 10:46:12 Removed SpyHunter
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {044C46FA-64DA-4528-95ED-9CD2D7E29FE7} - System32\Tasks\JetCleanLoginCheckUpdate => D:\Program Files (x86)\BlueSprig\JetClean\AutoUpdate.exe [2013-05-14] (BlueSprig)

Task: {07FF2756-3DA7-4E64-9322-0E5522BC4A66} - System32\Tasks\JetBoost_AutoUpdate => D:\Program Files (x86)\BlueSprig\JetBoost\AutoUpdate.exe [2012-11-27] (BlueSprig)

Task: {389B4E13-88D5-4B2C-BC3E-196F023F6790} - System32\Tasks\Wise Care 365 PC Checkup Task => D:\Program Files (x86)\Wise\Wise Care 365\WiseCare365.exe [2014-02-20] (WiseCleaner.com)

Task: {3C4D7C0E-9DCE-4915-9E7A-8BCE97C80D5A} - \GoogleUpdateTaskMachineCore No Task File

Task: {8A14B1BE-70CE-4531-B52E-9E62E58818E5} - \SlimDrivers Startup No Task File

Task: {91924625-DE60-4606-82EC-9385E64B2D3D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)

Task: {95CA1F01-5AAB-410C-A698-56251F0EEE42} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-21] (AVAST Software)

Task: {E1A0DD72-9CD3-4797-9523-43092F914470} - System32\Tasks\FRAPS => D:\Fraps\fraps.exe [2012-07-21] (Beepa P/L)

Task: {E5A1BDA8-4910-4774-A800-58F3E2A4508B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-21] (Google Inc.)

Task: {ED0AD625-C37C-474E-B5E9-B2B283A53A75} - System32\Tasks\Wise Registry Cleaner Schedule Task => D:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job => D:\Program Files (x86)\Wise\Wise Care 365\WiseCare365.exe

Task: C:\Windows\Tasks\Wise Registry Cleaner Schedule Task.job => D:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe

Task: C:\Windows\Tasks\Wise Turbo Checker.job => D:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-12-21 20:19 - 2014-02-08 18:42 - 00117024 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-01-27 21:45 - 2014-01-27 21:45 - 00710976 _____ () C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe

2014-02-07 23:25 - 2013-09-10 08:54 - 10956800 _____ () C:\xampp\mysql\bin\mysqld.exe

2014-01-29 13:10 - 2014-02-15 05:26 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-02-12 14:16 - 2014-02-12 14:16 - 00210432 _____ () c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe

2014-02-02 11:26 - 2014-02-02 11:26 - 00317952 _____ () c:\Program Files\SavingsbullFilter\ProtocolFilters.dll

2013-11-19 00:42 - 2013-11-19 00:42 - 00110080 _____ () c:\Program Files\SavingsbullFilter\nfapi.dll

2013-12-21 20:38 - 2000-01-01 01:00 - 00078456 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll

2013-12-21 20:38 - 2000-01-01 01:00 - 00386168 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll

2014-02-28 22:28 - 2014-02-28 18:22 - 02186240 _____ () C:\Program Files\AVAST Software\Avast\defs\14022803\algo.dll

2014-02-07 23:24 - 2013-07-08 12:34 - 00114688 _____ () C:\xampp\apache\bin\pcre.dll

2013-12-21 21:56 - 2013-12-21 21:56 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2014-02-22 19:08 - 2014-02-20 02:02 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll

2014-02-22 19:08 - 2014-02-20 02:02 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\libglesv2.dll

2014-02-22 19:08 - 2014-02-20 02:02 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\libegl.dll

2014-02-22 19:08 - 2014-02-20 02:03 - 04060488 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll

2014-02-22 19:08 - 2014-02-20 02:03 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll

2014-02-22 19:08 - 2014-02-20 02:02 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll

2014-02-22 19:08 - 2014-02-20 02:03 - 13632840 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData:NT

AlternateDataStreams: C:\Users\All Users:NT

AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT

AlternateDataStreams: C:\ProgramData\Application Data:NT

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT

AlternateDataStreams: C:\Users\MichaelSchaper\Anwendungsdaten:NT

AlternateDataStreams: C:\Users\MichaelSchaper\AppData\Roaming:NT
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== Disabled items from MSCONFIG ==============
 
 

==================== Faulty Device Manager Devices =============
 

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (03/01/2014 00:27:26 AM) (Source: MsiInstaller) (User: Pascal)

Description: Produkt: MSVCRT Redists -- Fehler 1316. Beim Lesen der Datei C:\Users\MichaelSchaper\AppData\Local\Temp\SonyInstall_1\redist.msi ist ein Netzwerkfehler aufgetreten
 

Error: (03/01/2014 00:17:02 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (02/28/2014 03:00:03 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (02/27/2014 08:50:48 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4

Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.18222, Zeitstempel: 0x51f1d731

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0008660e

ID des fehlerhaften Prozesses: 0x12d4

Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0

Pfad der fehlerhaften Anwendung: MsiExec.exe1

Pfad des fehlerhaften Moduls: MsiExec.exe2

Berichtskennung: MsiExec.exe3
 

Error: (02/27/2014 05:26:26 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4

Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.18222, Zeitstempel: 0x51f1d731

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000866c1

ID des fehlerhaften Prozesses: 0xc3c

Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0

Pfad der fehlerhaften Anwendung: MsiExec.exe1

Pfad des fehlerhaften Moduls: MsiExec.exe2

Berichtskennung: MsiExec.exe3
 

Error: (02/27/2014 04:52:22 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (02/26/2014 08:33:45 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (02/26/2014 07:21:49 PM) (Source: Steam Client Service) (User: )

Description: Error: Failed to poke open firewall
 

Error: (02/25/2014 09:47:07 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (02/25/2014 07:01:27 PM) (Source: NvStreamSvc) (User: )

Description: NvStreamSvcNvVAD initialization failed [6]
 
 

System errors:

=============

Error: (03/01/2014 09:36:25 AM) (Source: volmgr) (User: )

Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
 

Error: (02/28/2014 10:00:53 PM) (Source: volsnap) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (02/28/2014 04:48:27 PM) (Source: bowser) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PASQUAL-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{064F6FF2-228E-4FBA-8E0E-9D688CDB8C5B}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/28/2014 04:21:50 PM) (Source: bowser) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PASQUAL-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{064F6FF2-228E-4FBA-8E0E-9D688CDB8C5B}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/28/2014 02:23:02 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
 

Error: (02/28/2014 02:21:38 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "SavingsbullFilterService64" wurde nicht richtig gestartet.
 

