Windows 7: infiziert mit ib.adnxs.com

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.28.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
Dave :: DAVE-PC [Administrator]

Schutz: Aktiviert

28.08.2013 20:37:52
mbam-log-2013-08-28 (20-37-52).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 229104
Laufzeit: 5 Minute(n), 36 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

# AdwCleaner v3.001 - Report created 27/08/2013 at 22:47:47
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Dave - DAVE-PC
# Running from : C:\Users\Dave\Downloads\adwcleaner3001.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : BrowserDefendert

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Babylon
[!] Folder Deleted : C:\ProgramData\BrowserDefender
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Program Files (x86)\delta
Folder Deleted : C:\Program Files (x86)\PutLockerDownloader
Folder Deleted : C:\Program Files (x86)\Yontoo
Folder Deleted : C:\Users\Dave\AppData\Local\PutLockerDownloader
Folder Deleted : C:\Users\Dave\AppData\Roaming\BabSolution
Folder Deleted : C:\Users\Dave\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Dave\AppData\Roaming\delta
Folder Deleted : C:\Users\Dave\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader
Folder Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\jetpack
Folder Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\Extensions\ffxtlbr@delta.com
File Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\Extensions\plugin@yontoo.com.xpi
File Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\searchplugins\Babylon.xml
File Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\searchplugins\delta.xml
File Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\bprotector_extensions.sqlite
File Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\bprotector_prefs.js
File Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\user.js
File Deleted : C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
File Deleted : C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
File Deleted : C:\Windows\System32\Tasks\EPUpdater

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\apfdadfinodckpcehhdhjlgiphgnbfci
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\PutLockerDownloader
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloader_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloader_RASMANCS
Key Deleted : HKCU\Software\5e0dfdcb134ef43
Key Deleted : HKLM\SOFTWARE\5e0dfdcb134ef43
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{162E06EC-4E38-4809-AE76-BF2400D34334}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v19.0.2 (de)

[ File : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\prefs.js ]

Line Deleted : user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?babsrc=NT_ss&mntrId=5615001BB14C60C0&affID=121563&tt=040713_xmlful&tsp=4937");
Line Deleted : user_pref("browser.search.order.1", "Delta Search");
Line Deleted : user_pref("browser.search.selectedEngine", "Delta Search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?babsrc=HP_ss_gin2g&mntrId=5615001BB14C60C0&affID=121563&tt=040713_xmlful&tsp=4937");
Line Deleted : user_pref("extentions.y2layers.defaultEnableAppsList", "twittube,buzzdock,YontooNewOffers");
Line Deleted : user_pref("extentions.y2layers.installId", "08c58b2a-446b-494c-b117-f2e5afc71244");

-\\ Google Chrome v29.0.1547.57

[ File : C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [13342 octets] - [27/08/2013 22:46:23]
AdwCleaner[S0].txt - [13039 octets] - [27/08/2013 22:47:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13100 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.4 (08.22.2013:1)
OS: Windows 7 Home Premium x64
Ran by Dave on 28.08.2013 at 21:04:53,25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\dll-files.com fixer"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.08.2013 at 21:12:19,00
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Dave (administrator) on 28-08-2013 21:14:23
Running from C:\Users\Dave\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Facebook) C:\Users\Dave\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
() C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Razer\DeathAdder\razertra.exe
(GamersFirst) C:\Users\Dave\AppData\Local\GamersFirst\LIVE!\Live.exe
(Razer Inc.) C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe
() C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2817872 2012-04-25] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.)
HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [415816 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2412616 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4725320 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-10-29] ()
HKCU\...\Run: [Facebook Update] - C:\Users\Dave\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-11-12] (Facebook Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18678376 2013-04-19] (Skype Technologies S.A.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-27] (Intel Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [248320 2011-03-21] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
Startup: C:\Users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk -> C:\Users\Dave\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (Facebook)
Startup: C:\Users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk
ShortcutTarget: GamersFirst LIVE!.lnk -> C:\Users\Dave\AppData\Local\GamersFirst\LIVE!\Live.exe (GamersFirst)
Startup: C:\Users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Warkeys Update.lnk
ShortcutTarget: Warkeys Update.lnk -> C:\Program Files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~3\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Dave\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: putlockerdownloader - C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\Extensions\putlockerdownloader@putlockerdownloader.com.xpi
FF Extension: No Name - C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\bpd409ff.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Tools\Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (ProxTube) - C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.4_0
CHR Extension: (YouTube) - C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.4_0
CHR Extension: (Google Search) - C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (FB unseen) - C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcedcpmfdpjijiamkaeaefgfagnnpei\0.1.7.10_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\Dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-29] ()

