Windows 8 64 Bit: Werbungs-Pop-Ups bei Firefox

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01
Ran by Patrick (administrator) on PAKO on 20-09-2013 19:21:17
Running from C:\Users\Patrick\Desktop
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\WINDOWS\system32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
() C:\WINDOWS\SysWOW64\PnkBstrA.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(AMD) C:\WINDOWS\system32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSI_TRAY.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [XFast LAN] - C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}] - "C:\Users\Patrick\AppData\Local\Temp\cis78A4.exe" --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82} <===== ATTENTION
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191312 2012-08-07] (Realtek Semiconductor)
HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKCU\...\Run: [ASRockRuefi] - [x]
HKCU\...\Run: [ASRockXTU] - [x]
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1811368 2013-09-06] (Valve Corporation)
HKCU\...\Run: [SSync] - C:\Users\Patrick\AppData\Roaming\SSync\SSync.exe [36864 2013-04-10] ()
HKCU\...\Run: [DataMgr] - C:\Users\Patrick\AppData\Roaming\DataMgr\DataMgr.exe [168848 2013-06-26] (HTTO Group, Ltd.)
HKCU\...\Run: [DAEMON Tools Ultra Agent] - C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe [3128352 2013-06-25] (Disc Soft Ltd)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [SCheck] - C:\Users\Patrick\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [Snoozer] - "C:\Users\Patrick\AppData\Roaming\Snz\Snz.exe"
HKCU\...\Run: [Intermediate] - "C:\Users\Patrick\AppData\Roaming\Intermediate\Intermediate.exe"
HKCU\...\Run: [OMESupervisor] - C:\Users\Patrick\AppData\Local\omesuperv.exe [2218359 2013-08-28] ()
MountPoints2: {61fddf53-de7b-11e2-be66-806e6f6e6963} - "D:\discnav.exe" 
MountPoints2: {f0ddbdb8-eece-11e2-be6d-bc5ff4394d21} - "F:\setup.exe" 
HKLM-x32\...\Run: [XFastUSB] - C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5021448 2013-06-26] (FNet Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-06-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [RoccatKone+] - C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [552960 2011-07-12] (ROCCAT GmbH)
HKU\Angie\...\Run: [ASRockRuefi] - [x]
HKU\Angie\...\Run: [ASRockXTU] - [x]
HKU\Angie\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1811368 2013-09-06] (Valve Corporation)
HKU\Angie\...\Run: [SCheck] - C:\Users\Patrick\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKU\Angie\...\Run: [SSync] - C:\Users\Patrick\AppData\Roaming\SSync\SSync.exe [36864 2013-04-10] ()
HKU\Angie\...\Run: [DataMgr] - C:\Users\Patrick\AppData\Roaming\DataMgr\DataMgr.exe [168848 2013-06-26] (HTTO Group, Ltd.)
HKU\Angie\...\Run: [Intermediate] - "C:\Users\Patrick\AppData\Roaming\Intermediate\Intermediate.exe"
HKU\Angie\...\Run: [DAEMON Tools Ultra Agent] - C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe [3128352 2013-06-25] (Disc Soft Ltd)
HKU\Angie\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://wisersearch.com/?channel=de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x90D6AECB8972CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://wisersearch.com/search.php?channel=de&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://wisersearch.com/search.php?channel=de&q={searchTerms}
SearchScopes: HKCU - {984D1DB4-7047-48AB-824B-305C0F6AB2FE} URL = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=682ade0f000000000000bc5ff4394d21&r=595
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.76\npchrome_frame.dll (Google Inc.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.76\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default
FF user.js: detected! => C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\searchplugins\search.xml
FF SearchPlugin: C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\searchplugins\search_the_web.xml
FF SearchPlugin: C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\Extensions\ich@maltegoetz.de
FF Extension: WOT - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Block site - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc}
FF Extension: om - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\Extensions\om@offermosquito.com.xpi