Error: (02/28/2014 02:17:46 PM) (Source: volmgr) (User: )

Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
 

Error: (02/27/2014 09:31:38 PM) (Source: Service Control Manager) (User: )

Description: Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.
 

Error: (02/27/2014 09:24:57 PM) (Source: Service Control Manager) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Installer" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (02/27/2014 09:19:57 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 300000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

Microsoft Office Sessions:

=========================

Error: (03/01/2014 00:27:26 AM) (Source: MsiInstaller)(User: Pascal)

Description: Produkt: MSVCRT Redists -- Fehler 1316. Beim Lesen der Datei C:\Users\MichaelSchaper\AppData\Local\Temp\SonyInstall_1\redist.msi ist ein Netzwerkfehler aufgetreten(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (03/01/2014 00:17:02 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\MichaelSchaper\Desktop\Vegas Pro.11 Downloader.exe
 

Error: (02/28/2014 03:00:03 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\program files (x86)\thehunter\launcher\launcher.exe
 

Error: (02/27/2014 08:50:48 PM) (Source: Application Error)(User: )

Description: MsiExec.exe5.0.7601.175144ce792c4SHELL32.dll6.1.7601.1822251f1d731c00000050008660e12d401cf33f5347471ccc:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\SHELL32.dll73c377d5-9fe8-11e3-94db-e0cb4ee6557a
 

Error: (02/27/2014 05:26:26 PM) (Source: Application Error)(User: )

Description: MsiExec.exe5.0.7601.175144ce792c4SHELL32.dll6.1.7601.1822251f1d731c0000005000866c1c3c01cf33d8a6b22452c:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\SHELL32.dlle71d930d-9fcb-11e3-94db-e0cb4ee6557a
 

Error: (02/27/2014 04:52:22 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\program files (x86)\thehunter\launcher\launcher.exe
 

Error: (02/26/2014 08:33:45 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\Program Files (x86)\theHunter\launcher\launcher.exe
 

Error: (02/26/2014 07:21:49 PM) (Source: Steam Client Service)(User: )

Description: Failed to poke open firewall
 

Error: (02/25/2014 09:47:07 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\program files (x86)\thehunter\launcher\launcher.exe
 

Error: (02/25/2014 07:01:27 PM) (Source: NvStreamSvc)(User: )

Description: NvStreamSvcNvVAD initialization failed [6]
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 62%

Total physical RAM: 3583.18 MB

Available physical RAM: 1352.09 MB

Total Pagefile: 3581.36 MB

Available Pagefile: 1248.92 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:37.17 GB) (Free:8.06 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: () (Fixed) (Total:232.88 GB) (Free:168 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 37 GB) (Disk ID: 79B279B2)

Partition 1: (Not Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Active) - (Size=37 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (Size: 233 GB) (Disk ID: 40844083)

Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

Jetzt Vollständig ! :)

Ist daran was zu Erkennen ?

Hallo ?

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.03.01.07
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16518

MichaelSchaper :: PASCAL [Administrator]
 

01.03.2014 22:03:54

MBAM-log-2014-03-01 (22-11-59).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 210943

Laufzeit: 7 Minute(n), 44 Sekunde(n)
 

Infizierte Speicherprozesse: 2

C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (PUP.Optional.Savingsbull) -> 2052 -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe (PUP.Optional.SavingsBull.A) -> 2672 -> Keine Aktion durchgeführt.
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 10

HKLM\SYSTEM\CurrentControlSet\Services\Level Quality Watcher (PUP.Optional.Savingsbull) -> Keine Aktion durchgeführt.

HKCR\CLSID\{10AD2C61-0898-4348-8600-14A342F22AC3} (PUP.Optional.ScorpionSaver) -> Keine Aktion durchgeführt.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10AD2C61-0898-4348-8600-14A342F22AC3} (PUP.Optional.ScorpionSaver) -> Keine Aktion durchgeführt.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{10AD2C61-0898-4348-8600-14A342F22AC3} (PUP.Optional.ScorpionSaver) -> Keine Aktion durchgeführt.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{10AD2C61-0898-4348-8600-14A342F22AC3} (PUP.Optional.ScorpionSaver) -> Keine Aktion durchgeführt.

HKLM\SYSTEM\CurrentControlSet\Services\SavingsbullFilterService64 (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

HKCU\Software\SavingsBull (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

HKCU\Software\AppDataLow\Software\Savings Bull (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

HKCU\Software\AppDataLow\Software\SavingsBull (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

HKLM\SOFTWARE\SavingsbullFilter (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 3

C:\Program Files\SavingsbullFilter (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\Level Quality Watcher\v1.01 (PUP.Optional.Adpeak) -> Keine Aktion durchgeführt.

C:\Program Files (x86)\SavingsBull (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.
 

Infizierte Dateien: 11

C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (PUP.Optional.Savingsbull) -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\sample.dll (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\Installbat64.dll (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\Microsoft.Deployment.WindowsInstaller.dll (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\Microsoft.Deployment.WindowsInstaller.xml (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\nfapi.dll (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\nfregdrv.exe (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\ProtocolFilters.dll (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.

C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher32.exe (PUP.Optional.Adpeak) -> Keine Aktion durchgeführt.

C:\Program Files (x86)\SavingsBull\uninstaller.exe (PUP.Optional.SavingsBull.A) -> Keine Aktion durchgeführt.
 