==================== Drivers (Whitelisted) ====================

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-08-28] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-11-03] (DT Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-28 21:04 - 2013-08-28 21:04 - 00000000 ____D C:\Windows\ERUNT
2013-08-28 21:02 - 2013-08-28 21:02 - 01021434 _____ (Thisisu) C:\Users\Dave\Downloads\JRT.exe
2013-08-28 21:02 - 2013-08-28 21:02 - 01021434 _____ (Thisisu) C:\Users\Dave\Desktop\JRT.exe
2013-08-28 20:46 - 2013-08-28 20:45 - 00994642 _____ C:\Users\Dave\Desktop\adwcleaner.exe
2013-08-28 20:44 - 2013-08-28 20:45 - 00994642 _____ C:\Users\Dave\Downloads\adwcleaner.exe
2013-08-28 14:18 - 2013-08-28 14:18 - 00472264 _____ C:\Windows\Minidump\082813-17955-01.dmp
2013-08-28 14:18 - 2013-08-28 14:18 - 00000000 ____D C:\Windows\Minidump
2013-08-28 13:55 - 2013-08-28 13:55 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-28 13:55 - 2013-08-28 13:55 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum
2013-08-28 13:55 - 2013-08-28 13:55 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2013-08-28 13:55 - 2013-08-28 13:55 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum
2013-08-28 13:55 - 2013-05-09 10:59 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-28 13:46 - 2013-08-28 13:46 - 00021477 _____ C:\ComboFix.txt
2013-08-28 13:31 - 2013-08-28 13:46 - 00000000 ____D C:\Qoobox
2013-08-28 13:31 - 2013-08-28 13:45 - 00000000 ____D C:\Windows\erdnt
2013-08-28 13:31 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-28 13:31 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-28 13:31 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-28 13:31 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-28 13:31 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-28 13:31 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-28 13:31 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-28 13:31 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-28 13:29 - 2013-08-28 13:29 - 05114728 ____R (Swearware) C:\Users\Dave\Desktop\ComboFix.exe
2013-08-28 13:28 - 2013-08-28 13:29 - 05114728 _____ (Swearware) C:\Users\Dave\Downloads\ComboFix.exe
2013-08-28 00:54 - 2013-08-28 00:54 - 14534628 _____ C:\Users\Dave\Desktop\unifont.rar
2013-08-28 00:53 - 2013-08-28 00:53 - 00000000 ____D C:\Users\Dave\Desktop\unifont
2013-08-28 00:23 - 2013-08-28 00:23 - 01110476 _____ C:\Users\Dave\Downloads\7z920.exe
2013-08-28 00:23 - 2013-08-28 00:23 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-08-27 23:44 - 2013-08-27 23:44 - 00000000 ____D C:\FRST
2013-08-27 23:42 - 2013-08-27 23:42 - 00000180 _____ C:\Users\Dave\defogger_reenable
2013-08-27 23:40 - 2013-08-27 23:39 - 01579080 _____ (Farbar) C:\Users\Dave\Desktop\FRST64.exe
2013-08-27 23:40 - 2013-08-27 23:39 - 00377856 _____ C:\Users\Dave\Desktop\gmer_2.1.19163.exe
2013-08-27 23:40 - 2013-08-27 23:37 - 00050477 _____ C:\Users\Dave\Desktop\Defogger.exe
2013-08-27 23:39 - 2013-08-27 23:39 - 01579080 _____ (Farbar) C:\Users\Dave\Downloads\FRST64.exe
2013-08-27 23:39 - 2013-08-27 23:39 - 00377856 _____ C:\Users\Dave\Downloads\gmer_2.1.19163.exe
2013-08-27 23:37 - 2013-08-27 23:37 - 00050477 _____ C:\Users\Dave\Downloads\Defogger.exe
2013-08-27 23:20 - 2013-08-27 23:20 - 00001105 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-27 23:20 - 2013-08-27 23:20 - 00000000 ____D C:\Users\Dave\AppData\Roaming\Malwarebytes
