Windows 7: zweifelhaften Emailanhang zip-Datei geöffnet

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-11-2013
Ran by hp (administrator) on HP-HP on 30-11-2013 16:15:50
Running from C:\Users\hp\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Proximity Sensor\HPPRXSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
() C:\Program Files (x86)\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Intel\Intel(R) Smart Connect Technology Agent\iSCTHIDMonitor.exe
(NXP) C:\Program Files\NXP Semiconductors\PN533NFCService\bin\NFCService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Touch to Share\HPTouchShare.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett Packard) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Audio\HPWA.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe
(Dropbox, Inc.) C:\Users\hp\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe
(CyberLink Corp.) C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(CyberLink) C:\Program Files (x86)\Cyberlink\YouCam\YCMMirage.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-10-01] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-10-24] (IDT, Inc.)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [HPTouchToShare] - C:\Program Files\Hewlett-Packard\HP Touch to Share\HPTouchShare.exe [497048 2011-11-29] (Hewlett-Packard)
HKLM\...\Run: [SetDefault] - C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [43320 2011-11-22] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKLM-x32\...\Run: [RUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe [115048 2011-09-20] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [576568 2011-11-14] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP CoolSense] - C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1342008 2011-08-26] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
Startup: C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\hp\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p24_serp_ie_de_display?ie=UTF8&tagbase=bds-p24&tbrId=v1_abb-channel-24_1b5351e370dc4e9687e1f88fad81504f_39_1007_20131111_DE_ie_sp_
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {1E39FBCC-1D50-49A9-BCA5-C2DE2070C728} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=08bd2a8700000000000088532ee10191&r=445
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\CoIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.dll (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\CoIEPlg.dll (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\jk3w60hv.default
FF NewTab: https://www.google.de/
FF SearchEngineOrder.1: Amazon 
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p24_serp_ff_de_display?ie=UTF8&tagbase=bds-p24&tag=bds-p24-serp-de-ff-21&tbrId=v1_abb-channel-24_1b5351e370dc4e9687e1f88fad81504f_39_1007_20131111_DE_ff_ab_&query=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\jk3w60hv.default\searchplugins\amazon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: abb - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\jk3w60hv.default\Extensions\abb@amazon.com.xpi
FF Extension: Adblock Plus - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\jk3w60hv.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-14] (Adobe Systems Incorporated)
R2 HPPRXSVC; C:\Program Files (x86)\Hewlett-Packard\HP Proximity Sensor\HPPRXSVC.exe [37432 2011-10-05] (Hewlett-Packard Development Company, L.P.)
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [184320 2011-07-07] (Intel Corporation)
R2 ISCTAgent; C:\Program Files (x86)\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [94208 2011-09-15] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