(Ende)

AdwCleaner Logfile:

Code:

# AdwCleaner v3.020 - Bericht erstellt am 01/03/2014 um 22:22:34

# Aktualisiert 27/02/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : MichaelSchaper - PASCAL

# Gestartet von : C:\Users\MichaelSchaper\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

Dienst Gelöscht : Level Quality Watcher
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\boost_interprocess

Ordner Gelöscht : C:\ProgramData\NCH Software

Ordner Gelöscht : C:\Program Files (x86)\NCH Software

Ordner Gelöscht : C:\Program Files\Level Quality Watcher

Ordner Gelöscht : C:\Users\MICHAE~1\AppData\Local\Temp\OCS

Ordner Gelöscht : C:\Users\MichaelSchaper\AppData\Roaming\NCH Software

Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}

Schlüssel Gelöscht : HKCU\Software\NCH Software

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKLM\Software\NCH Software
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16518
 
 

-\\ Google Chrome v33.0.1750.117
 

[ Datei : C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [1673 octets] - [01/03/2014 22:19:53]

AdwCleaner[S0].txt - [1505 octets] - [01/03/2014 22:22:34]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1565 octets] ##########

--- --- ---

[/CODE]

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.2 (02.20.2014:1)

OS: Windows 7 Home Premium x64

Ran by MichaelSchaper on 01.03.2014 at 22:36:35,29

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 

Successfully deleted: [File] "C:\Windows\Tasks\wise registry cleaner schedule task.job"
 