2013-08-27 23:20 - 2013-08-27 23:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-27 23:20 - 2013-08-27 23:20 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-27 23:20 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-27 23:19 - 2013-08-27 23:20 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Dave\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-27 22:47 - 2013-08-27 22:47 - 00013205 _____ C:\Users\Dave\Desktop\AdwCleaner[S0].txt
2013-08-27 22:46 - 2013-08-28 20:56 - 00000000 ____D C:\AdwCleaner
2013-08-27 22:46 - 2013-08-27 22:47 - 00013342 _____ C:\Users\Dave\Desktop\AdwCleaner[R0].txt
2013-08-27 22:45 - 2013-08-27 22:46 - 00994642 _____ C:\Users\Dave\Downloads\adwcleaner3001.exe
2013-08-27 22:20 - 2013-08-27 22:20 - 00003138 _____ C:\Windows\System32\Tasks\{A9A47E4B-E022-4A5A-8F16-CA57EF640B76}
2013-08-27 22:18 - 2013-08-27 22:19 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dave\Downloads\SpyHunter-Installer.exe
2013-08-27 22:11 - 2013-08-15 16:45 - 02748256 _____ (Kaspersky Lab ZAO) C:\Users\Dave\Desktop\sdgd.exe
2013-08-27 22:11 - 2013-06-06 16:42 - 00014207 ____R C:\Users\Dave\Desktop\eula.txt
2013-08-27 22:10 - 2013-08-27 22:10 - 02733958 _____ C:\Users\Dave\Downloads\tdsskiller (1).zip
2013-08-27 22:05 - 2013-08-27 22:06 - 02733958 _____ C:\Users\Dave\Downloads\tdsskiller.zip
2013-08-27 22:04 - 2013-08-27 22:05 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Dave\Downloads\iexplorer.exe.exe
2013-08-23 17:04 - 2013-08-23 17:04 - 00121003 _____ C:\Users\Dave\Downloads\Ausgleich der stornierten Zahlung Ihrer Bestellung 22.08.2013.zip
2013-08-23 16:43 - 2013-08-23 16:48 - 00000000 ____D C:\Users\Dave\Desktop\nigga
2013-08-23 15:36 - 2013-08-23 16:40 - 1957940700 _____ C:\Users\Dave\Desktop\RedAlert3Demo.zip
2013-08-20 22:10 - 2013-08-20 22:10 - 01467128 _____ C:\Users\Dave\Downloads\SystemCheck_deDE.exe
2013-08-18 17:52 - 2013-08-18 15:37 - 00000000 ____D C:\Users\Dave\Desktop\coru - gloves&dominoes
2013-08-18 17:49 - 2013-08-18 17:50 - 46573041 _____ C:\Users\Dave\Downloads\coru_gloves_n_dominoes_full (1).zip
2013-08-18 17:45 - 2013-08-24 01:31 - 01541983 _____ C:\Users\Dave\Downloads\Nicht bestätigt 466789.crdownload
2013-08-15 07:41 - 2013-08-15 07:41 - 00000000 ____D C:\found.000
2013-08-15 03:13 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 03:13 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 03:13 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 03:13 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 03:13 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 03:13 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 03:13 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 03:13 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 03:13 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 03:13 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 03:13 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 03:13 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 03:13 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 03:13 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 08:51 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 08:51 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 08:51 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 08:51 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 08:51 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 08:51 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 08:51 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 08:51 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 08:50 