R2 NFCService; C:\Program Files\NXP Semiconductors\PN533NFCService\bin\NFCService.exe [627712 2011-12-02] (NXP)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-20] (Symantec Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-07-19] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2013-07-19] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130802.001\IDSvia64.sys [513184 2013-07-19] (Symantec Corporation)
R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2011-06-16] (Intel Corporation)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2011-09-15] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130803.004\ENG64.SYS [126040 2013-07-19] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130803.004\EX64.SYS [2098776 2013-07-19] (Symantec Corporation)
R3 nxpgeu; C:\Windows\System32\Drivers\nxpGenericUsb.sys [21824 2011-11-23] (NXP Semiconductors)
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [100352 2011-09-15] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [216064 2011-09-15] (Renesas Electronics Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-20] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-30 07:19 - 2013-11-30 07:19 - 02347384 _____ (ESET) C:\Users\hp\Downloads\esetsmartinstaller_enu.exe
2013-11-30 07:17 - 2013-11-30 07:17 - 00002168 _____ C:\Users\hp\Desktop\mbam.txt
2013-11-30 07:09 - 2013-11-30 07:09 - 00000000 ____D C:\Users\hp\AppData\Roaming\Malwarebytes
2013-11-30 07:08 - 2013-11-30 07:08 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-30 07:08 - 2013-11-30 07:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-30 07:08 - 2013-11-30 07:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-30 07:08 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-30 07:07 - 2013-11-30 07:07 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\hp\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-29 23:03 - 2013-11-29 23:03 - 00045618 _____ C:\Users\hp\Desktop\FRST2.txt
2013-11-29 23:02 - 2013-11-29 23:02 - 00031557 _____ C:\Users\hp\Desktop\combofix.txt
2013-11-29 23:01 - 2013-11-29 23:01 - 00031557 _____ C:\ComboFix.txt
2013-11-29 22:25 - 2013-11-29 23:02 - 00000000 ____D C:\Qoobox
2013-11-29 22:25 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-29 22:25 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-29 22:25 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-29 22:25 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-29 22:25 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-29 22:25 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-29 22:25 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-29 22:25 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-29 22:24 - 2013-11-29 22:55 - 00000000 ____D C:\Windows\erdnt
2013-11-29 22:23 - 2013-11-29 22:23 - 05150163 ____R (Swearware) C:\Users\hp\Desktop\ComboFix.exe
2013-11-29 22:23 - 2013-11-29 19:21 - 01959024 _____ (Farbar) C:\Users\hp\Desktop\FRST64.exe
2013-11-29 22:21 - 2013-11-29 22:23 - 05150163 _____ (Swearware) C:\Users\hp\Downloads\ComboFix.exe
2013-11-29 22:17 - 2013-11-29 22:17 - 00017251 _____ C:\Users\hp\Desktop\AdwCleaner[S0].txt
2013-11-29 22:15 - 2013-11-29 22:16 - 00000000 ____D C:\AdwCleaner
2013-11-29 22:12 - 2013-11-29 22:12 - 01091882 _____ C:\Users\hp\Downloads\adwcleaner.exe
2013-11-29 19:44 - 2013-11-29 19:44 - 00262144 _____ C:\Windows\Minidump\112913-9734-01.dmp
2013-11-29 19:44 - 2013-11-29 19:44 - 00000000 ____D C:\Windows\Minidump
2013-11-29 19:38 - 2013-11-29 19:38 - 00032884 _____ C:\Users\hp\Desktop\gmer.log
2013-11-29 19:31 - 2013-11-29 19:20 - 00000466 _____ C:\Users\hp\Desktop\defogger_disable.log
2013-11-29 19:25 - 2013-11-29 19:25 - 00377856 _____ C:\Users\hp\Downloads\gmer_2.1.19163.exe
2013-11-29 19:24 - 2013-11-30 16:15 - 00019751 _____ C:\Users\hp\Desktop\FRST.txt
2013-11-29 19:23 - 2013-11-29 19:23 - 00020889 _____ C:\Users\hp\Downloads\Addition.txt
2013-11-29 19:23 - 2013-11-29 19:23 - 00020889 _____ C:\Users\hp\Desktop\Addition.txt
2013-11-29 19:22 - 2013-11-29 19:23 - 00046781 _____ C:\Users\hp\Downloads\FRST.txt
