Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 03 Ran by *+* (administrator) on *+*-PC on 01-02-2014 17:07:45 Running from C:\Users\*+*\Downloads Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Razer, Inc.) C:\Program Files (x86)\Razer\Core\RazerCore.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7477016 2013-04-24] (Logitech Inc.) HKLM\...\Run: [Cm108Sound] - C:\Windows\Syswow64\cm108.dll [8757248 2013-01-16] (C-Media Corporation) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [ISUSScheduler] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1 HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1 HKU\.DEFAULT\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19604072 2013-06-03] (Skype Technologies S.A.) HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation) HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3598680 2014-01-31] (Electronic Arts) HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-04] (Valve Corporation) HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19604072 2013-06-03] (Skype Technologies S.A.) HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\Run: [Razer Comms] - C:\Program Files (x86)\Razer\Core\RazerCore.exe [1094848 2013-12-11] (Razer, Inc.) HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: E - E:\LaunchU3.exe -a HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: F - F:\LaunchU3.exe -a HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {40e16c09-d460-11e2-b87f-d5dc8814c60e} - K:\pushinst.exe HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {58884d9e-2a97-11e3-8950-94de8069f731} - E:\AutoRun.exe HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {8572d1eb-0696-11e3-922f-94de8069f731} - G:\Installer.exe HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {8d2eadc9-e94b-11e2-ac4e-001f3f05bc43} - E:\SETUP.EXE HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {ad496546-1256-11e3-b459-94de8069f731} - E:\setup.exe HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {af3c5006-0025-11e3-a4e0-001f3f05bc43} - E:\MotorolaDeviceManagerSetup.exe -a HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {b08f42b7-332c-11e3-9eef-94de8069f731} - F:\LaunchU3.exe -a HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {c2d7cb5c-d45f-11e2-87f1-806e6f6e6963} - H:\Run.exe HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {c2d7cb6d-d45f-11e2-87f1-806e6f6e6963} - E:\LaunchU3.exe -a HKU\S-1-5-21-1141850857-2196456169-3891912370-1000\...\MountPoints2: {d8958884-d465-11e2-a007-94de8069f731} - E:\pushinst.exe AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-19] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation) Startup: C:\Users\*+*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\*+*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x151EC1F47568CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: No Name - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - No File BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: No Name - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - No File BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 10 C:\Program Files (x86)\Bonjour\mdnsNSP.dll File Not found () Winsock: Catalog5-x64 10 C:\Program Files\Bonjour\mdnsNSP.dll File Not found () Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\*+*\AppData\Roaming\Mozilla\Firefox\Profiles\ejmgmm7r.default-1391195466435 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.1 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (Google Docs) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-15] CHR Extension: (Google Drive) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-15] CHR