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 08:50 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 08:50 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 08:50 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 08:50 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 08:50 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 08:50 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 08:50 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 08:50 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 08:50 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 08:50 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 08:50 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 08:50 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 08:50 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 08:50 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 08:50 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 08:50 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 08:50 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 08:50 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-11 16:34 - 2013-08-11 16:34 - 08347516 _____ C:\Users\Dave\Downloads\Twilights eve Orpg Final hack.zip
2013-08-11 16:26 - 2013-08-11 16:27 - 08342908 _____ C:\Users\Dave\Downloads\Twilights Eve hack Final r2.w3x
2013-08-11 12:01 - 2013-08-11 12:01 - 00470016 _____ () C:\Users\Dave\Downloads\27_utfizer (1).exe
2013-08-11 08:28 - 2013-08-11 08:28 - 00470016 _____ () C:\Users\Dave\Downloads\27_utfizer.exe
2013-08-11 05:49 - 2013-08-11 06:47 - 00000000 ____D C:\Users\Dave\AppData\Local\GamersFirst LIVE!
2013-08-11 05:49 - 2013-08-11 05:49 - 00001163 _____ C:\Users\Dave\Desktop\GamersFirst LIVE!.lnk
2013-08-11 05:49 - 2013-08-11 05:49 - 00000000 ____D C:\Users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GamersFirst
2013-08-11 05:48 - 2013-08-11 05:48 - 00000000 ____D C:\Users\Dave\AppData\Local\GamersFirst
2013-08-11 05:46 - 2013-08-11 05:48 - 12849880 _____ (GamersFirst) C:\Users\Dave\Downloads\APB_GamersFirst_LIVE!_Setup_EN.exe
2013-08-09 20:13 - 2013-08-09 20:14 - 00090283 _____ C:\Users\Dave\Desktop\Unbenannt (2).wma
2013-08-09 20:00 - 2013-08-09 20:00 - 00085793 _____ C:\Users\Dave\Documents\Unbenannt.wma
2013-08-09 16:25 - 2013-08-09 16:25 - 00063343 _____ C:\Users\Dave\Desktop\Unbenannt.wav.wma
2013-08-09 16:23 - 2013-08-09 16:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-08-09 16:19 - 2013-08-09 16:19 - 00715054 _____ C:\Users\Dave\Desktop\Unbenannt.wav
2013-08-06 02:49 - 2013-08-09 16:09 - 00000348 _____ C:\Users\Dave\Downloads\SMD RPG (1).txt
2013-08-04 07:37 - 2013-08-04 07:38 - 00000408 _____ C:\Users\Dave\Downloads\SMD RPG.txt
2013-07-29 22:30 - 2013-08-19 13:31 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-07-29 22:30 - 2013-07-29 22:30 - 00000000 ____D C:\Users\Dave\AppData\Local\PunkBuster
2013-07-29 22:29 - 2013-08-19 13:31 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-07-29 22:29 - 2013-08-12 17:30 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-07-29 22:29 - 2013-07-29 22:29 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-07-29 22:13 - 2013-07-29 22:13 - 00000913 _____ C:\Users\Public\Desktop\Infestation Survivor Stories.lnk
2013-07-29 22:11 - 2013-07-29 22:12 - 00000000 _____ C:\Users\Dave\Downloads\Infestation_WebSetup (1).exe
2013-07-29 21:36 - 2013-07-29 21:37 - 08234912 _____ (OP Productions LLC                                          ) C:\Users\Dave\Downloads\Infestation_WebSetup.exe