2013-11-29 19:22 - 2013-11-29 19:22 - 00000000 ____D C:\FRST
2013-11-29 19:21 - 2013-11-29 19:21 - 01959024 _____ (Farbar) C:\Users\hp\Downloads\FRST64.exe
2013-11-29 19:20 - 2013-11-29 19:20 - 00000466 _____ C:\Users\hp\Downloads\defogger_disable.log
2013-11-29 19:20 - 2013-11-29 19:20 - 00000000 _____ C:\Users\hp\defogger_reenable
2013-11-29 19:18 - 2013-11-29 19:18 - 00050477 _____ C:\Users\hp\Downloads\Defogger.exe
2013-11-28 23:18 - 2013-11-28 23:18 - 00000800 _____ C:\Users\hp\Desktop\Texmaker.lnk
2013-11-28 23:18 - 2013-11-28 23:18 - 00000000 ____D C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Texmaker
2013-11-28 23:18 - 2013-11-28 23:18 - 00000000 ____D C:\Program Files\Texmaker
2013-11-28 23:14 - 2013-11-28 23:14 - 00000000 ____D C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiKTeX 2.9
2013-11-28 23:13 - 2013-11-28 23:13 - 00000000 ____D C:\Users\hp\AppData\Roaming\MiKTeX
2013-11-28 23:13 - 2013-11-28 23:13 - 00000000 ____D C:\Users\hp\AppData\Local\MiKTeX
2013-11-28 23:11 - 2013-11-28 23:12 - 00000000 ____D C:\Program Files\Miktex
2013-11-28 22:52 - 2013-11-28 22:52 - 09728000 _____ (MiKTeX.org) C:\Users\hp\Downloads\setup-2.9.4503-x64.exe
2013-11-28 22:39 - 2013-11-28 22:39 - 00000000 ____D C:\Users\hp\AppData\Roaming\xm1
2013-11-28 22:35 - 2013-11-28 22:37 - 54663901 _____ C:\Users\hp\Downloads\texmakerwin3241_install.exe
2013-11-22 21:27 - 2013-11-22 21:27 - 08187828 _____ C:\Users\hp\Downloads\IMSLP169365-PMLP301079-Weber_-_Clarinet_Quintet_Op34_Mov_1_manuscript.pdf.part
2013-11-20 17:19 - 2013-11-20 17:19 - 00071148 _____ C:\Users\hp\Downloads\Liste_der_100_groessten_Arbeitgeber_Berlins-data.pdf;jsessionid=3CAAAC3DF1F35D684C03D9FFE569BA0F.repl21
2013-11-17 10:52 - 2013-11-17 10:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 08:25 - 2013-11-15 08:25 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2013-11-14 09:25 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 09:25 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 09:25 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 09:25 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 09:25 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 09:25 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 09:25 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 09:25 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 09:25 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 09:25 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 09:25 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 09:25 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 09:25 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 09:25 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 09:25 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 09:25 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 09:25 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 09:25 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 09:25 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 09:25 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 09:25 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 09:25 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 09:25 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 09:24 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 09:24 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 09:24 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 09:24 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 09:24 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 09:24 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 09:24 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 09:24 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-13 10:25 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 10:25 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 10:25 