Extension: (YouTube) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-15] CHR Extension: (Google Search) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-15] CHR Extension: (Kaspersky URL Advisor) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-10-28] CHR Extension: (Dangerous Websites Blocker) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-10-28] CHR Extension: (Plus-HD-4.2) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikglgnekadileanonnapmgkeklpgjifk [2014-01-21] CHR Extension: (Virtual Keyboard) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-10-28] CHR Extension: (Amazon-Icon) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg [2014-01-05] CHR Extension: (Google Wallet) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28] CHR Extension: (Gmail) - C:\Users\*+*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-15] CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\*+*\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-01-04] ==================== Services (Whitelisted) ================= S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-01-30] (IObit) R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [121144 2013-03-25] (Motorola Mobility LLC) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-11-07] () R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2013-12-11] (Razer, Inc.) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [16400 2013-05-30] (Intel(R) Corporation) ==================== Drivers (Whitelisted) ==================== R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation) R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] () S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2013-05-30] (Intel Corporation) S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\atBIOS\GPCIDrv64.sys [14376 2010-02-04] () R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation) R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-05-23] (Intel Corporation) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66800 2013-01-17] (Logitech Inc.) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2013-10-25] (Razer, Inc.) R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2013-10-25] (Razer, Inc.) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.) R1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21072 2013-03-27] () S3 ALSysIO; \??\C:\Users\*+*\AppData\Local\Temp\ALSysIO64.sys [x] S3 cpuz135; \??\C:\Users\*+*\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [x] S3 cpuz136; \??\C:\Users\*+*\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x] S3 netr7364; system32\DRIVERS\netr7364.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-01 17:02 - 2014-02-01 17:07 - 00030785 _____ () C:\Users\*+*\Downloads\Addition.txt 2014-02-01 17:01 - 2014-02-01 17:07 - 00020089 _____ () C:\Users\*+*\Downloads\FRST.txt 2014-02-01 17:01 - 2014-02-01 17:07 - 00000000 ____D () C:\FRST 2014-02-01 17:01 - 2014-02-01 17:01 - 02080256 _____ (Farbar) C:\Users\*+*\Downloads\FRST64.exe 2014-02-01 16:59 - 2014-02-01 16:59 - 01671464 _____ (Fusion Install ) C:\Users\*+*\Downloads\Setup.exe 2014-02-01 16:59 - 2014-02-01 16:59 - 00001094 _____ () C:\Users\*+*\Desktop\Continue Zip Opener Installation.lnk 2014-02-01 16:58 - 2014-02-01 16:58 - 00666856 _____ () C:\Users\*+*\Downloads\ZipSetup.exe 2014-02-01 16:57 - 2014-02-01 16:57 - 00000822 _____ () C:\Windows\PFRO.log 2014-02-01 16:57 - 2014-02-01 16:57 - 00000168 _____ () C:\Windows\setupact.log 2014-02-01 16:57 - 2014-02-01 16:57 - 00000000 _____ () C:\Windows\setuperr.log 2014-01-31 21:48 - 2014-01-31 21:48 - 01071000 _____ (Solid State