 
 

~~~ Folders
 

Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 01.03.2014 at 22:45:01,58

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02

Ran by MichaelSchaper (administrator) on PASCAL on 01-03-2014 22:51:29

Running from C:\Users\MichaelSchaper\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\xampp\mysql\bin\mysqld.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(LogMeIn, Inc.) D:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(LogMeIn Inc.) D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(LogMeIn, Inc.) D:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(TeamSpeak Systems GmbH) C:\Users\MichaelSchaper\Desktop\teamspeak3-server_win64\ts3server_win64.exe

(TeamSpeak Systems GmbH) D:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2000-01-01] (VIA)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-21] (AVAST Software)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-12-25] (Microsoft Corporation)

HKU\S-1-5-21-1505871448-3347223120-3397598552-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD47EA6487CFECE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File

CHR Extension: (Google Drive) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-21]

CHR Extension: (YouTube) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-21]

CHR Extension: (Google-Suche) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-21]

CHR Extension: (GFACE Experience Plugin) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol [2014-01-09]

CHR Extension: (AdBlock) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-01]

CHR Extension: (avast! Online Security) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-21]

CHR Extension: (Google Wallet) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-21]

CHR Extension: (Battlefield Play4Free) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2014-01-29]

CHR Extension: (Google Mail) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-21]

CHR Extension: (Abstract-Blue) - C:\Users\MichaelSchaper\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa [2013-12-21]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-21]
 

==================== Services (Whitelisted) =================
 

R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2013-11-21] (Apache Software Foundation)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-21] (AVAST Software)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-19] ()

R2 Hamachi2Svc; D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2224976 2014-02-26] (LogMeIn Inc.)

R2 mysql; C:\xampp\mysql\bin\mysqld.exe [10956800 2013-09-10] ()

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-01-04] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-02-15] ()

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2000-01-01] (VIA Technologies, Inc.)

S2 WiseBootAssistant; D:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2014-01-21] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-21] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-21] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-21] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-21] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-21] (AVAST Software)

R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-21] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-21] ()

S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2014-01-26] (hxxp://libusb-win32.sourceforge.net)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()

R1 Netfilter64; C:\Windows\System32\drivers\Netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-03-01 22:51 - 2014-03-01 22:51 - 00010329 _____ () C:\Users\MichaelSchaper\Desktop\FRST.txt

2014-03-01 22:36 - 2014-03-01 22:36 - 00000000 ____D () C:\Windows\ERUNT

2014-03-01 22:33 - 2014-03-01 22:33 - 00000000 ____D () C:\ProgramData\boost_interprocess

2014-03-01 22:26 - 2014-03-01 22:26 - 00002608 _____ () C:\Windows\PFRO.log

2014-03-01 22:09 - 2014-03-01 22:33 - 00000000 ___DC () C:\AdwCleaner

2014-03-01 22:01 - 2014-03-01 22:01 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Malwarebytes

2014-03-01 22:00 - 2014-03-01 22:02 - 00000786 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-03-01 22:00 - 2014-03-01 22:00 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-03-01 22:00 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-03-01 21:44 - 2014-03-01 21:44 - 00005172 _____ () C:\Users\MichaelSchaper\AppData\Local\recently-used.xbel

2014-03-01 20:37 - 2014-03-01 21:44 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\gtk-2.0

2014-03-01 20:36 - 2014-03-01 20:36 - 00000000 ____D () C:\Users\MichaelSchaper\.thumbnails

2014-03-01 20:34 - 2014-03-01 22:01 - 00000000 ____D () C:\Users\MichaelSchaper\.gimp-2.8

2014-03-01 20:34 - 2014-03-01 20:34 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\gegl-0.2

2014-03-01 20:15 - 2014-03-01 20:15 - 00000748 _____ () C:\Users\Public\Desktop\GIMP 2.lnk

2014-03-01 19:00 - 2014-03-01 22:25 - 00006694 _____ () C:\Windows\WindowsUpdate.log

2014-03-01 18:54 - 2014-03-01 22:27 - 00000370 _____ () C:\Windows\setupact.log

2014-03-01 18:54 - 2014-03-01 18:54 - 00000000 _____ () C:\Windows\setuperr.log

2014-03-01 12:18 - 2014-03-01 22:51 - 00000000 ___DC () C:\FRST

2014-03-01 12:17 - 2014-03-01 12:17 - 02155520 _____ (Farbar) C:\Users\MichaelSchaper\Desktop\FRST64.exe

2014-03-01 10:40 - 2014-03-01 10:40 - 00108296 _____ () C:\Users\MichaelSchaper\AppData\Local\GDIPFONTCACHEV1.DAT

2014-03-01 10:40 - 2014-03-01 10:40 - 00000000 ____C () C:\autoexec.bat

2014-03-01 10:39 - 2014-03-01 10:39 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-03-01 10:38 - 2014-03-01 11:48 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP

2014-02-27 16:37 - 2014-02-27 16:37 - 00000681 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2014-02-26 20:51 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-02-26 20:51 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-02-26 20:51 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-02-26 20:51 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-02-26 20:49 - 2014-02-26 20:51 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-02-26 14:03 - 2014-03-01 22:28 - 00003152 _____ () C:\Windows\System32\Tasks\FRAPS

2014-02-26 13:32 - 2014-03-01 22:25 - 29371384 _____ () C:\Windows\system32\SavingsBullFilterService.log

2014-02-26 13:32 - 2014-02-26 13:32 - 00000000 _____ () C:\Windows\SysWOW64\Service.log

2014-02-26 13:32 - 2014-02-26 13:32 - 00000000 _____ () C:\Windows\system32\Service.log

2014-02-26 11:43 - 2014-03-01 18:01 - 00000430 _____ () C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job

2014-02-26 11:43 - 2014-02-26 11:53 - 00003176 _____ () C:\Windows\System32\Tasks\Wise Care 365 PC Checkup Task

2014-02-26 11:43 - 2014-02-26 11:43 - 00003254 _____ () C:\Windows\System32\Tasks\Wise Turbo Checker

2014-02-26 11:43 - 2014-02-26 11:43 - 00000420 _____ () C:\Windows\Tasks\Wise Turbo Checker.job

2014-02-26 11:31 - 2014-03-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Wise Care 365

2014-02-26 11:31 - 2014-02-26 11:31 - 00000835 _____ () C:\Users\Public\Desktop\Wise Care 365.lnk

2014-02-25 18:50 - 2014-02-25 18:50 - 00000000 ____D () C:\Windows\pss

2014-02-24 17:39 - 2014-02-24 17:39 - 00631050 _____ () C:\Users\MichaelSchaper\Desktop\ThrottleStop_600.zip

2014-02-23 21:26 - 2014-02-23 21:26 - 00007605 _____ () C:\Users\MichaelSchaper\AppData\Local\Resmon.ResmonCfg

2014-02-22 18:44 - 2014-02-22 18:44 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Razer