FF Extension: No Name - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\0vimpc1f.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-06-04] (Advanced Micro Devices, Inc.)
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
R3 Disc Soft Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [632352 2013-06-25] (Disc Soft Ltd)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-26] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [34640 2012-08-09] (ASRock Inc.)
R3 AsrVDrive; C:\Windows\system32\DRIVERS\AsrVDrive.sys [24400 2012-10-01] (ASRock Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [94208 2013-04-24] (Advanced Micro Devices)
R3 dtscsibus; C:\Windows\system32\DRIVERS\dtscsibus.sys [29696 2013-07-19] (Disc Soft Ltd)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2013-07-31] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2013-06-26] (FNet Co., Ltd.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
S3 RTL85n64; C:\Windows\system32\DRIVERS\RTL85n64.sys [378368 2012-06-02] (Realtek)
S3 AsrDrv10; \??\C:\WINDOWS\SysWOW64\Drivers\AsrDrv10.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-20 19:16 - 2013-09-20 19:17 - 00036778 _____ C:\Users\Patrick\Downloads\FRST.txt
2013-09-20 19:16 - 2013-09-20 19:16 - 00028276 _____ C:\Users\Patrick\Downloads\Addition.txt
2013-09-20 19:15 - 2013-09-20 19:15 - 00000000 ____D C:\FRST
2013-09-20 19:14 - 2013-09-20 19:15 - 01950622 _____ (Farbar) C:\Users\Patrick\Desktop\FRST64.exe
2013-09-20 19:14 - 2013-09-20 19:14 - 00000476 _____ C:\Users\Patrick\Downloads\defogger_disable.log
2013-09-20 19:14 - 2013-09-20 19:14 - 00000000 _____ C:\Users\Patrick\defogger_reenable
2013-09-20 19:13 - 2013-09-20 19:13 - 01039554 _____ C:\Users\Patrick\Downloads\adwcleaner.exe
2013-09-20 19:12 - 2013-09-20 19:13 - 01029675 _____ (Thisisu) C:\Users\Patrick\Downloads\JRT.exe
2013-09-20 19:12 - 2013-09-20 19:12 - 00050477 _____ C:\Users\Patrick\Downloads\Defogger.exe
2013-09-20 19:06 - 2013-09-20 19:06 - 00000000 ____D C:\Users\Patrick\AppData\Local\Secunia PSI
2013-09-20 19:02 - 2013-09-20 19:02 - 00000000 ____D C:\Program Files (x86)\Secunia
2013-09-20 19:01 - 2013-09-20 19:01 - 03272136 _____ (Secunia) C:\Users\Patrick\Downloads\PSISetup711.exe
2013-09-11 19:11 - 2013-08-21 06:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-11 19:11 - 2013-08-21 06:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-11 19:11 - 2013-08-21 06:11 - 19246592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-09-11 19:11 - 2013-08-21 06:11 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-09-11 19:11 - 2013-08-21 04:34 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-09-11 19:11 - 2013-08-21 04:06 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-11 19:11 - 2013-08-21 04:06 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-11 19:11 - 2013-08-21 04:06 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 14332928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 02048000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-09-11 19:11 - 2013-08-21 04:05 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-09-11 19:11 - 2013-08-21 03:43 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-09-11 19:11 - 2013-08-21 01:52 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-09-11 19:11 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2013-09-11 19:11 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2013-09-11 19:11 - 2013-08-16 07:39 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-09-11 19:11 - 2013-08-16 07:32 - 00209200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2013-09-11 19:11 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2013-09-11 19:11 - 2013-08-16 07:22 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2013-09-11 19:11 - 2013-08-16 07:21 - 03275776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 01621504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2013-09-11 19:11 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2013-09-11 19:11 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00083968 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2013-09-11 19:11 - 2013-08-16 00:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2013-09-11 19:11 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2013-09-11 19:11 