Networks) C:\Users\*+*\Downloads\install_flashplayer12x32_mssd_aaa_aih.exe 2014-01-31 20:46 - 2014-01-31 20:51 - 100437272 _____ (Microsoft Corporation) C:\Users\*+*\Downloads\msert(2).exe 2014-01-31 20:38 - 2014-01-31 20:39 - 36700160 _____ () C:\Users\*+*\Downloads\msert(1).exe 2014-01-31 20:26 - 2014-01-31 20:37 - 36700160 _____ () C:\Users\*+*\Downloads\msert.exe 2014-01-31 20:15 - 2014-02-01 17:01 - 00029504 _____ () C:\Windows\WindowsUpdate.log 2014-01-31 20:15 - 2014-01-31 20:16 - 00205372 _____ () C:\Users\*+*\Desktop\cc_20140131_201546.reg 2014-01-31 20:14 - 2014-01-31 20:14 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-01-31 20:14 - 2014-01-31 20:14 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-01-31 20:14 - 2014-01-31 20:14 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-31 20:11 - 2014-01-31 20:11 - 00000000 ____D () C:\Users\*+*\Desktop\Alte Firefox-Daten 2014-01-31 20:09 - 2014-01-31 20:09 - 04721920 _____ (Piriform Ltd) C:\Users\*+*\Downloads\ccsetup410.exe 2014-01-31 20:09 - 2014-01-31 20:09 - 01057016 _____ (Bleeping Computer, LLC) C:\Users\*+*\Desktop\rkill64.exe 2014-01-31 20:03 - 2014-01-31 20:03 - 00000000 ____D () C:\Users\*+*\AppData\Local\Macromedia 2014-01-31 20:02 - 2014-01-31 20:02 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Motorola Mobility 2014-01-30 20:47 - 2014-01-30 20:47 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-30 20:47 - 2014-01-30 20:47 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Mozilla 2014-01-30 20:47 - 2014-01-30 20:47 - 00000000 ____D () C:\ProgramData\Mozilla 2014-01-30 20:47 - 2014-01-30 20:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-30 20:38 - 2013-11-18 06:28 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\*+*\Desktop\TDSSKiller.exe 2014-01-30 20:36 - 2014-01-30 20:36 - 00000000 ____D () C:\TDSSKiller_Quarantine 2014-01-30 20:32 - 2014-01-30 20:33 - 23867560 _____ (Mozilla) C:\Users\*+*\Desktop\Firefox_Setup_26.0.exe 2014-01-30 20:29 - 2014-01-30 20:29 - 00002260 _____ () C:\Users\*+*\Desktop\troj..txt 2014-01-30 20:25 - 2014-01-30 20:25 - 00000000 ____D () C:\Windows\ERUNT 2014-01-30 20:24 - 2014-01-30 20:24 - 01037068 _____ (Thisisu) C:\Users\*+*\Desktop\JRT61.exe 2014-01-30 20:17 - 2014-01-30 20:17 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\ProductData 2014-01-30 20:16 - 2014-01-30 20:45 - 00000000 ____D () C:\ProgramData\IObit 2014-01-30 20:16 - 2014-01-30 20:16 - 00002886 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-01-30 20:16 - 2014-01-30 20:16 - 00001256 _____ () C:\Users\*+*\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-01-30 20:16 - 2014-01-30 20:16 - 00001232 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-01-30 20:16 - 2014-01-30 20:16 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\IObit 2014-01-30 20:16 - 2014-01-30 20:16 - 00000000 ____D () C:\ProgramData\ProductData 2014-01-30 20:16 - 2014-01-30 20:16 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-01-30 20:15 - 2014-01-30 20:16 - 11201344 _____ (IObit) C:\Users\*+*\Downloads\iobituninstaller3.1.exe 2014-01-30 20:14 - 2014-01-31 20:37 - 00002030 _____ () C:\Users\*+*\Desktop\Rkill.txt 2014-01-30 20:14 - 2014-01-30 20:14 - 00000000 ____D () C:\Users\*+*\Desktop\rkill 2014-01-30 20:12 - 2014-01-30 20:14 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\*+*\Desktop\rkill.exe 2014-01-30 18:37 - 2014-01-31 21:24 - 00000000 ____D () C:\AdwCleaner 2014-01-30 18:36 - 2014-01-30 18:36 - 01166132 _____ () C:\Users\*+*\Desktop\adwcleaner-3.018.exe 2014-01-30 17:24 - 2014-01-30 17:24 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-01-30 17:24 - 2014-01-30 17:24 