2014-02-22 18:44 - 2014-02-22 18:44 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Razer_Inc

2014-02-22 18:40 - 2014-02-23 20:57 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Razer

2014-02-22 18:39 - 2014-02-23 20:57 - 00000000 ____D () C:\ProgramData\Razer

2014-02-22 18:30 - 2014-02-22 18:31 - 00000000 ____D () C:\Program Files\Defraggler

2014-02-22 18:30 - 2014-02-22 18:30 - 00001724 _____ () C:\Users\Public\Desktop\Defraggler.lnk

2014-02-21 21:50 - 2014-02-21 21:50 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\SimCity

2014-02-21 20:57 - 2014-03-01 15:17 - 00008143 _____ () C:\Users\MichaelSchaper\AppData\Roaming\TheHunterSettings_live.bin

2014-02-21 20:55 - 2014-02-28 19:25 - 00000040 _____ () C:\Users\MichaelSchaper\AppData\Roaming\TheHunterSettings_live.cfg

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\theHunter

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\theHunter

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\theHunter

2014-02-21 20:10 - 2014-02-21 20:10 - 00000000 ____D () C:\ProgramData\Hunter

2014-02-20 20:36 - 2014-02-20 20:36 - 00000497 _____ () C:\Users\Public\Desktop\OMSI.lnk

2014-02-20 20:08 - 2014-02-20 20:08 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-02-20 20:07 - 2014-02-08 17:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-02-20 20:03 - 2014-02-20 20:03 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Bus Simulator 2012

2014-02-20 20:03 - 2014-02-20 20:03 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Bus Simulator 2012

2014-02-20 19:52 - 2014-02-08 19:34 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-02-20 19:52 - 2014-02-08 19:34 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-02-20 19:52 - 2014-02-08 19:34 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-02-18 15:17 - 2014-02-18 15:18 - 00017814 ____C () C:\ReallifeScript.amx

2014-02-16 12:26 - 2014-02-16 12:26 - 00001097 _____ () C:\Users\MichaelSchaper\Desktop\Origin - Verknüpfung.lnk

2014-02-16 12:21 - 2014-02-16 12:21 - 00003178 _____ () C:\Windows\System32\Tasks\JetCleanLoginCheckUpdate

2014-02-16 12:21 - 2014-02-16 12:21 - 00000830 _____ () C:\Users\Public\Desktop\JetClean.lnk

2014-02-15 14:23 - 2014-02-15 15:07 - 00000000 ____C () C:\dfu.log

2014-02-15 14:20 - 2014-02-15 14:20 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Gameforge4d

2014-02-15 13:53 - 2014-02-15 13:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Criterion Games

2014-02-15 02:54 - 2014-02-15 02:54 - 00000000 __RHD () C:\Users\MichaelSchaper\AppData\Roaming\SecuROM

2014-02-15 02:32 - 2014-02-15 02:32 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Electronic Arts

2014-02-15 02:32 - 2014-02-15 02:32 - 00000000 ____D () C:\ProgramData\EA Core

2014-02-15 02:31 - 2014-02-15 02:27 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll

2014-02-15 02:30 - 2014-02-15 02:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE

2014-02-15 01:38 - 2014-02-15 01:38 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\WarThunder

2014-02-15 01:38 - 2014-02-15 01:38 - 00000000 ____D () C:\ProgramData\WarThunder

2014-02-14 21:06 - 2014-02-14 21:09 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\.technic

2014-02-14 19:27 - 2014-02-14 19:27 - 00000000 ____D () C:\ProgramData\MTA San Andreas All

2014-02-12 21:46 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-12 21:46 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-12 21:45 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-12 21:45 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-12 21:45 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-12 21:45 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-12 21:45 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-12 21:45 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-12 21:45 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-12 21:45 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-12 21:45 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-12 21:45 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-12 21:45 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-12 21:45 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-12 21:45 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-12 21:45 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-12 21:45 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-12 21:45 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-12 21:45 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-12 21:45 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-12 21:45 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-12 21:45 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-12 21:45 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-12 21:45 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-12 21:45 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-12 21:45 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-12 21:45 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-12 21:45 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-12 21:45 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-12 21:45 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-12 21:45 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-12 21:45 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-12 21:45 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-12 21:45 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-12 21:45 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-12 21:45 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-12 21:45 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-12 21:45 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-12 21:45 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-12 21:45 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-12 21:45 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-12 16:04 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls

2014-02-12 16:04 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-12 16:04 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-12 16:04 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-12 16:04 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-02-12 16:04 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-02-12 16:04 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-12 16:04 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-12 16:04 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-12 16:04 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-12 16:04 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-12 16:04 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-12 16:04 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-12 16:04 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-12 16:04 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-12 16:04 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2014-02-12 16:04 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2014-02-12 16:04 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-02-12 16:04 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2014-02-12 16:04 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-02-12 16:04 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2014-02-12 16:04 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2014-02-12 16:04 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-02-12 16:04 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-02-12 16:03 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-02-12 16:03 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-12 16:03 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-02-12 16:03 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-09 12:47 - 2014-02-09 12:57 - 00000804 _____ () C:\Users\MichaelSchaper\Desktop\SAMP Scripting Hilfe.txt