==================== One Month Modified Files and Folders =======

2013-08-28 21:12 - 2013-08-28 21:12 - 00000780 _____ C:\Users\Dave\Desktop\JRT.txt
2013-08-28 21:04 - 2013-08-28 21:04 - 00000000 ____D C:\Windows\ERUNT
2013-08-28 21:04 - 2012-10-29 23:39 - 00000000 ____D C:\Users\Dave\AppData\Roaming\Skype
2013-08-28 21:02 - 2013-08-28 21:02 - 01021434 _____ (Thisisu) C:\Users\Dave\Downloads\JRT.exe
2013-08-28 21:02 - 2013-08-28 21:02 - 01021434 _____ (Thisisu) C:\Users\Dave\Desktop\JRT.exe
2013-08-28 21:02 - 2012-10-29 23:17 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-28 21:00 - 2009-07-14 06:45 - 00015472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-28 21:00 - 2009-07-14 06:45 - 00015472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-28 21:00 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-28 20:56 - 2013-08-27 22:46 - 00000000 ____D C:\AdwCleaner
2013-08-28 20:54 - 2013-04-25 07:27 - 00003112 _____ C:\Windows\System32\Tasks\RDReminder
2013-08-28 20:53 - 2012-10-29 23:17 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-28 20:51 - 2013-05-17 05:18 - 00000000 ____D C:\Users\Dave\AppData\Local\LogMeIn Hamachi
2013-08-28 20:51 - 2012-10-30 05:49 - 00112065 _____ C:\Windows\setupact.log
2013-08-28 20:51 - 2012-10-29 23:17 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-28 20:51 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-28 20:50 - 2012-10-29 21:34 - 01303779 _____ C:\Windows\WindowsUpdate.log
2013-08-28 20:45 - 2013-08-28 20:46 - 00994642 _____ C:\Users\Dave\Desktop\adwcleaner.exe
2013-08-28 20:45 - 2013-08-28 20:44 - 00994642 _____ C:\Users\Dave\Downloads\adwcleaner.exe
2013-08-28 20:39 - 2012-10-29 23:43 - 00000000 ____D C:\ProgramData\PMB Files
2013-08-28 20:36 - 2012-11-12 21:26 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-96602896-721695825-1089395979-1000UA.job
2013-08-28 20:36 - 2012-11-12 21:26 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-96602896-721695825-1089395979-1000Core.job
2013-08-28 20:28 - 2012-10-29 23:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-28 14:18 - 2013-08-28 14:18 - 00472264 _____ C:\Windows\Minidump\082813-17955-01.dmp
2013-08-28 14:18 - 2013-08-28 14:18 - 00000000 ____D C:\Windows\Minidump
2013-08-28 14:18 - 2012-11-26 01:51 - 583835677 _____ C:\Windows\MEMORY.DMP
2013-08-28 14:18 - 2012-10-30 20:50 - 00045606 _____ C:\Windows\PFRO.log
2013-08-28 13:55 - 2013-08-28 13:55 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-28 13:55 - 2013-08-28 13:55 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum
2013-08-28 13:55 - 2013-08-28 13:55 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2013-08-28 13:55 - 2013-08-28 13:55 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum
2013-08-28 13:55 - 2012-10-29 23:17 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-28 13:55 - 2012-10-29 23:17 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-28 13:55 - 2012-10-29 23:17 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-08-28 13:46 - 2013-08-28 13:46 - 00021477 _____ C:\ComboFix.txt
2013-08-28 13:46 - 2013-08-28 13:31 - 00000000 ____D C:\Qoobox
2013-08-28 13:46 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-08-28 13:45 - 2013-08-28 13:31 - 00000000 ____D C:\Windows\erdnt
2013-08-28 13:44 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-28 13:29 - 2013-08-28 13:29 - 05114728 ____R (Swearware) C:\Users\Dave\Desktop\ComboFix.exe
2013-08-28 13:29 - 2013-08-28 13:28 - 05114728 _____ (Swearware) C:\Users\Dave\Downloads\ComboFix.exe
2013-08-28 07:01 - 2012-11-19 07:59 - 00000274 _____ C:\Windows\Tasks\DLL-files.com Fixer_MONTHLY.job
2013-08-28 03:25 - 2013-01-27 01:54 - 00000000 ____D C:\Program Files (x86)\Warcraft III
2013-08-28 00:54 - 2013-08-28 00:54 - 14534628 _____ C:\Users\Dave\Desktop\unifont.rar
2013-08-28 00:53 - 2013-08-28 00:53 - 00000000 ____D C:\Users\Dave\Desktop\unifont