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-01-30 17:24 - 2014-01-30 17:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-01-30 17:21 - 2014-01-30 17:22 - 13670584 _____ (Microsoft Corporation) C:\Users\*+*\Downloads\mseinstall.exe 2014-01-28 16:24 - 2014-01-28 16:24 - 00014089 _____ () C:\Users\*+*\Downloads\Thema - BIOS.odt 2014-01-28 16:23 - 2014-01-28 16:24 - 08435712 _____ () C:\Users\*+*\Downloads\archpr454_setup_en.msi 2014-01-28 16:15 - 2014-01-28 16:08 - 06220854 _____ () C:\Users\*+*\Desktop\140128160851.BMP 2014-01-24 21:50 - 2014-01-24 21:50 - 00000000 ____D () C:\Users\*+*\Desktop\Automatisch zu iTunes hinzufügen 2014-01-24 21:43 - 2014-01-30 20:20 - 00000000 ____D () C:\ProgramData\Apple 2014-01-24 21:43 - 2014-01-28 16:05 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-24 21:43 - 2014-01-24 21:45 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Apple Computer 2014-01-24 21:43 - 2014-01-24 21:43 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-01-24 21:27 - 2014-01-24 21:27 - 00000000 ____D () C:\Users\*+*\Desktop\SE ORDNER 2014-01-24 21:27 - 2014-01-24 21:27 - 00000000 ____D () C:\Users\*+*\Desktop\*+* daten 2014-01-21 20:01 - 2014-01-24 21:53 - 00000000 ____D () C:\Users\*+*\Desktop\Playlist 2014-01-21 20:00 - 2014-01-21 20:00 - 00001243 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-21 20:00 - 2014-01-21 19:59 - 31384613 _____ () C:\Users\*+*\Desktop\Ratatat - Gettysburg [HD] (720p).mp4 2014-01-21 19:01 - 2014-01-21 19:01 - 04833285 _____ () C:\Users\*+*\Desktop\bigmacfake_9_2014.apk 2014-01-20 18:47 - 2013-12-22 04:51 - 08388608 _____ () C:\Users\*+*\Desktop\Z87XD3H.F8d 2014-01-19 13:45 - 2014-01-19 13:45 - 00000000 ____D () C:\Users\*+*\Desktop\Neuer Ordner (2) 2014-01-19 13:31 - 2014-01-19 13:31 - 00003857 _____ () C:\Windows\system32\WmiConf.txt 2014-01-19 13:31 - 2014-01-19 13:31 - 00000177 _____ () C:\Windows\system32\WINS.txt 2014-01-19 13:31 - 2014-01-19 13:31 - 00000125 _____ () C:\Windows\system32\StaticIP.txt 2014-01-19 13:31 - 2013-05-30 01:54 - 00495376 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys 2014-01-19 13:31 - 2013-05-10 20:48 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll 2014-01-19 13:31 - 2013-03-01 21:42 - 00101152 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll 2014-01-19 13:16 - 2013-09-16 12:17 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2014-01-19 13:12 - 2014-01-19 13:12 - 00000894 _____ () C:\Users\Public\Desktop\CPUID CPU-Z OC.lnk 2014-01-19 13:11 - 2014-01-19 13:11 - 00210627 _____ () C:\Users\*+*\Desktop\virtualinput.apk 2014-01-19 13:10 - 2014-01-19 13:15 - 06180864 _____ () C:\Users\*+*\Desktop\z87xd3hf8c.exe 2014-01-16 18:00 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-16 18:00 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-16 18:00 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-16 18:00 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-16 18:00 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-16 18:00 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-16 18:00 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-16 18:00 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-16 18:00 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-13 18:09 - 2014-01-13 18:47 - 01334422 _____ () C:\Users\*+*\Desktop\käsespätzle.psd 2014-01-11 15:20 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-01-11 15:20 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00357152 _____ () C:\Windows\system32\NvIFROpenGL.