2014-02-08 15:48 - 2014-02-08 15:48 - 00021235 ____C () C:\SelfmadeScript.amx

2014-02-07 23:32 - 2014-02-07 23:32 - 00000903 _____ () C:\Users\MichaelSchaper\Desktop\xampp-control.lnk

2014-02-07 23:24 - 2014-02-07 23:39 - 00000000 ____D () C:\xampp

2014-02-07 17:51 - 2014-02-07 17:51 - 00000784 _____ () C:\Users\MichaelSchaper\Desktop\SA-MP Colorpicker.lnk

2014-02-07 17:51 - 2014-02-07 17:51 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker

2014-02-07 16:52 - 2014-02-07 16:52 - 00001132 _____ () C:\Users\MichaelSchaper\Desktop\Server Starten.lnk

2014-02-06 21:10 - 2014-02-13 21:10 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\MAGIX_MusicEditor

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Xara

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Magix

2014-02-06 19:50 - 2014-02-06 19:58 - 00000000 ___RD () C:\Users\MichaelSchaper\Documents\MAGIX

2014-02-06 19:50 - 2014-02-06 19:58 - 00000000 ____D () C:\ProgramData\MAGIX

2014-02-06 19:50 - 2014-02-06 19:50 - 00000000 ____D () C:\Program Files (x86)\MAGIX

2014-02-06 19:49 - 2014-02-06 19:49 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0

2014-02-06 19:33 - 2014-02-06 19:58 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\MAGIX

2014-02-06 18:42 - 2014-03-01 22:34 - 00000000 ____D () C:\Users\MichaelSchaper\Desktop\teamspeak3-server_win64

2014-02-06 17:48 - 2014-02-26 14:03 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps

2014-02-06 17:48 - 2014-02-06 17:48 - 00000560 _____ () C:\Users\MichaelSchaper\Desktop\Fraps.lnk

2014-02-06 17:31 - 2014-02-06 17:31 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Publish Providers

2014-02-06 17:24 - 2014-02-06 17:29 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Sony

2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Sony

2014-02-06 17:08 - 2014-02-06 17:27 - 00000000 ____D () C:\ProgramData\Sony

2014-02-06 17:07 - 2014-03-01 00:27 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Sony

2014-02-05 17:28 - 2014-02-05 17:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Dxtory Software

2014-02-05 17:28 - 2013-02-15 22:44 - 08300544 _____ (Dxtory Software) C:\Windows\SysWOW64\DxtoryCodec.dll

2014-02-05 17:28 - 2013-02-15 22:44 - 08043008 _____ (Dxtory Software) C:\Windows\system32\DxtoryCodec.dll

2014-02-05 17:24 - 2014-02-05 17:24 - 00715038 _____ () C:\Windows\unins000.exe

2014-02-05 17:24 - 2014-02-05 17:24 - 00001997 _____ () C:\Windows\unins000.dat

2014-02-05 17:24 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll

2014-02-05 17:24 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll

2014-02-03 19:43 - 2014-02-03 19:43 - 00002042 ____C () C:\pascatotal.amx

2014-02-03 19:22 - 2014-02-08 23:12 - 00000000 ____D () C:\Users\MichaelSchaper\Desktop\SampServer

2014-02-03 15:37 - 2014-02-03 15:38 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\paul.bv96@yahoo.com

2014-02-02 10:10 - 2014-02-02 10:10 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\America's Army

2014-02-02 10:08 - 2014-02-02 10:08 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00000000 ____D () C:\Program Files (x86)\OpenAL

2014-02-01 22:28 - 2014-02-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Square Enix

2014-02-01 22:28 - 2014-02-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\CrashRpt

2014-01-31 09:53 - 2013-02-03 07:49 - 00412160 _____ () C:\Users\MichaelSchaper\Desktop\samp.exe
 

==================== One Month Modified Files and Folders =======
 

2014-03-01 22:51 - 2014-03-01 22:51 - 00010329 _____ () C:\Users\MichaelSchaper\Desktop\FRST.txt

2014-03-01 22:51 - 2014-03-01 12:18 - 00000000 ___DC () C:\FRST

2014-03-01 22:36 - 2014-03-01 22:36 - 00000000 ____D () C:\Windows\ERUNT

2014-03-01 22:36 - 2009-07-14 05:45 - 00015600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-03-01 22:36 - 2009-07-14 05:45 - 00015600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-03-01 22:35 - 2014-01-06 19:13 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\LogMeIn Hamachi

2014-03-01 22:34 - 2014-02-06 18:42 - 00000000 ____D () C:\Users\MichaelSchaper\Desktop\teamspeak3-server_win64

2014-03-01 22:34 - 2013-12-24 20:16 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\TS3Client

2014-03-01 22:33 - 2014-03-01 22:33 - 00000000 ____D () C:\ProgramData\boost_interprocess

2014-03-01 22:33 - 2014-03-01 22:09 - 00000000 ___DC () C:\AdwCleaner

2014-03-01 22:32 - 2014-03-01 19:00 - 00006694 _____ () C:\Windows\WindowsUpdate.log

2014-03-01 22:28 - 2014-02-26 14:03 - 00003152 _____ () C:\Windows\System32\Tasks\FRAPS

2014-03-01 22:28 - 2014-02-26 11:31 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Wise Care 365

2014-03-01 22:28 - 2013-12-21 21:56 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2014-03-01 22:27 - 2014-03-01 18:54 - 00000370 _____ () C:\Windows\setupact.log

2014-03-01 22:26 - 2014-03-01 22:26 - 00002608 _____ () C:\Windows\PFRO.log

2014-03-01 22:26 - 2013-12-21 20:19 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-03-01 22:26 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-03-01 22:25 - 2014-02-26 13:32 - 29371384 _____ () C:\Windows\system32\SavingsBullFilterService.log

2014-03-01 22:14 - 2013-12-22 11:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Skype

2014-03-01 22:02 - 2014-03-01 22:00 - 00000786 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-03-01 22:02 - 2013-12-21 19:45 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-03-01 22:01 - 2014-03-01 22:01 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Malwarebytes

2014-03-01 22:01 - 2014-03-01 20:34 - 00000000 ____D () C:\Users\MichaelSchaper\.gimp-2.8

2014-03-01 22:00 - 2014-03-01 22:00 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-03-01 21:56 - 2013-12-21 19:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-03-01 21:44 - 2014-03-01 21:44 - 00005172 _____ () C:\Users\MichaelSchaper\AppData\Local\recently-used.xbel

2014-03-01 21:44 - 2014-03-01 20:37 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\gtk-2.0

2014-03-01 20:36 - 2014-03-01 20:36 - 00000000 ____D () C:\Users\MichaelSchaper\.thumbnails

2014-03-01 20:36 - 2013-12-21 19:33 - 00000000 ____D () C:\Users\MichaelSchaper

2014-03-01 20:34 - 2014-03-01 20:34 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\gegl-0.2

2014-03-01 20:15 - 2014-03-01 20:15 - 00000748 _____ () C:\Users\Public\Desktop\GIMP 2.lnk

2014-03-01 18:54 - 2014-03-01 18:54 - 00000000 _____ () C:\Windows\setuperr.log

2014-03-01 18:01 - 2014-02-26 11:43 - 00000430 _____ () C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job

2014-03-01 15:17 - 2014-02-21 20:57 - 00008143 _____ () C:\Users\MichaelSchaper\AppData\Roaming\TheHunterSettings_live.bin

2014-03-01 12:17 - 2014-03-01 12:17 - 02155520 _____ (Farbar) C:\Users\MichaelSchaper\Desktop\FRST64.exe

2014-03-01 11:48 - 2014-03-01 10:38 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP

2014-03-01 10:40 - 2014-03-01 10:40 - 00108296 _____ () C:\Users\MichaelSchaper\AppData\Local\GDIPFONTCACHEV1.DAT

2014-03-01 10:40 - 2014-03-01 10:40 - 00000000 ____C () C:\autoexec.bat