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 10:25 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 10:25 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 10:25 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 10:25 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 10:25 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 10:25 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 10:25 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 10:25 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 10:25 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 10:25 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 10:25 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 10:25 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 10:25 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 10:25 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 10:25 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 10:25 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 10:25 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 10:25 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 10:25 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 10:25 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 10:25 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 10:25 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 10:25 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 10:25 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 10:25 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 10:25 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 10:25 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-12 09:26 - 2013-11-12 09:26 - 00000000 ____D C:\Users\Public\CyberLink
2013-11-12 09:26 - 2013-11-12 09:26 - 00000000 ____D C:\Users\hp\Documents\CyberLink
2013-11-12 09:26 - 2013-11-12 09:26 - 00000000 ____D C:\Users\hp\AppData\Roaming\WebApp
2013-11-11 11:13 - 2013-11-11 11:14 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-11-11 11:13 - 2013-11-11 11:13 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.7900.dll
2013-11-11 11:13 - 2013-11-11 11:13 - 00000000 ____D C:\Users\hp\Documents\PDF Architect Files
2013-11-11 11:13 - 2013-11-11 11:13 - 00000000 ____D C:\Program Files (x86)\PDF Architect
2013-11-11 11:13 - 2013-04-09 15:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2013-11-11 11:13 - 2012-05-05 11:54 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2013-11-11 11:13 - 2012-05-05 11:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2013-11-11 11:13 - 2012-05-05 11:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2013-11-11 11:13 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2013-11-11 11:13 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2013-11-11 11:13 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2013-11-11 11:10 - 2013-11-11 11:11 - 17810632 _____ (pdfforge GmbH) C:\Users\hp\Downloads\PDFCreator-1_7_1_setup.exe
2013-11-10 10:54 - 2013-11-10 10:54 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-11-06 23:25 - 2013-11-15 08:25 - 00000000 ____D C:\Program Files\McAfee Security Scan
2013-11-06 23:23 - 2013-11-06 23:23 - 00000000 ____D C:\Users\hp\AppData\Local\Google
2013-11-06 23:23 - 2013-08-30 09:51 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-11-06 23:23 - 2013-08-30 09:51 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-11-06 23:23 - 2013-08-30 09:51 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-11-06 23:22 - 2013-11-10 10:54 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-11-06 23:22 - 2013-11-06 23:23 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-11-06 23:22 - 2013-11-06 23:22 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-11-06 23:22 - 2013-11-06 23:22 - 00000000 ____D C:\Users\hp\AppData\Roaming\TuneUp Software