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00314656 _____ () C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-01-11 15:20 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-01-11 15:20 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-01-11 15:20 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-01-11 15:20 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-01-11 14:05 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-01-11 14:05 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-01-05 12:32 - 2014-01-05 12:32 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-01-05 12:32 - 2014-01-05 12:32 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Malwarebytes 2014-01-05 12:32 - 2014-01-05 12:32 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-05 12:32 - 2014-01-05 12:32 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-05 12:32 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-04 20:28 - 2014-01-04 20:28 - 00000000 ____D () C:\Windows\de 2014-01-04 20:28 - 2014-01-04 20:28 - 00000000 ____D () C:\Program Files (x86)\Windows Live 2014-01-04 20:27 - 2014-01-04 20:30 - 00000000 ____D () C:\Users\*+*\AppData\Local\Windows Live 2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D () C:\Users\*+*\ChromeExtensions 2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D () C:\Users\*+*\AppData\Local\Tempda49fbdeb553fc5d0b827f367382224c 2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D () C:\Users\*+*\AppData\Local\Temp8ba3fc87916936bb475b6183b30f80d9 2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D () C:\Users\*+*\AppData\Local\Temp771e2a75ead2acf1f2059b672f00dec4 2014-01-04 15:54 - 2014-01-04 15:54 - 00000042 _____ () C:\Users\*+*\Desktop\HWiNFO64.INI ==================== One Month Modified Files and Folders ======= 2014-02-01 17:07 - 2014-02-01 17:02 - 00030785 _____ () C:\Users\*+*\Downloads\Addition.txt 2014-02-01 17:07 - 2014-02-01 17:01 - 00020089 _____ () C:\Users\*+*\Downloads\FRST.txt 2014-02-01 17:07 - 2014-02-01 17:01 - 00000000 ____D () C:\FRST 2014-02-01 17:04 - 2009-07-14 05:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-01 17:04 - 2009-07-14 05:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-01 17:03 - 2011-04-12 08:43 - 00700454 _____ () C:\Windows\system32\perfh007.dat 2014-02-01 17:03 - 2011-04-12 08:43 - 00150092 _____ () C:\Windows\system32\perfc007.dat 2014-02-01 17:03 - 2009-07-14 06:13 - 01624034 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-01 17:01 - 2014-02-01 17:01 - 02080256 _____ (Farbar) C:\Users\*+*\Downloads\FRST64.exe 2014-02-01 17:01 - 2014-01-31 20:15 - 00029504 _____ () C:\Windows\WindowsUpdate.log 2014-02-01 17:00 - 2013-06-14 23:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-01 16:59 - 2014-02-01 16:59 - 01671464 _____ (Fusion Install ) C:\Users\*+*\Downloads\Setup.exe 2014-02-01 16:59 - 2014-02-01 16:59 - 00001094 _____ () C:\Users\*+*\Desktop\Continue Zip Opener Installation.lnk 2014-02-01 16:58 - 2014-02-01 16:58 - 00666856 _____ () C:\Users\*+*\Downloads\ZipSetup.exe 2014-02-01 16:58 - 2013-12-07 16:15 - 00003022 _____ () C:\Windows\System32\Tasks\MSIAfterburner 2014-02-01 16:58 - 2013-10-10 18:04 - 00005072 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for *+*-PC-*+* *+*-PC 2014-02-01 16:58 - 2013-06-27 13:26 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Skype 2014-02-01 16:58 - 2013-06-22 13:17 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-02-01 16:57 - 2014-02-01 16:57 - 00000822 _____ () C:\Windows\PFRO.log 2014-02-01 16:57 - 2014-02-01 16:57 - 00000168 _____ () C:\Windows\setupact.log 2014-02-01 16:57 - 2014-02-01 16:57 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-01 16:57 - 2013-07-19 23:07 - 00119808 _____ () C:\Users\*+*\AppData\Roaming\RZR_00205975481988cb7373180ae578.db 2014-02-01 16:57 - 2013-06-20 14:56 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-01 16:57 - 2013-06-13 21:46 - 00000000 ____D () C:\Program Files (x86)\Origin 2014-02-01 16:57 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-01-31 21:48 - 2014-01-31 21:48 - 01071000 _____ (Solid State Networks) C:\Users\*+*\Downloads\install_flashplayer12x32_mssd_aaa_aih.exe 2014-01-31 21:24 - 2014-01-30 18:37 - 00000000 ____D () C:\AdwCleaner 2014-01-31 20:51 - 2014-01-31 20:46 - 100437272 _____ (Microsoft Corporation) C:\Users\*+*\Downloads\msert(2).exe 2014-01-31 20:39 - 2014-01-31 20:38 - 36700160 _____ () C:\Users\*+*\Downloads\msert(1).exe 2014-01-31 20:37 - 2014-01-31 20:26 - 36700160 _____ () C:\Users\*+*\Downloads\msert.exe 2014-01-31 20:37 - 2014-01-30 20:14 - 00002030 _____ () C:\Users\*+*\Desktop\Rkill.txt 2014-01-31 20:18 - 2013-06-13 21:46 - 00000000 ____D () C:\ProgramData\Origin 2014-01-31 20:16 - 2014-01-31 20:15 - 00205372 _____ () C:\Users\*+*\Desktop\cc_20140131_201546.reg 2014-01-31 20:15 - 2013-07-10 13:04 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\DAEMON Tools Lite 2014-01-31 20:15 - 2013-06-17 20:04 - 00000000 ____D () C:\Windows\Minidump 2014-01-31 20:15 - 2013-06-13 21:30 - 00000000 ____D () C:\Windows\Panther 2014-01-31 20:14 - 2014-01-31 20:14 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-01-31 20:14 - 2014-01-31 20:14 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-01-31 20:14 - 2014-01-31 20:14 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-31 20:11 - 2014-01-31 20:11 - 00000000 ____D () C:\Users\*+*\Desktop\Alte Firefox-Daten 2014-01-31 20:09 - 2014-01-31 20:09 - 04721920 _____ (Piriform Ltd) C:\Users\*+*\Downloads\ccsetup410.exe 2014-01-31 20:09 - 2014-01-31 20:09 - 01057016 _____ (Bleeping Computer, LLC) C:\Users\*+*\Desktop\rkill64.exe 2014-01-31 20:03 - 2014-01-31 20:03 - 00000000 ____D () C:\Users\*+*\AppData\Local\Macromedia 2014-01-31 20:02 - 2014-01-31 20:02 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Motorola Mobility 2014-01-30 20:47 - 2014-01-30 20:47 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-30 20:47 - 2014-01-30 20:47 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Mozilla 2014-01-30 20:47 - 2014-01-30 20:47 - 00000000 ____D () C:\ProgramData\Mozilla 2014-01-30 20:47 - 2014-01-30 20:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-30 20:46 - 2013-11-14 18:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-01-30 20:46 - 2013-06-15 14:44 - 00000000 ____D () C:\Users\*+*\AppData\Local\Google 2014-01-30 20:45 - 2014-01-30 20:16 - 00000000 ____D () C:\ProgramData\IObit 2014-01-30 20:37 - 2013-06-13 20:40 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick 2014-01-30 20:36 - 2014-01-30 20:36 - 00000000 ____D () C:\TDSSKiller_Quarantine 2014-01-30 20:33 - 2014-01-30 20:32 - 23867560 _____ (Mozilla) C:\Users\*+*\Desktop\Firefox_Setup_26.0.exe 2014-01-30 20:29 - 2014-01-30 20:29 - 00002260 _____ () C:\Users\*+*\Desktop\troj..txt 2014-01-30 20:25 - 2014-01-30 20:25 - 00000000 ____D () C:\Windows\ERUNT 2014-01-30 20:24 - 2014-01-30 20:24 - 01037068 _____ (Thisisu) C:\Users\*+*\Desktop\JRT61.exe 2014-01-30 20:20 - 2014-01-24 21:43 - 00000000 ____D () C:\ProgramData\Apple 2014-01-30 20:17 - 2014-01-30 20:17 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\ProductData 2014-01-30 20:17 - 2013-12-14 16:57 - 00000000 ____D () C:\Users\*+*\AppData\Local\JDownloader v2.0 2014-01-30 20:16 - 2014-01-30 20:16 - 00002886 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-01-30 20:16 - 2014-01-30 20:16 - 00001256 _____ () C:\Users\*+*\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-01-30 20:16 - 2014-01-30 20:16 - 00001232 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-01-30 20:16 - 2014-01-30 20:16 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\IObit 2014-01-30 20:16 - 2014-01-30 20:16 - 00000000 ____D () C:\ProgramData\ProductData 2014-01-30 20:16 - 2014-01-30 20:16 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-01-30 20:16 - 2014-01-30 20:15 - 11201344 _____ (IObit) C:\Users\*+*\Downloads\iobituninstaller3.1.exe 2014-01-30 20:14 - 2014-01-30 20:14 - 00000000 ____D () C:\Users\*+*\Desktop\rkill 2014-01-30 20:14 - 2014-01-30 20:12 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\*+*\Desktop\rkill.exe 2014-01-30 18:36 - 2014-01-30 18:36 - 01166132 _____ () C:\Users\*+*\Desktop\adwcleaner-3.018.exe 2014-01-30 17:31 - 2013-06-24 16:28 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5 2014-01-30 17:24 - 2014-01-30 17:24 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-01-30 17:24 - 2014-01-30 17:24 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-01-30 17:24 - 2014-01-30 17:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-01-30 17:22 - 2014-01-30 17:21 - 13670584 _____ (Microsoft Corporation) C:\Users\*+*\Downloads\mseinstall.exe 2014-01-28 20:01 - 2013-06-14 14:25 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\vlc 2014-01-28 16:24 - 2014-01-28 16:24 - 00014089 _____ () C:\Users\*+*\Downloads\Thema - BIOS.odt 2014-01-28 16:24 - 2014-01-28 16:23 - 08435712 _____ () C:\Users\*+*\Downloads\archpr454_setup_en.msi 2014-01-28 16:08 - 2014-01-28 16:15 - 06220854 _____ () C:\Users\*+*\Desktop\140128160851.BMP 2014-01-28 16:05 - 2014-01-24 21:43 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-24 21:53 - 2014-01-21 20:01 - 00000000 ____D () C:\Users\*+*\Desktop\Playlist 2014-01-24 21:50 - 2014-01-24 21:50 - 00000000 ____D () C:\Users\*+*\Desktop\Automatisch zu iTunes hinzufügen 2014-01-24 21:45 - 2014-01-24 21:43 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Apple Computer 2014-01-24 21:43 - 2014-01-24 21:43 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-01-24 21:27 - 2014-01-24 21:27 - 00000000 ____D () C:\Users\*+*\Desktop\SE ORDNER 2014-01-24 21:27 - 2014-01-24 21:27 - 00000000 ____D () C:\Users\*+*\Desktop\*+* daten 2014-01-21 20:07 - 2013-11-09 21:11 - 00000000 ____D () C:\Users\*+*\Desktop\Neuer Ordner (5) 2014-01-21 20:04 - 2013-10-14 18:19 - 00000000 ____D () C:\Users\*+*\Desktop\Auto lieder 2014-01-21 20:03 - 2013-06-14 12:22 - 00001166 _____ () C:\Users\*+*\Desktop\CoreTemp.ini 2014-01-21 20:00 - 2014-01-21 20:00 - 00001243 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-21 20:00 - 2013-06-24 16:31 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\DVDVideoSoft 2014-01-21 19:59 - 2014-01-21 20:00 - 31384613 _____ () C:\Users\*+*\Desktop\Ratatat - Gettysburg [HD] (720p).mp4 2014-01-21 19:01 - 2014-01-21 19:01 - 04833285 _____ () C:\Users\*+*\Desktop\bigmacfake_9_2014.apk 2014-01-20 19:00 - 2013-12-14 18:06 - 00000100 _____ () C:\Users\*+*\Desktop\local.txt 2014-01-19 15:32 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-19 13:45 - 2014-01-19 13:45 - 00000000 ____D () C:\Users\*+*\Desktop\Neuer Ordner (2) 2014-01-19 13:32 - 2013-06-13 20:42 - 00000000 ____D () C:\Program Files\Intel 2014-01-19 13:31 - 2014-01-19 13:31 - 00003857 _____ () C:\Windows\system32\WmiConf.txt 2014-01-19 13:31 - 2014-01-19 13:31 - 00000177 _____ () C:\Windows\system32\WINS.txt 2014-01-19 13:31 - 2014-01-19 13:31 - 00000125 _____ () C:\Windows\system32\StaticIP.txt 2014-01-19 13:17 - 2013-06-13 20:48 - 00000000 ____D () C:\ProgramData\InstallShield 