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2013-09-11 19:11 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2013-09-11 19:10 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-09-11 19:10 - 2013-08-03 06:30 - 04038144 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-09-11 19:10 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2013-09-11 19:10 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2013-09-11 19:10 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2013-09-11 19:10 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2013-09-11 19:10 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2013-09-11 19:10 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2013-09-11 19:10 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanadvui.dll
2013-09-11 19:10 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2013-09-11 19:10 - 2013-07-06 02:16 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2013-09-11 19:10 - 2013-07-03 02:23 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2013-09-11 19:10 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2013-09-11 19:10 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2013-09-11 19:10 - 2013-07-03 02:22 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-09-11 19:10 - 2013-07-03 02:11 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2013-09-11 19:10 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-09-11 19:10 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2013-09-11 19:10 - 2013-07-02 00:08 - 00387583 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-09-11 19:10 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe
2013-09-11 19:10 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe
2013-09-11 19:10 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2013-09-11 19:10 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2013-09-11 19:10 - 2013-06-29 07:43 - 00327512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2013-09-11 19:10 - 2013-06-29 03:12 - 01022464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-09-11 19:10 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2013-09-11 19:10 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2013-09-11 19:10 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2013-09-11 19:10 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2013-09-11 19:10 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2013-09-11 19:10 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll
2013-09-11 19:10 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2013-09-11 19:10 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll
2013-09-11 19:10 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2013-09-11 19:10 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2013-09-11 19:10 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2013-09-11 19:10 - 2013-06-10 23:17 - 00096512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-09-11 19:10 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2013-09-11 19:10 - 2013-06-10 21:15 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-09-11 19:10 - 2013-06-10 21:15 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-09-11 19:10 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2013-09-11 19:10 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2013-09-11 19:10 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2013-09-11 19:10 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2013-09-01 18:28 - 2013-09-01 18:28 - 00000000 ____D C:\Users\Patrick\AppData\Local\ESN Sonar
2013-08-28 20:46 - 2013-08-28 20:46 - 02218359 _____ C:\Users\Patrick\AppData\Local\omesuperv.exe
2013-08-26 16:46 - 2013-08-26 16:46 - 00000000 ____D C:\Users\Patrick\AppData\Local\Logitech
2013-08-26 16:43 - 2013-08-26 16:43 - 00000000 ____D C:\Program Files\Logitech
2013-08-26 16:43 - 2013-08-26 16:43 - 00000000 ____D C:\Program Files\Common Files\Logitech
2013-08-26 16:40 - 2013-08-26 16:41 - 17276616 _____ (Logitech                                                    ) C:\Users\Patrick\Downloads\lgs510_x64.exe
2013-08-25 21:02 - 2013-08-25 21:02 - 00000000 ____D C:\ProgramData\ROCCAT
2013-08-25 21:01 - 2013-08-25 21:01 - 00000000 ____D C:\Program Files (x86)\ROCCAT
2013-08-25 20:36 - 2013-08-25 20:40 - 65770560 _____ C:\Users\Patrick\Downloads\ROCCAT_Kone[+]_DRV1.49_FW1.45.zip