2013-11-06 23:21 - 2013-11-06 23:21 - 00001536 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-11-06 23:21 - 2013-11-06 23:21 - 00000000 ____D C:\Users\hp\AppData\Roaming\DVDVideoSoft
2013-11-06 23:21 - 2013-11-06 23:21 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-06 23:19 - 2013-11-06 23:19 - 32206488 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\hp\Downloads\FreeYouTubeToMP3Converter_3.12.16.1030.exe
2013-11-06 23:00 - 2013-11-06 23:00 - 00000000 ____D C:\Users\hp\AppData\Local\Macromedia
2013-11-06 22:57 - 2013-11-06 22:57 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2013-11-06 22:57 - 2013-11-06 22:57 - 00000000 ____D C:\ProgramData\McAfee
2013-11-06 22:56 - 2013-11-06 22:56 - 01070944 _____ (Solid State Networks) C:\Users\hp\Downloads\install_flashplayer11x32_mssa_aaa_aih.exe
2013-11-05 16:44 - 2013-11-18 07:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-05 16:44 - 2013-11-17 16:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2013-11-05 16:44 - 2013-11-17 10:42 - 00000000 ____D C:\Users\hp\AppData\Local\Mozilla
2013-11-05 16:44 - 2013-11-05 16:45 - 00000000 ____D C:\Users\hp\AppData\Roaming\Mozilla
2013-11-05 16:44 - 2013-11-05 16:44 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-05 16:44 - 2013-11-05 16:44 - 00000000 ____D C:\ProgramData\Mozilla
2013-11-05 11:32 - 2013-11-05 11:32 - 00000000 ____D C:\Users\hp\AppData\Roaming\WinRAR
2013-11-05 11:31 - 2013-11-05 11:31 - 00000000 ____D C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-11-05 11:31 - 2013-11-05 11:31 - 00000000 ____D C:\Program Files\WinRAR
2013-11-04 17:12 - 2013-11-04 17:47 - 00000000 ____D C:\Users\hp\Documents\Jobs

==================== One Month Modified Files and Folders =======

2013-11-30 16:15 - 2013-11-29 19:24 - 00019751 _____ C:\Users\hp\Desktop\FRST.txt
2013-11-30 15:37 - 2013-07-18 20:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-30 15:33 - 2013-09-06 07:50 - 00000000 ____D C:\Users\hp\AppData\Roaming\Dropbox
2013-11-30 14:49 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-30 14:49 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-30 14:46 - 2011-12-27 02:34 - 00697082 _____ C:\Windows\system32\perfh007.dat
2013-11-30 14:46 - 2011-12-27 02:34 - 00148346 _____ C:\Windows\system32\perfc007.dat
2013-11-30 14:46 - 2009-07-14 06:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-30 14:42 - 2013-09-06 07:51 - 00000000 ___RD C:\Users\hp\Dropbox
2013-11-30 14:42 - 2013-07-23 07:43 - 00000000 ____D C:\Users\hp\AppData\Local\Windows Live
2013-11-30 14:42 - 2013-07-13 16:11 - 00000000 ____D C:\Users\hp\AppData\Roaming\Skype
2013-11-30 14:41 - 2010-11-21 04:47 - 00052074 _____ C:\Windows\PFRO.log
2013-11-30 14:41 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-30 14:41 - 2009-07-14 05:51 - 00063506 _____ C:\Windows\setupact.log
2013-11-30 09:21 - 2013-04-07 13:37 - 01573239 _____ C:\Windows\WindowsUpdate.log
2013-11-30 07:19 - 2013-11-30 07:19 - 02347384 _____ (ESET) C:\Users\hp\Downloads\esetsmartinstaller_enu.exe
2013-11-30 07:17 - 2013-11-30 07:17 - 00002168 _____ C:\Users\hp\Desktop\mbam.txt
2013-11-30 07:09 - 2013-11-30 07:09 - 00000000 ____D C:\Users\hp\AppData\Roaming\Malwarebytes
2013-11-30 07:08 - 2013-11-30 07:08 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-30 07:08 - 2013-11-30 07:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-30 07:08 - 2013-11-30 07:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-30 07:07 - 2013-11-30 07:07 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\hp\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-29 23:03 - 2013-11-29 23:03 - 00045618 _____ C:\Users\hp\Desktop\FRST2.txt
2013-11-29 23:02 - 2013-11-29 23:02 - 00031557 _____ C:\Users\hp\Desktop\combofix.txt
2013-11-29 23:02 - 2013-11-29 22:25 - 00000000 ____D C:\Qoobox
2013-11-29 23:01 - 2013-11-29 23:01 - 00031557 _____ C:\ComboFix.txt