2013-08-28 00:23 - 2013-08-28 00:23 - 01110476 _____ C:\Users\Dave\Downloads\7z920.exe
2013-08-28 00:23 - 2013-08-28 00:23 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-08-27 23:44 - 2013-08-27 23:44 - 00000000 ____D C:\FRST
2013-08-27 23:42 - 2013-08-27 23:42 - 00000180 _____ C:\Users\Dave\defogger_reenable
2013-08-27 23:42 - 2012-10-29 21:39 - 00000000 ____D C:\Users\Dave
2013-08-27 23:39 - 2013-08-27 23:40 - 01579080 _____ (Farbar) C:\Users\Dave\Desktop\FRST64.exe
2013-08-27 23:39 - 2013-08-27 23:40 - 00377856 _____ C:\Users\Dave\Desktop\gmer_2.1.19163.exe
2013-08-27 23:39 - 2013-08-27 23:39 - 01579080 _____ (Farbar) C:\Users\Dave\Downloads\FRST64.exe
2013-08-27 23:39 - 2013-08-27 23:39 - 00377856 _____ C:\Users\Dave\Downloads\gmer_2.1.19163.exe
2013-08-27 23:37 - 2013-08-27 23:40 - 00050477 _____ C:\Users\Dave\Desktop\Defogger.exe
2013-08-27 23:37 - 2013-08-27 23:37 - 00050477 _____ C:\Users\Dave\Downloads\Defogger.exe
2013-08-27 23:20 - 2013-08-27 23:20 - 00001105 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-27 23:20 - 2013-08-27 23:20 - 00000000 ____D C:\Users\Dave\AppData\Roaming\Malwarebytes
2013-08-27 23:20 - 2013-08-27 23:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-27 23:20 - 2013-08-27 23:20 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-27 23:20 - 2013-08-27 23:19 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Dave\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-27 22:47 - 2013-08-27 22:47 - 00013205 _____ C:\Users\Dave\Desktop\AdwCleaner[S0].txt
2013-08-27 22:47 - 2013-08-27 22:46 - 00013342 _____ C:\Users\Dave\Desktop\AdwCleaner[R0].txt
2013-08-27 22:46 - 2013-08-27 22:45 - 00994642 _____ C:\Users\Dave\Downloads\adwcleaner3001.exe
2013-08-27 22:20 - 2013-08-27 22:20 - 00003138 _____ C:\Windows\System32\Tasks\{A9A47E4B-E022-4A5A-8F16-CA57EF640B76}
2013-08-27 22:19 - 2013-08-27 22:18 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dave\Downloads\SpyHunter-Installer.exe
2013-08-27 22:10 - 2013-08-27 22:10 - 02733958 _____ C:\Users\Dave\Downloads\tdsskiller (1).zip
2013-08-27 22:06 - 2013-08-27 22:05 - 02733958 _____ C:\Users\Dave\Downloads\tdsskiller.zip
2013-08-27 22:05 - 2013-08-27 22:04 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Dave\Downloads\iexplorer.exe.exe
2013-08-27 16:52 - 2013-03-06 15:42 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-08-26 07:03 - 2012-10-29 21:39 - 00000000 ___RD C:\Users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-24 07:02 - 2012-11-19 07:59 - 00000290 _____ C:\Windows\Tasks\DLL-files.com Fixer_UPDATES.job
2013-08-24 01:31 - 2013-08-18 17:45 - 01541983 _____ C:\Users\Dave\Downloads\Nicht bestätigt 466789.crdownload
2013-08-24 01:30 - 2012-11-04 20:23 - 00000000 ____D C:\Users\Dave\AppData\Roaming\TS3Client
2013-08-24 01:17 - 2012-11-17 22:27 - 00000000 ____D C:\Users\Dave\AppData\Roaming\vlc
2013-08-23 17:04 - 2013-08-23 17:04 - 00121003 _____ C:\Users\Dave\Downloads\Ausgleich der stornierten Zahlung Ihrer Bestellung 22.08.2013.zip
2013-08-23 16:48 - 2013-08-23 16:43 - 00000000 ____D C:\Users\Dave\Desktop\nigga
2013-08-23 16:40 - 2013-08-23 15:36 - 1957940700 _____ C:\Users\Dave\Desktop\RedAlert3Demo.zip
2013-08-22 22:17 - 2012-10-29 23:22 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-21 19:29 - 2012-10-29 23:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-21 19:29 - 2012-10-29 23:05 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 19:29 - 2012-10-29 23:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 22:10 - 2013-08-20 22:10 - 01467128 _____ C:\Users\Dave\Downloads\SystemCheck_deDE.exe
2013-08-19 13:31 - 2013-07-29 22:30 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-08-19 13:31 - 2013-07-29 22:29 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-08-19 13:29 - 2012-12-03 00:17 - 00000000 ____D C:\Users\Dave\Documents\The War Z