2014-01-19 13:16 - 2013-06-13 20:40 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-01-19 13:15 - 2014-01-19 13:10 - 06180864 _____ () C:\Users\*+*\Desktop\z87xd3hf8c.exe 2014-01-19 13:12 - 2014-01-19 13:12 - 00000894 _____ () C:\Users\Public\Desktop\CPUID CPU-Z OC.lnk 2014-01-19 13:12 - 2013-06-29 13:51 - 00000000 ____D () C:\Program Files\CPUID 2014-01-19 13:11 - 2014-01-19 13:11 - 00210627 _____ () C:\Users\*+*\Desktop\virtualinput.apk 2014-01-19 08:33 - 2010-11-21 04:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-01-18 19:06 - 2013-06-14 13:28 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-01-18 17:36 - 2013-06-13 22:48 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2014-01-18 15:08 - 2009-07-14 05:45 - 00449512 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-16 18:22 - 2013-07-15 14:37 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-16 18:22 - 2013-06-14 15:11 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-01-16 18:22 - 2013-06-13 22:49 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 18:22 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini 2014-01-14 18:33 - 2013-06-14 13:28 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-01-13 18:47 - 2014-01-13 18:09 - 01334422 _____ () C:\Users\*+*\Desktop\käsespätzle.psd 2014-01-11 15:41 - 2013-06-15 14:13 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner 2014-01-11 15:22 - 2013-08-17 17:44 - 00000000 ____D () C:\Program Files (x86)\RivaTuner Statistics Server 2014-01-11 15:21 - 2013-06-20 14:54 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-01-11 14:29 - 2013-06-13 20:39 - 01597378 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-01-11 14:05 - 2013-11-20 18:15 - 00000000 ____D () C:\Users\*+*\AppData\Local\NVIDIA Corporation 2014-01-05 14:29 - 2013-06-14 15:11 - 00000000 ____D () C:\Users\*+*\AppData\Local\Microsoft Help 2014-01-05 12:45 - 2013-06-14 15:09 - 00000000 ____D () C:\Program Files (x86)\JAM Software 2014-01-05 12:32 - 2014-01-05 12:32 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-01-05 12:32 - 2014-01-05 12:32 - 00000000 ____D () C:\Users\*+*\AppData\Roaming\Malwarebytes 2014-01-05 12:32 - 2014-01-05 12:32 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-05 12:32 - 2014-01-05 12:32 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-04 20:30 - 2014-01-04 20:27 - 00000000 ____D () C:\Users\*+*\AppData\Local\Windows Live 2014-01-04 20:28 - 2014-01-04 20:28 - 00000000 ____D () C:\Windows\de 2014-01-04 20:28 - 2014-01-04 20:28 - 00000000 ____D () C:\Program Files (x86)\Windows Live 2014-01-04 20:28 - 2013-09-03 17:35 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2014-01-04 20:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-01-04 20:14 - 2013-11-18 19:29 - 00000000 ____D () C:\Users\*+*\Desktop\WhatsApp 2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D () C:\Users\*+*\ChromeExtensions 2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D () C:\Users\*+*\AppData\Local\Tempda49fbdeb553fc5d0b827f367382224c 2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D () C:\Users\*+*\AppData\Local\Temp8ba3fc87916936bb475b6183b30f80d9 2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D () C:\Users\*+*\AppData\Local\Temp771e2a75ead2acf1f2059b672f00dec4 2014-01-04 19:47 - 2013-06-13 20:35 - 00000000 ____D () C:\Users\*+* 2014-01-04 15:54 - 2014-01-04 15:54 - 00000042 _____ () C:\Users\*+*\Desktop\HWiNFO64.INI Some content of TEMP: ==================== C:\Users\*+*\AppData\Local\Temp\ICReinstall_ZipSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-30 19:00 ==================== End Of Log ============================