2014-03-01 10:39 - 2014-03-01 10:39 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-03-01 00:27 - 2014-02-06 17:07 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Sony

2014-02-28 19:25 - 2014-02-21 20:55 - 00000040 _____ () C:\Users\MichaelSchaper\AppData\Roaming\TheHunterSettings_live.cfg

2014-02-27 16:37 - 2014-02-27 16:37 - 00000681 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2014-02-26 20:52 - 2013-12-28 16:18 - 00000000 ____D () C:\ProgramData\Oracle

2014-02-26 20:51 - 2014-02-26 20:49 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-02-26 20:51 - 2013-12-28 16:15 - 00000000 ____D () C:\Program Files (x86)\Java

2014-02-26 14:03 - 2014-02-06 17:48 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps

2014-02-26 13:32 - 2014-02-26 13:32 - 00000000 _____ () C:\Windows\SysWOW64\Service.log

2014-02-26 13:32 - 2014-02-26 13:32 - 00000000 _____ () C:\Windows\system32\Service.log

2014-02-26 11:53 - 2014-02-26 11:43 - 00003176 _____ () C:\Windows\System32\Tasks\Wise Care 365 PC Checkup Task

2014-02-26 11:43 - 2014-02-26 11:43 - 00003254 _____ () C:\Windows\System32\Tasks\Wise Turbo Checker

2014-02-26 11:43 - 2014-02-26 11:43 - 00000420 _____ () C:\Windows\Tasks\Wise Turbo Checker.job

2014-02-26 11:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help

2014-02-26 11:32 - 2014-01-19 17:37 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

2014-02-26 11:32 - 2013-12-21 19:06 - 00000000 ____D () C:\Windows\Panther

2014-02-26 11:31 - 2014-02-26 11:31 - 00000835 _____ () C:\Users\Public\Desktop\Wise Care 365.lnk

2014-02-25 18:50 - 2014-02-25 18:50 - 00000000 ____D () C:\Windows\pss

2014-02-24 17:39 - 2014-02-24 17:39 - 00631050 _____ () C:\Users\MichaelSchaper\Desktop\ThrottleStop_600.zip

2014-02-23 21:26 - 2014-02-23 21:26 - 00007605 _____ () C:\Users\MichaelSchaper\AppData\Local\Resmon.ResmonCfg

2014-02-23 20:57 - 2014-02-22 18:40 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Razer

2014-02-23 20:57 - 2014-02-22 18:39 - 00000000 ____D () C:\ProgramData\Razer

2014-02-22 18:44 - 2014-02-22 18:44 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Razer

2014-02-22 18:44 - 2014-02-22 18:44 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Razer_Inc

2014-02-22 18:31 - 2014-02-22 18:30 - 00000000 ____D () C:\Program Files\Defraggler

2014-02-22 18:30 - 2014-02-22 18:30 - 00001724 _____ () C:\Users\Public\Desktop\Defraggler.lnk

2014-02-21 21:50 - 2014-02-21 21:50 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\SimCity

2014-02-21 21:50 - 2014-01-04 00:01 - 00000000 ____D () C:\ProgramData\Electronic Arts

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\theHunter

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\theHunter

2014-02-21 20:54 - 2014-02-21 20:54 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\theHunter

2014-02-21 20:10 - 2014-02-21 20:10 - 00000000 ____D () C:\ProgramData\Hunter

2014-02-21 20:10 - 2013-12-31 04:32 - 00000000 ____D () C:\Windows\SysWOW64\directx

2014-02-21 13:59 - 2013-12-21 19:44 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-21 13:58 - 2013-12-21 19:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-21 13:58 - 2013-12-21 19:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-20 20:40 - 2013-12-21 20:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-02-20 20:36 - 2014-02-20 20:36 - 00000497 _____ () C:\Users\Public\Desktop\OMSI.lnk

2014-02-20 20:08 - 2014-02-20 20:08 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-02-20 20:08 - 2013-12-21 20:17 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-02-20 20:03 - 2014-02-20 20:03 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Bus Simulator 2012

2014-02-20 20:03 - 2014-02-20 20:03 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Bus Simulator 2012

2014-02-18 15:18 - 2014-02-18 15:17 - 00017814 ____C () C:\ReallifeScript.amx

2014-02-17 21:30 - 2014-01-02 20:11 - 00000000 ____D () C:\Windows\system32\MRT

2014-02-17 21:27 - 2014-01-02 20:10 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-02-16 12:27 - 2014-01-04 00:01 - 00000000 ____D () C:\ProgramData\Origin

2014-02-16 12:26 - 2014-02-16 12:26 - 00001097 _____ () C:\Users\MichaelSchaper\Desktop\Origin - Verknüpfung.lnk

2014-02-16 12:21 - 2014-02-16 12:21 - 00003178 _____ () C:\Windows\System32\Tasks\JetCleanLoginCheckUpdate

2014-02-16 12:21 - 2014-02-16 12:21 - 00000830 _____ () C:\Users\Public\Desktop\JetClean.lnk

2014-02-15 15:07 - 2014-02-15 14:23 - 00000000 ____C () C:\dfu.log

2014-02-15 14:30 - 2014-01-29 13:23 - 00282104 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

2014-02-15 14:30 - 2014-01-04 01:55 - 00282104 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-02-15 14:30 - 2014-01-04 01:55 - 00234768 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-02-15 14:25 - 2013-12-29 23:16 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\My Games

2014-02-15 14:20 - 2014-02-15 14:20 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Gameforge4d

2014-02-15 13:53 - 2014-02-15 13:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Criterion Games

2014-02-15 13:16 - 2013-12-21 22:19 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2014-02-15 09:57 - 2013-12-21 19:45 - 00004122 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-02-15 05:26 - 2014-01-29 13:10 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-02-15 02:54 - 2014-02-15 02:54 - 00000000 __RHD () C:\Users\MichaelSchaper\AppData\Roaming\SecuROM

2014-02-15 02:32 - 2014-02-15 02:32 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Electronic Arts

2014-02-15 02:32 - 2014-02-15 02:32 - 00000000 ____D () C:\ProgramData\EA Core

2014-02-15 02:30 - 2014-02-15 02:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE

2014-02-15 02:27 - 2014-02-15 02:31 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll

2014-02-15 01:38 - 2014-02-15 01:38 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\WarThunder

2014-02-15 01:38 - 2014-02-15 01:38 - 00000000 ____D () C:\ProgramData\WarThunder

2014-02-14 21:09 - 2014-02-14 21:06 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\.technic

2014-02-14 19:27 - 2014-02-14 19:27 - 00000000 ____D () C:\ProgramData\MTA San Andreas All

2014-02-14 15:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-13 21:10 - 2014-02-06 21:10 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software

2014-02-12 21:49 - 2013-12-21 20:13 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-12 21:49 - 2009-07-14 18:58 - 00699416 _____ () C:\Windows\system32\perfh007.dat

2014-02-12 21:49 - 2009-07-14 18:58 - 00149556 _____ () C:\Windows\system32\perfc007.dat

2014-02-12 21:49 - 2009-07-14 06:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-09 12:57 - 2014-02-09 12:47 - 00000804 _____ () C:\Users\MichaelSchaper\Desktop\SAMP Scripting Hilfe.txt

2014-02-08 23:12 - 2014-02-03 19:22 - 00000000 ____D () C:\Users\MichaelSchaper\Desktop\SampServer

2014-02-08 20:32 - 2013-12-25 13:14 - 00000000 ____D () C:\ProgramData\Unity