2013-08-19 03:18 - 2013-06-03 20:47 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-18 17:50 - 2013-08-18 17:49 - 46573041 _____ C:\Users\Dave\Downloads\coru_gloves_n_dominoes_full (1).zip
2013-08-18 15:37 - 2013-08-18 17:52 - 00000000 ____D C:\Users\Dave\Desktop\coru - gloves&dominoes
2013-08-15 20:43 - 2013-05-23 12:26 - 00000000 ____D C:\Users\Dave\Desktop\musik
2013-08-15 19:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-15 16:45 - 2013-08-27 22:11 - 02748256 _____ (Kaspersky Lab ZAO) C:\Users\Dave\Desktop\sdgd.exe
2013-08-15 07:41 - 2013-08-15 07:41 - 00000000 ____D C:\found.000
2013-08-15 03:16 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2013-08-15 03:09 - 2009-07-14 19:58 - 00697098 _____ C:\Windows\system32\perfh007.dat
2013-08-15 03:09 - 2009-07-14 19:58 - 00148362 _____ C:\Windows\system32\perfc007.dat
2013-08-15 03:09 - 2009-07-14 07:13 - 01635404 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-12 17:30 - 2013-07-29 22:29 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-08-12 14:42 - 2012-10-29 23:09 - 00000000 ____D C:\Program Files (x86)\Tools
2013-08-11 16:34 - 2013-08-11 16:34 - 08347516 _____ C:\Users\Dave\Downloads\Twilights eve Orpg Final hack.zip
2013-08-11 16:27 - 2013-08-11 16:26 - 08342908 _____ C:\Users\Dave\Downloads\Twilights Eve hack Final r2.w3x
2013-08-11 12:01 - 2013-08-11 12:01 - 00470016 _____ () C:\Users\Dave\Downloads\27_utfizer (1).exe
2013-08-11 08:28 - 2013-08-11 08:28 - 00470016 _____ () C:\Users\Dave\Downloads\27_utfizer.exe
2013-08-11 06:48 - 2013-01-27 01:56 - 00001243 _____ C:\Users\Public\Desktop\Warcraft III - The Frozen Throne.lnk
2013-08-11 06:47 - 2013-08-11 05:49 - 00000000 ____D C:\Users\Dave\AppData\Local\GamersFirst LIVE!
2013-08-11 05:49 - 2013-08-11 05:49 - 00001163 _____ C:\Users\Dave\Desktop\GamersFirst LIVE!.lnk
2013-08-11 05:49 - 2013-08-11 05:49 - 00000000 ____D C:\Users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GamersFirst
2013-08-11 05:48 - 2013-08-11 05:48 - 00000000 ____D C:\Users\Dave\AppData\Local\GamersFirst
2013-08-11 05:48 - 2013-08-11 05:46 - 12849880 _____ (GamersFirst) C:\Users\Dave\Downloads\APB_GamersFirst_LIVE!_Setup_EN.exe
2013-08-09 20:14 - 2013-08-09 20:13 - 00090283 _____ C:\Users\Dave\Desktop\Unbenannt (2).wma
2013-08-09 20:00 - 2013-08-09 20:00 - 00085793 _____ C:\Users\Dave\Documents\Unbenannt.wma
2013-08-09 16:25 - 2013-08-09 16:25 - 00063343 _____ C:\Users\Dave\Desktop\Unbenannt.wav.wma
2013-08-09 16:23 - 2013-08-09 16:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-08-09 16:19 - 2013-08-09 16:19 - 00715054 _____ C:\Users\Dave\Desktop\Unbenannt.wav
2013-08-09 16:09 - 2013-08-06 02:49 - 00000348 _____ C:\Users\Dave\Downloads\SMD RPG (1).txt
2013-08-05 09:49 - 2013-07-19 17:49 - 00000232 _____ C:\Users\Dave\Desktop\Morrowind 100%.txt
2013-08-04 07:38 - 2013-08-04 07:37 - 00000408 _____ C:\Users\Dave\Downloads\SMD RPG.txt
2013-07-30 14:56 - 2012-11-27 00:26 - 00000000 ____D C:\Program Files (x86)\Steam
2013-07-29 22:30 - 2013-07-29 22:30 - 00000000 ____D C:\Users\Dave\AppData\Local\PunkBuster
2013-07-29 22:29 - 2013-07-29 22:29 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-07-29 22:14 - 2012-12-03 00:17 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-29 22:14 - 2012-12-03 00:17 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-07-29 22:13 - 2013-07-29 22:13 - 00000913 _____ C:\Users\Public\Desktop\Infestation Survivor Stories.lnk
2013-07-29 22:12 - 2013-07-29 22:11 - 00000000 _____ C:\Users\Dave\Downloads\Infestation_WebSetup (1).exe
2013-07-29 21:37 - 2013-07-29 21:36 - 08234912 _____ (OP Productions LLC                                          ) C:\Users\Dave\Downloads\Infestation_WebSetup.exe

Files to move or delete:
====================
C:\Users\Dave\AppData\Local\Temp\Quarantine.exe
C:\Users\Dave\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-23 01:04

==================== End Of Log ============================