2013-11-29 23:01 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-11-29 22:55 - 2013-11-29 22:24 - 00000000 ____D C:\Windows\erdnt
2013-11-29 22:40 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-11-29 22:23 - 2013-11-29 22:23 - 05150163 ____R (Swearware) C:\Users\hp\Desktop\ComboFix.exe
2013-11-29 22:23 - 2013-11-29 22:21 - 05150163 _____ (Swearware) C:\Users\hp\Downloads\ComboFix.exe
2013-11-29 22:17 - 2013-11-29 22:17 - 00017251 _____ C:\Users\hp\Desktop\AdwCleaner[S0].txt
2013-11-29 22:16 - 2013-11-29 22:15 - 00000000 ____D C:\AdwCleaner
2013-11-29 22:12 - 2013-11-29 22:12 - 01091882 _____ C:\Users\hp\Downloads\adwcleaner.exe
2013-11-29 19:44 - 2013-11-29 19:44 - 00262144 _____ C:\Windows\Minidump\112913-9734-01.dmp
2013-11-29 19:44 - 2013-11-29 19:44 - 00000000 ____D C:\Windows\Minidump
2013-11-29 19:38 - 2013-11-29 19:38 - 00032884 _____ C:\Users\hp\Desktop\gmer.log
2013-11-29 19:25 - 2013-11-29 19:25 - 00377856 _____ C:\Users\hp\Downloads\gmer_2.1.19163.exe
2013-11-29 19:23 - 2013-11-29 19:23 - 00020889 _____ C:\Users\hp\Downloads\Addition.txt
2013-11-29 19:23 - 2013-11-29 19:23 - 00020889 _____ C:\Users\hp\Desktop\Addition.txt
2013-11-29 19:23 - 2013-11-29 19:22 - 00046781 _____ C:\Users\hp\Downloads\FRST.txt
2013-11-29 19:22 - 2013-11-29 19:22 - 00000000 ____D C:\FRST
2013-11-29 19:21 - 2013-11-29 22:23 - 01959024 _____ (Farbar) C:\Users\hp\Desktop\FRST64.exe
2013-11-29 19:21 - 2013-11-29 19:21 - 01959024 _____ (Farbar) C:\Users\hp\Downloads\FRST64.exe
2013-11-29 19:20 - 2013-11-29 19:31 - 00000466 _____ C:\Users\hp\Desktop\defogger_disable.log
2013-11-29 19:20 - 2013-11-29 19:20 - 00000466 _____ C:\Users\hp\Downloads\defogger_disable.log
2013-11-29 19:20 - 2013-11-29 19:20 - 00000000 _____ C:\Users\hp\defogger_reenable
2013-11-29 19:20 - 2013-06-26 23:05 - 00000000 ____D C:\Users\hp
2013-11-29 19:18 - 2013-11-29 19:18 - 00050477 _____ C:\Users\hp\Downloads\Defogger.exe
2013-11-28 23:18 - 2013-11-28 23:18 - 00000800 _____ C:\Users\hp\Desktop\Texmaker.lnk
2013-11-28 23:18 - 2013-11-28 23:18 - 00000000 ____D C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Texmaker
2013-11-28 23:18 - 2013-11-28 23:18 - 00000000 ____D C:\Program Files\Texmaker
2013-11-28 23:14 - 2013-11-28 23:14 - 00000000 ____D C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiKTeX 2.9
2013-11-28 23:13 - 2013-11-28 23:13 - 00000000 ____D C:\Users\hp\AppData\Roaming\MiKTeX
2013-11-28 23:13 - 2013-11-28 23:13 - 00000000 ____D C:\Users\hp\AppData\Local\MiKTeX
2013-11-28 23:12 - 2013-11-28 23:11 - 00000000 ____D C:\Program Files\Miktex
2013-11-28 22:52 - 2013-11-28 22:52 - 09728000 _____ (MiKTeX.org) C:\Users\hp\Downloads\setup-2.9.4503-x64.exe
2013-11-28 22:39 - 2013-11-28 22:39 - 00000000 ____D C:\Users\hp\AppData\Roaming\xm1
2013-11-28 22:37 - 2013-11-28 22:35 - 54663901 _____ C:\Users\hp\Downloads\texmakerwin3241_install.exe
2013-11-28 13:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-25 13:43 - 2013-10-01 12:50 - 00000000 ____D C:\Users\hp\Documents\Uni
2013-11-24 12:47 - 2013-06-26 23:05 - 00003696 _____ C:\Windows\System32\Tasks\Registration
2013-11-22 22:02 - 2013-09-14 08:53 - 00000000 ____D C:\Users\hp\Documents\Noten
2013-11-22 21:27 - 2013-11-22 21:27 - 08187828 _____ C:\Users\hp\Downloads\IMSLP169365-PMLP301079-Weber_-_Clarinet_Quintet_Op34_Mov_1_manuscript.pdf.part
2013-11-20 17:19 - 2013-11-20 17:19 - 00071148 _____ C:\Users\hp\Downloads\Liste_der_100_groessten_Arbeitgeber_Berlins-data.pdf;jsessionid=3CAAAC3DF1F35D684C03D9FFE569BA0F.repl21
2013-11-18 07:48 - 2013-11-05 16:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-17 16:40 - 2013-11-05 16:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2013-11-17 10:52 - 2013-11-17 10:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-17 10:42 - 2013-11-05 16:44 - 00000000 ____D C:\Users\hp\AppData\Local\Mozilla