==================== One Month Modified Files and Folders =======

2013-09-20 19:17 - 2013-09-20 19:16 - 00036778 _____ C:\Users\Patrick\Downloads\FRST.txt
2013-09-20 19:16 - 2013-09-20 19:16 - 00028276 _____ C:\Users\Patrick\Downloads\Addition.txt
2013-09-20 19:15 - 2013-09-20 19:15 - 00000000 ____D C:\FRST
2013-09-20 19:15 - 2013-09-20 19:14 - 01950622 _____ (Farbar) C:\Users\Patrick\Desktop\FRST64.exe
2013-09-20 19:14 - 2013-09-20 19:14 - 00000476 _____ C:\Users\Patrick\Downloads\defogger_disable.log
2013-09-20 19:14 - 2013-09-20 19:14 - 00000000 _____ C:\Users\Patrick\defogger_reenable
2013-09-20 19:14 - 2013-06-26 18:21 - 01791791 _____ C:\WINDOWS\WindowsUpdate.log
2013-09-20 19:14 - 2013-06-26 18:21 - 00000000 ____D C:\Users\Patrick
2013-09-20 19:13 - 2013-09-20 19:13 - 01039554 _____ C:\Users\Patrick\Downloads\adwcleaner.exe
2013-09-20 19:13 - 2013-09-20 19:12 - 01029675 _____ (Thisisu) C:\Users\Patrick\Downloads\JRT.exe
2013-09-20 19:12 - 2013-09-20 19:12 - 00050477 _____ C:\Users\Patrick\Downloads\Defogger.exe
2013-09-20 19:06 - 2013-09-20 19:06 - 00000000 ____D C:\Users\Patrick\AppData\Local\Secunia PSI
2013-09-20 19:02 - 2013-09-20 19:02 - 00000000 ____D C:\Program Files (x86)\Secunia
2013-09-20 19:01 - 2013-09-20 19:01 - 03272136 _____ (Secunia) C:\Users\Patrick\Downloads\PSISetup711.exe
2013-09-20 19:00 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-09-20 18:56 - 2013-07-08 15:30 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-20 18:55 - 2013-07-24 21:59 - 00000000 ____D C:\Users\Patrick\AppData\Roaming\Skype
2013-09-20 18:55 - 2013-06-30 23:20 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-20 13:47 - 2013-07-08 15:30 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-20 13:41 - 2013-06-26 18:53 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-09-15 15:49 - 2013-07-21 15:49 - 00003518 _____ C:\WINDOWS\System32\Tasks\FileAdvisorCheck
2013-09-15 15:49 - 2013-07-21 15:49 - 00000000 ____D C:\Program Files (x86)\File Type Advisor
2013-09-15 15:07 - 2013-06-26 21:04 - 00290184 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2013-09-15 15:07 - 2013-06-26 20:56 - 00290184 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2013-09-15 15:07 - 2013-06-26 20:56 - 00280904 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2013-09-15 13:05 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-09-15 12:25 - 2013-06-26 18:48 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-14 19:14 - 2012-07-26 12:27 - 00751892 _____ C:\WINDOWS\system32\perfh007.dat
2013-09-14 19:14 - 2012-07-26 12:27 - 00155620 _____ C:\WINDOWS\system32\perfc007.dat
2013-09-14 19:14 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-09-14 19:12 - 2013-06-26 19:08 - 00000000 ____D C:\Users\Patrick\AppData\Roaming\vlc
2013-09-14 19:08 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-09-13 22:06 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-09-13 22:05 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-13 22:05 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-13 22:05 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-11 19:40 - 2013-08-15 07:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-09-11 19:38 - 2013-06-27 22:22 - 79143768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-09-10 18:41 - 2013-06-26 18:53 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2013-09-05 22:09 - 2013-07-21 20:43 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-05 22:09 - 2013-07-21 20:43 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-05 10:08 - 2013-07-05 11:51 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1031598946-2917935338-1954894108-1004
2013-09-05 10:06 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-09-02 19:34 - 2013-07-04 21:01 - 00000000 ____D C:\Users\Angie\AppData\Local\VirtualStore
2013-09-01 18:50 - 2013-06-26 18:21 - 00000000 ____D C:\Users\Patrick\AppData\Local\Packages
2013-09-01 18:28 - 2013-09-01 18:28 - 00000000 ____D C:\Users\Patrick\AppData\Local\ESN Sonar
2013-08-28 20:46 - 2013-08-28 20:46 - 02218359 _____ C:\Users\Patrick\AppData\Local\omesuperv.exe
2013-08-26 16:46 - 2013-08-26 16:46 - 00000000 ____D C:\Users\Patrick\AppData\Local\Logitech
2013-08-26 16:43 - 2013-08-26 16:43 - 00000000 ____D C:\Program Files\Logitech
2013-08-26 16:43 - 2013-08-26 16:43 - 00000000 ____D C:\Program Files\Common Files\Logitech
2013-08-26 16:41 - 2013-08-26 16:40 - 17276616 _____ (Logitech                                                    ) C:\Users\Patrick\Downloads\lgs510_x64.exe
2013-08-25 21:02 - 2013-08-25 21:02 - 00000000 ____D C:\ProgramData\ROCCAT
2013-08-25 21:02 - 2013-06-26 18:21 - 00000000 ____D C:\Users\Patrick\AppData\Local\VirtualStore
2013-08-25 21:01 - 2013-08-25 21:01 - 00000000 ____D C:\Program Files (x86)\ROCCAT
2013-08-25 21:01 - 2013-06-26 19:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-25 20:40 - 2013-08-25 20:36 - 65770560 _____ C:\Users\Patrick\Downloads\ROCCAT_Kone[+]_DRV1.49_FW1.45.zip
2013-08-21 23:11 - 2013-06-26 18:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-21 06:12 - 2013-09-11 19:11 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-08-21 06:12 - 2013-09-11 19:11 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-08-21 06:11 - 2013-09-11 19:11 - 19246592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-08-21 06:11 - 2013-09-11 19:11 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-08-21 04:34 - 2013-09-11 19:11 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-08-21 04:06 - 2013-09-11 19:11 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-08-21 04:06 - 2013-09-11 19:11 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-08-21 04:06 - 2013-09-11 19:11 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 14332928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 02048000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-08-21 04:05 - 2013-09-11 19:11 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-08-21 03:43 - 2013-09-11 19:11 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-08-21 01:52 - 2013-09-11 19:11 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll

Some content of TEMP:
====================
C:\Users\Patrick\AppData\Local\Temp\IminentSetup.exe
C:\Users\Patrick\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe
C:\Users\Patrick\AppData\Local\Temp\sonarinst.exe
C:\Users\Patrick\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-20 18:54

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-20 19:30:34
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-2 Hitachi_HDS721010CLA332 rev.JP4OA3MA 931,51GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Patrick\AppData\Local\Temp\pxloapog.sys


---- User code sections - GMER 2.1 ----

.text   C:\WINDOWS\system32\atieclxx.exe[4332] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306         000007f8f7e0177a 4 bytes [E0, F7, F8, 07]
.text   C:\WINDOWS\system32\atieclxx.exe[4332] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314         000007f8f7e01782 4 bytes [E0, F7, F8, 07]
.text   C:\WINDOWS\Explorer.EXE[4416] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                            000007f8f0fe1532 4 bytes [FE, F0, F8, 07]
.text   C:\WINDOWS\Explorer.EXE[4416] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                            000007f8f0fe153a 4 bytes [FE, F0, F8, 07]
.text   C:\WINDOWS\Explorer.EXE[4416] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                          000007f8f0fe165a 4 bytes [FE, F0, F8, 07]
.text   C:\Program Files\ASRock\XFast LAN\cfosspeed.exe[6028] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690    000007f8f0fe1532 4 bytes [FE, F0, F8, 07]
.text   C:\Program Files\ASRock\XFast LAN\cfosspeed.exe[6028] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698    000007f8f0fe153a 4 bytes [FE, F0, F8, 07]
.text   C:\Program Files\ASRock\XFast LAN\cfosspeed.exe[6028] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246  000007f8f0fe165a 4 bytes [FE, F0, F8, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[4448] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690    000007f8f0fe1532 4 bytes [FE, F0, F8, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[4448] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698    000007f8f0fe153a 4 bytes [FE, F0, F8, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[4448] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246  000007f8f0fe165a 4 bytes [FE, F0, F8, 07]

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [5552:5288]                                                                   fffff960008dc5e8

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                           756722212

---- EOF - GMER 2.1 ----