2014-02-08 19:34 - 2014-02-20 19:52 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-02-08 19:34 - 2014-02-20 19:52 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-02-08 19:34 - 2014-02-20 19:52 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-02-08 19:34 - 2013-12-21 20:18 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-02-08 19:34 - 2013-12-21 20:18 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 18257576 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 14669032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 03090184 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 02713728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-02-08 19:34 - 2013-12-21 20:04 - 00947296 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-02-08 18:42 - 2014-01-04 01:43 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-02-08 18:42 - 2013-12-21 20:19 - 06712608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-02-08 18:42 - 2013-12-21 20:19 - 03498272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-02-08 18:42 - 2013-12-21 20:19 - 00923936 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-02-08 18:42 - 2013-12-21 20:19 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-02-08 18:42 - 2013-12-21 20:19 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-02-08 17:18 - 2014-02-20 20:07 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-02-08 15:48 - 2014-02-08 15:48 - 00021235 ____C () C:\SelfmadeScript.amx

2014-02-08 13:00 - 2009-07-14 06:08 - 00027326 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-07 23:39 - 2014-02-07 23:24 - 00000000 ____D () C:\xampp

2014-02-07 23:32 - 2014-02-07 23:32 - 00000903 _____ () C:\Users\MichaelSchaper\Desktop\xampp-control.lnk

2014-02-07 20:30 - 2014-01-29 19:48 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\TeamViewer

2014-02-07 17:51 - 2014-02-07 17:51 - 00000784 _____ () C:\Users\MichaelSchaper\Desktop\SA-MP Colorpicker.lnk

2014-02-07 17:51 - 2014-02-07 17:51 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker

2014-02-07 16:52 - 2014-02-07 16:52 - 00001132 _____ () C:\Users\MichaelSchaper\Desktop\Server Starten.lnk

2014-02-07 11:24 - 2009-07-14 05:45 - 00391832 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-02-06 19:58 - 2014-02-06 19:50 - 00000000 ___RD () C:\Users\MichaelSchaper\Documents\MAGIX

2014-02-06 19:58 - 2014-02-06 19:50 - 00000000 ____D () C:\ProgramData\MAGIX

2014-02-06 19:58 - 2014-02-06 19:33 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\MAGIX

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\MAGIX_MusicEditor

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Xara

2014-02-06 19:53 - 2014-02-06 19:53 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Magix

2014-02-06 19:50 - 2014-02-06 19:50 - 00000000 ____D () C:\Program Files (x86)\MAGIX

2014-02-06 19:49 - 2014-02-06 19:49 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0

2014-02-06 17:48 - 2014-02-06 17:48 - 00000560 _____ () C:\Users\MichaelSchaper\Desktop\Fraps.lnk

2014-02-06 17:31 - 2014-02-06 17:31 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Roaming\Publish Providers

2014-02-06 17:29 - 2014-02-06 17:24 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Sony

2014-02-06 17:27 - 2014-02-06 17:08 - 00000000 ____D () C:\ProgramData\Sony

2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Sony

2014-02-06 13:16 - 2014-02-12 21:45 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-06 12:30 - 2014-02-12 21:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-06 12:30 - 2014-02-12 21:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-06 12:12 - 2014-02-12 21:45 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-06 12:07 - 2014-02-12 21:45 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-06 12:06 - 2014-02-12 21:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-06 11:57 - 2014-02-12 21:45 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-06 11:56 - 2014-02-12 21:45 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-06 11:52 - 2014-02-12 21:45 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-06 11:49 - 2014-02-12 21:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-06 11:48 - 2014-02-12 21:45 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-06 11:48 - 2014-02-12 21:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-06 11:38 - 2014-02-12 21:45 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-06 11:32 - 2014-02-12 21:45 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-06 11:20 - 2014-02-12 21:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-06 11:17 - 2014-02-12 21:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-06 11:11 - 2014-02-12 21:45 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-06 11:01 - 2014-02-12 21:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-06 11:00 - 2014-02-12 21:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-06 10:57 - 2014-02-12 21:45 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-06 10:57 - 2014-02-12 21:45 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-06 10:52 - 2014-02-12 21:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-06 10:52 - 2014-02-12 21:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-06 10:50 - 2014-02-12 21:45 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-06 10:49 - 2014-02-12 21:45 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-06 10:47 - 2014-02-12 21:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-06 10:46 - 2014-02-12 21:45 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-06 10:25 - 2014-02-12 21:45 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-06 10:25 - 2014-02-12 21:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-06 10:24 - 2014-02-12 21:45 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-06 10:22 - 2014-02-12 21:45 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-06 10:13 - 2014-02-12 21:45 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-06 10:09 - 2014-02-12 21:45 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-06 10:03 - 2014-02-12 21:45 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-06 09:55 - 2014-02-12 21:45 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-06 09:41 - 2014-02-12 21:45 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-06 09:40 - 2014-02-12 21:45 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-06 09:36 - 2014-02-12 21:45 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-06 09:34 - 2014-02-12 21:45 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-05 18:52 - 2013-12-21 20:19 - 03573739 _____ () C:\Windows\system32\nvcoproc.bin

2014-02-05 17:28 - 2014-02-05 17:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\Dxtory Software

2014-02-05 17:24 - 2014-02-05 17:24 - 00715038 _____ () C:\Windows\unins000.exe

2014-02-05 17:24 - 2014-02-05 17:24 - 00001997 _____ () C:\Windows\unins000.dat

2014-02-03 19:43 - 2014-02-03 19:43 - 00002042 ____C () C:\pascatotal.amx

2014-02-03 15:38 - 2014-02-03 15:37 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\paul.bv96@yahoo.com

2014-02-02 10:11 - 2014-01-04 01:50 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\PunkBuster

2014-02-02 10:10 - 2014-02-02 10:10 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\America's Army

2014-02-02 10:08 - 2014-02-02 10:08 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll

2014-02-02 10:08 - 2014-02-02 10:08 - 00000000 ____D () C:\Program Files (x86)\OpenAL

2014-02-01 22:28 - 2014-02-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\Square Enix

2014-02-01 22:28 - 2014-02-01 22:28 - 00000000 ____D () C:\Users\MichaelSchaper\AppData\Local\CrashRpt

2014-02-01 19:41 - 2014-01-09 14:18 - 00000000 ____D () C:\Users\MichaelSchaper\Documents\DayZ
 

Some content of TEMP:

====================

C:\Users\MichaelSchaper\AppData\Local\Temp\Quarantine.exe

C:\Users\MichaelSchaper\AppData\Local\Temp\SHSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-03-01 14:13
 

==================== End Of Log ============================

--- --- ---

--- --- ---