2013-11-15 08:25 - 2013-11-15 08:25 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2013-11-15 08:25 - 2013-11-06 23:25 - 00000000 ____D C:\Program Files\McAfee Security Scan
2013-11-14 09:25 - 2013-09-08 09:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-12 09:26 - 2013-11-12 09:26 - 00000000 ____D C:\Users\Public\CyberLink
2013-11-12 09:26 - 2013-11-12 09:26 - 00000000 ____D C:\Users\hp\Documents\CyberLink
2013-11-12 09:26 - 2013-11-12 09:26 - 00000000 ____D C:\Users\hp\AppData\Roaming\WebApp
2013-11-12 09:26 - 2013-06-26 23:14 - 00000000 ____D C:\Users\hp\AppData\Roaming\CyberLink
2013-11-12 09:26 - 2013-06-26 23:14 - 00000000 ____D C:\Users\hp\AppData\Local\CyberLink
2013-11-12 09:26 - 2011-12-26 18:06 - 00000000 ____D C:\ProgramData\CyberLink
2013-11-11 11:14 - 2013-11-11 11:13 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-11-11 11:13 - 2013-11-11 11:13 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.7900.dll
2013-11-11 11:13 - 2013-11-11 11:13 - 00000000 ____D C:\Users\hp\Documents\PDF Architect Files
2013-11-11 11:13 - 2013-11-11 11:13 - 00000000 ____D C:\Program Files (x86)\PDF Architect
2013-11-11 11:11 - 2013-11-11 11:10 - 17810632 _____ (pdfforge GmbH) C:\Users\hp\Downloads\PDFCreator-1_7_1_setup.exe
2013-11-10 10:55 - 2013-10-23 12:03 - 00001685 _____ C:\Users\hp\Desktop\matlab - Verknüpfung.lnk
2013-11-10 10:54 - 2013-11-10 10:54 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-11-10 10:54 - 2013-11-06 23:22 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-11-10 10:54 - 2013-06-26 23:05 - 00000000 ____D C:\Users\hp\AppData\Local\VirtualStore
2013-11-06 23:23 - 2013-11-06 23:23 - 00000000 ____D C:\Users\hp\AppData\Local\Google
2013-11-06 23:23 - 2013-11-06 23:22 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-11-06 23:22 - 2013-11-06 23:22 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-11-06 23:22 - 2013-11-06 23:22 - 00000000 ____D C:\Users\hp\AppData\Roaming\TuneUp Software
2013-11-06 23:21 - 2013-11-06 23:21 - 00001536 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-11-06 23:21 - 2013-11-06 23:21 - 00000000 ____D C:\Users\hp\AppData\Roaming\DVDVideoSoft
2013-11-06 23:21 - 2013-11-06 23:21 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-06 23:19 - 2013-11-06 23:19 - 32206488 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\hp\Downloads\FreeYouTubeToMP3Converter_3.12.16.1030.exe
2013-11-06 23:00 - 2013-11-06 23:00 - 00000000 ____D C:\Users\hp\AppData\Local\Macromedia
2013-11-06 23:00 - 2013-06-26 23:06 - 00000000 ____D C:\Users\hp\AppData\Local\Adobe
2013-11-06 22:57 - 2013-11-06 22:57 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2013-11-06 22:57 - 2013-11-06 22:57 - 00000000 ____D C:\ProgramData\McAfee
2013-11-06 22:57 - 2013-07-18 20:24 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-06 22:57 - 2011-12-26 17:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-06 22:56 - 2013-11-06 22:56 - 01070944 _____ (Solid State Networks) C:\Users\hp\Downloads\install_flashplayer11x32_mssa_aaa_aih.exe
2013-11-05 16:45 - 2013-11-05 16:44 - 00000000 ____D C:\Users\hp\AppData\Roaming\Mozilla
2013-11-05 16:44 - 2013-11-05 16:44 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-05 16:44 - 2013-11-05 16:44 - 00000000 ____D C:\ProgramData\Mozilla
2013-11-05 11:32 - 2013-11-05 11:32 - 00000000 ____D C:\Users\hp\AppData\Roaming\WinRAR
2013-11-05 11:31 - 2013-11-05 11:31 - 00000000 ____D C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-11-05 11:31 - 2013-11-05 11:31 - 00000000 ____D C:\Program Files\WinRAR
2013-11-04 17:47 - 2013-11-04 17:12 - 00000000 ____D C:\Users\hp\Documents\Jobs
2013-11-04 17:26 - 2013-10-01 12:50 - 00000000 ____D C:\Users\hp\Documents\Reisen
2013-11-01 21:17 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.7900.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-28 13:10

==================== End Of Log ============================